This IP address has been reported a total of
387
times from
121 distinct
sources.
31.222.235.204 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of lo ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of login attempts: 1
• Client: SSH-2.0-libssh2_1.11.0
• SSH key fingerprints: 33:ff:2e:dd:09:5a:19:ca:54:96:b9:f3:b1:fa:f1:51
show less
2026-05-31T14:13:49.192627+09:00 no4 sshd[2208676]: Disconnected from authenticating user root 31.22 ...
show more2026-05-31T14:13:49.192627+09:00 no4 sshd[2208676]: Disconnected from authenticating user root 31.222.235.204 port 58602 [preauth]
...
show less
May 31 04:34:57 *** sshd[1219464]: User root from 31.222.235.204 not allowed because not listed in A ...
show moreMay 31 04:34:57 *** sshd[1219464]: User root from 31.222.235.204 not allowed because not listed in AllowUsers
show less
2026-05-31T00:24:44.808288+00:00 thelemmy.club sshd-session[3508774]: Received disconnect from 31.22 ...
show more2026-05-31T00:24:44.808288+00:00 thelemmy.club sshd-session[3508774]: Received disconnect from 31.222.235.204 port 37374:11: disconnected by user [preauth]
2026-05-31T00:24:44.808338+00:00 thelemmy.club sshd-session[3508774]: Disconnected from invalid user root 31.222.235.204 port 37374 [preauth]
...
show less
May 30 23:56:21 uptime-kuma sshd[1514202]: Disconnected from authenticating user root 31.222.235.204 ...
show moreMay 30 23:56:21 uptime-kuma sshd[1514202]: Disconnected from authenticating user root 31.222.235.204 port 37422 [preauth]
...
show less
2026-05-31T06:08:46.338916+09:00 no1 sshd[2121536]: Disconnected from authenticating user root 31.22 ...
show more2026-05-31T06:08:46.338916+09:00 no1 sshd[2121536]: Disconnected from authenticating user root 31.222.235.204 port 55842 [preauth]
...
show less
May 30 22:45:56 *** sshd[3232616]: User root from 31.222.235.204 not allowed because not listed in A ...
show moreMay 30 22:45:56 *** sshd[3232616]: User root from 31.222.235.204 not allowed because not listed in AllowUsers
show less
May 29 20:50:07 server3 sshd[3278227]: User root from 31.222.235.204 not allowed because not listed ...
show moreMay 29 20:50:07 server3 sshd[3278227]: User root from 31.222.235.204 not allowed because not listed in AllowUsers
May 30 00:20:25 server3 sshd[3333969]: User root from 31.222.235.204 not allowed because not listed in AllowUsers
May 30 21:32:28 server3 sshd[3666062]: User root from 31.222.235.204 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 76 to
90
of 387 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩