This IP address has been reported a total of
61
times from
42 distinct
sources.
88.20.37.220 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:pop2024#
• Number of log ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:pop2024#
• Number of login attempts: 1
• Client: SSH-2.0-Go
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-06-30T06:15:48.591839 ******* sshd[3683005]: Connection closed by authenticating user root 88.2 ...
show more2026-06-30T06:15:48.591839 ******* sshd[3683005]: Connection closed by authenticating user root 88.20.37.220 port 43998 [preauth]
2026-06-30T06:49:23.343590 ******* sshd[3694483]: Connection closed by authenticating user root 88.20.37.220 port 50738 [preauth]
2026-06-30T06:52:23.639337 ******* sshd[3695351]: Connection closed by authenticating user root 88.20.37.220 port 42932 [preauth]
show less
2026-06-30T04:18:52.688639+00:00 xenon sshd-session[3952279]: Connection closed by authenticating us ...
show more2026-06-30T04:18:52.688639+00:00 xenon sshd-session[3952279]: Connection closed by authenticating user root 88.20.37.220 port 43418 [preauth]
2026-06-30T04:30:26.987462+00:00 xenon sshd-session[3966722]: Connection closed by authenticating user root 88.20.37.220 port 52502 [preauth]
2026-06-30T04:33:53.322600+00:00 xenon sshd-session[3969845]: Connection closed by authenticating user root 88.20.37.220 port 48222 [preauth]
...
show less
2026-06-30T03:38:46.010850+00:00 s10925611 sshd[3042655]: User root from 88.20.37.220 not allowed be ...
show more2026-06-30T03:38:46.010850+00:00 s10925611 sshd[3042655]: User root from 88.20.37.220 not allowed because not listed in AllowUsers
2026-06-30T03:43:16.044714+00:00 s10925611 sshd[3047259]: User root from 88.20.37.220 not allowed because not listed in AllowUsers
...
show less
2026-06-30T02:25:43.438153+00:00 s10925611 sshd[2971576]: User root from 88.20.37.220 not allowed be ...
show more2026-06-30T02:25:43.438153+00:00 s10925611 sshd[2971576]: User root from 88.20.37.220 not allowed because not listed in AllowUsers
2026-06-30T02:52:49.317459+00:00 s10925611 sshd[2997783]: User root from 88.20.37.220 not allowed because not listed in AllowUsers
2026-06-30T03:03:50.128779+00:00 s10925611 sshd[3008563]: User root from 88.20.37.220 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Anonymous
2026-06-30T03:56:28.958446+02:00 vm986549.cloud.nuxt.network sshd-session[5894]: Failed password for ...
show more2026-06-30T03:56:28.958446+02:00 vm986549.cloud.nuxt.network sshd-session[5894]: Failed password for root from 88.20.37.220 port 38818 ssh2
2026-06-30T04:06:27.989430+02:00 vm986549.cloud.nuxt.network sshd-session[5914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.20.37.220 user=root
2026-06-30T04:06:29.615204+02:00 vm986549.cloud.nuxt.network sshd-session[5914]: Failed password for root from 88.20.37.220 port 41040 ssh2
...
show less
Brute-Force
SSH
Anonymous
88.20.37.220 (ES/Spain/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports ...
show more88.20.37.220 (ES/Spain/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jun 29 21:32:00 server5 sshd[17697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.164.193.195 user=root
Jun 29 21:29:29 server5 sshd[16132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.224.230 user=root
Jun 29 21:29:30 server5 sshd[16132]: Failed password for root from 202.29.224.230 port 6509 ssh2
Jun 29 21:31:30 server5 sshd[17373]: Failed password for root from 212.171.24.193 port 47160 ssh2
Jun 29 21:30:01 server5 sshd[16417]: Failed password for root from 88.20.37.220 port 36056 ssh2
IP Addresses Blocked:
110.164.193.195 (TH/Thailand/-)
202.29.224.230 (TH/Thailand/-)
212.171.24.193 (IT/Italy/-)
show less
2026-06-30 00:41:38,155 quad proftpd[3052419] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (220.red-88-20-37 ...
show more2026-06-30 00:41:38,155 quad proftpd[3052419] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (220.red-88-20-37.staticip.rima-tde.net[88.20.37.220]): USER root: no such user found from 220.red-88-20-37.staticip.rima-tde.net [88.20.37.220] to 2.56.97.107:22
show less
Brute-Force
Exploited Host
SSH
Showing 1 to
15
of 61 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩