220.87.166.201

Medium 30d list only

Suspicious SSH authentication attempts against monitored systems.

Request review Check AbuseIPDB JSON

Risk score38/100

Detection volume+16Sensor corroboration+10Signal class+12Recency+0

Address intelligence

cached

CountrySouth KoreaKR

City / regionSouth Korea

NetworkKorea Telecom

ASN—

Reverse DNS—

Detections4total observations

Reporting sensors2distinct collectors

First seen2026-06-29 19:59 GMT+81 month ago

Last seen2026-07-26 10:09 GMT+829 days ago

Blocklist window30d list only

Reporting sensors

which collectors observed this address

SSH Sensor 013 observation(s) · last 2026-07-26 10:09 GMT+8SSH
SSH Sensor 031 observation(s) · last 2026-06-29 19:59 GMT+8SSH

Sensor names are anonymised. Collector hostnames and log contents are never published.

Observation history

1 signal record(s)

Suspicious SSH authentication attemptsMediumSSH abuse
4 detection(s) from 2 sensor(s) · first seen 2026-06-29 19:59 GMT+8 · last seen 2026-07-26 10:09 GMT+8 (29 days ago) · active
Suspicious SSH authentication attempts against monitored systems.

Abuse Radar publishes sanitized indicators only. Severity is a triage hint computed from detection volume, sensor corroboration, signal class and recency — it is not an attribution claim. See methodology.