121.22.85.2
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- China Unicom Hebei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Shijiazhuang, Hebei
No reports in the last 60 days
121.22.85.2 has been reported 56 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
56 from
38 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇿 kronos |
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:2 | alerts5m:26
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 2222
|
Port Scan Hacking Exploited Host | |
| 🇨🇿 lp |
SSH Brute force: 1 attempts were recorded from 121.22.85.2
2026-06-30T16:45:09+02:00 Invalid user NL5xUDpV2xRa from 121.22.85.2 port 37340
|
Brute-Force SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇨🇿 kronos |
IDS: FlowIntel scan-like source | SID:9900001 | alerts5m:25
|
Port Scan | |
| 🇷🇺 GoXLd |
2026-06-28T17:31:34.793560+02:00 gXdNODE2 sshd-session[359193]: Invalid user wqmarlduiqkmgs from 121.22.85.2 port 51048
...
|
Brute-Force SSH | |
| 🇧🇪 Fanjoe |
Jun 28 14:35:55 raspberrypi sshd\[18774\]: Did not receive identification string from 121.22.85.2\
|
DDoS Attack SSH | |
| 🇨🇿 lp |
SSH Brute force: 1 attempts were recorded from 121.22.85.2
2026-06-28T13:03:16+02:00 Invalid user NL5xUDpV2xRa from 121.22.85.2 port 26183
|
Brute-Force SSH | |
| 🇺🇸 Zeeaster |
abuse-sshd h1
|
Brute-Force SSH | |
| 🇧🇾 StatsMe |
2026-06-27T07:48:53.247059+0300
ET SCAN Potential SSH Scan
|
SSH Port Scan Brute-Force | |
| 🇫🇷 GoodOldTOS |
Connection to SSHTarpit
|
Hacking SSH | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=45132 dstport=22
|
Port Scan Hacking SSH | |
| 🇺🇸 RAP |
2026-06-27 15:53:49 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇩🇪 Justin F. | AS204464 |
Honeypot [nx-infrastructure]: Unauthorized connection attempt detected on 22/SSH
• Client: SSH-2.0-libssh_0.7.4
Reported by: Justin F.
|
SSH Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-06-27 15:24:42 | LAST=2026-06-27 15:24:43. Last seen 2026-06-27 15:24:44.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown