JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.189.12.22

202.189.12.22 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 100%: ?

100%

ISP	Shandong eshinton Network Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS139180
Domain Name	cnnic.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.189.12.22

Whois 202.189.12.22

IP Abuse Reports for 202.189.12.22:

This IP address has been reported a total of 33 times from 27 distinct sources. 202.189.12.22 was first reported on July 23rd 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Josh S.	2026-07-24 08:08:12 (9 hours ago)	Blocked by UFW on Mailcow [22/tcp] Source port: 55752 TTL: 109 Packet length: 52 TOS: 0x00 If this ... show more Blocked by UFW on Mailcow [22/tcp] Source port: 55752 TTL: 109 Packet length: 52 TOS: 0x00 If this was a mistake contact me: [email protected] show less	Port Scan SSH Brute-Force
🇳🇱 ipoac.nl	2026-07-24 03:38:31 (13 hours ago)	2026-07-24T02:19:00.003540+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12 ... show more 2026-07-24T02:19:00.003540+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 63976: invalid format [preauth] 2026-07-24T03:08:04.263138+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 52231: invalid format [preauth] 2026-07-24T03:08:04.263138+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 52231: invalid format [preauth] 2026-07-24T03:58:09.490922+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 52105: invalid format [preauth] 2026-07-24T03:58:09.490922+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 52105: invalid format [preauth] 2026-07-24T04:47:47.275779+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 57732: invalid format [preauth] 2026-07-24T04:47:47.275779+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 57732: invalid format [preauth] 2026-07-24T05:38:30.188642+02:00 ip show less	SSH
🇩🇪 BanHammer99	2026-07-24 02:30:08 (14 hours ago)	Reported by VPN-flk	Brute-Force SSH
Anonymous	2026-07-24 02:18:08 (15 hours ago)	SSH brute force attempt. User: root, Pass: [REDACTED]	Brute-Force SSH
🇬🇧 andypiper	2026-07-24 01:02:57 (16 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇳🇱 knock	2026-07-24 00:34:11 (16 hours ago)	Knock-Knock honeypot brute-force: SSH (3 total hits)	Brute-Force SSH
🇳🇱 Alboweb B.V.	2026-07-24 00:11:19 (17 hours ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇳🇱 ipoac.nl	2026-07-23 23:28:39 (17 hours ago)	2026-07-23T17:51:02.784694+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12 ... show more 2026-07-23T17:51:02.784694+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 64256: invalid format [preauth] 2026-07-23T18:41:37.595386+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 58029: invalid format [preauth] 2026-07-23T19:33:03.127682+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 58580: invalid format [preauth] 2026-07-23T20:24:49.238226+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 64362: invalid format [preauth] 2026-07-23T21:15:42.079104+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 65414: invalid format [preauth] 2026-07-23T22:06:57.519286+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 52048: invalid format [preauth] 2026-07-23T22:57:16.669405+02:00 ipoac.nl sshd-session-: banner exchange: Connection from 202.189.12.22 port 57979: invalid format [preauth] 2026-07-23T23:47:29.122155+02:00 ip show less	SSH
🇹🇷 Threat.live	2026-07-23 21:40:02 (19 hours ago)	Suspicious Connection Attempts	Brute-Force
🇳🇱 mdekock	2026-07-23 17:33:43 (23 hours ago)	Jul 23 17:50:24 excalibur sshd[3870550]: Failed password for root from 202.189.12.22 port 56892 ssh2 ... show more Jul 23 17:50:24 excalibur sshd[3870550]: Failed password for root from 202.189.12.22 port 56892 ssh2 Jul 23 17:50:26 excalibur sshd[3870550]: Connection closed by authenticating user root 202.189.12.22 port 56892 [preauth] Jul 23 19:33:42 excalibur sshd[425]: Connection reset by 202.189.12.22 port 50866 [preauth] ... show less	Brute-Force SSH
🇳🇱 Futunk	2026-07-23 17:26:41 (23 hours ago)	2026-07-23T18:35:41.190532+02:00 ezri sshd[178131]: User root from 202.189.12.22 not allowed because ... show more 2026-07-23T18:35:41.190532+02:00 ezri sshd[178131]: User root from 202.189.12.22 not allowed because not listed in AllowUsers 2026-07-23T18:35:41.431900+02:00 ezri sshd[178131]: Connection closed by invalid user root 202.189.12.22 port 52365 [preauth] 2026-07-23T19:26:41.473410+02:00 ezri sshd[181024]: User root from 202.189.12.22 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇳🇱 majo-it.nl	2026-07-23 16:35:44 (1 day ago)	Jul 23 16:35:42 fail2ban sshd[3924440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Jul 23 16:35:42 fail2ban sshd[3924440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.189.12.22 user=root Jul 23 16:35:43 fail2ban sshd[3924440]: Failed password for root from 202.189.12.22 port 53644 ssh2 ... show less	Brute-Force SSH
🇳🇱 big-cloud.nl	2026-07-23 16:18:41 (1 day ago)	Unauthorized SSH connection attempt	SSH
🇺🇸 COMPLEX	2026-07-23 16:08:44 (1 day ago)	Banned by Multi Agent · node …391q · reason=SSH preauth probe / DDoS · attempts=1 · SSH preauth prob ... show more Banned by Multi Agent · node …391q · reason=SSH preauth probe / DDoS · attempts=1 · SSH preauth probe / DDoS show less	Brute-Force SSH
🇺🇸 Josh S.	2026-07-23 16:07:34 (1 day ago)	Blocked by UFW on Mailcow [22/tcp] Source port: 52857 TTL: 109 Packet length: 52 TOS: 0x00 If this ... show more Blocked by UFW on Mailcow [22/tcp] Source port: 52857 TTL: 109 Packet length: 52 TOS: 0x00 If this was a mistake contact me: [email protected] show less	Port Scan SSH Brute-Force

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 212.164.178.188

🇫🇷 194.163.156.81

🇬🇧 87.236.176.81

🇺🇸 47.77.234.102

🇬🇧 35.203.210.27

🇨🇳 183.230.155.13

🇺🇸 166.62.41.190

🇫🇮 147.185.133.100

🇹🇭 110.164.193.195

🇸🇬 47.84.106.92

🇰🇷 220.80.223.144

🇳🇱 176.65.149.182

🇮🇪 18.202.246.2

🇬🇧 217.154.35.203

🇺🇸 205.210.31.66

🇹🇭 159.192.133.140

🇭🇰 123.58.212.136

🇩🇪 64.188.83.244

🇨🇳 27.0.135.6

🇧🇷 20.197.178.120