This IP address has been reported a total of
8
times from
8 distinct
sources.
222.138.248.68 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Aug 29 02:12:36 srv05 sshd[171049]: Invalid user joshua from 222.138.248.68 port 22652
Aug 29 02:13: ...
show moreAug 29 02:12:36 srv05 sshd[171049]: Invalid user joshua from 222.138.248.68 port 22652
Aug 29 02:13:04 srv05 sshd[171207]: Invalid user cloud from 222.138.248.68 port 24060
Aug 29 02:13:25 srv05 sshd[171233]: Invalid user liuqi from 222.138.248.68 port 22998
Aug 29 02:14:16 srv05 sshd[171284]: Invalid user oracle from 222.138.248.68 port 24359
Aug 29 02:14:44 srv05 sshd[171289]: Invalid user cafe from 222.138.248.68 port 24147
...
show less
Brute-Force
Anonymous
2026-08-28_20:34:59.16573 User root from 222.138.248.68 not allowed because not listed in AllowUsers ...
show more2026-08-28_20:34:59.16573 User root from 222.138.248.68 not allowed because not listed in AllowUsers
2026-08-28_20:35:18.59840 Invalid user mysql from 222.138.248.68 port 23472
show less
2026-08-28T16:00:05.740112+03:00 cloud01 sshd[479022]: Invalid user lxx from 222.138.248.68 port 234 ...
show more2026-08-28T16:00:05.740112+03:00 cloud01 sshd[479022]: Invalid user lxx from 222.138.248.68 port 23447
2026-08-28T16:00:05.976470+03:00 cloud01 sshd[479022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.138.248.68
2026-08-28T16:00:07.609535+03:00 cloud01 sshd[479022]: Failed password for invalid user lxx from 222.138.248.68 port 23447 ssh2
2026-08-28T16:00:26.161374+03:00 cloud01 sshd[479035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.138.248.68 user=root
2026-08-28T16:00:27.678645+03:00 cloud01 sshd[479035]: Failed password for root from 222.138.248.68 port 24273 ssh2
...
show less
Failed 10 attempts using usernames: share, tmp, inspur, gpadmin, nexthink, cats, lasg, accounting, l ...
show moreFailed 10 attempts using usernames: share, tmp, inspur, gpadmin, nexthink, cats, lasg, accounting, live and barra
show less
2026-08-27T08:53:44.449127+02:00 aurora sshd[3365082]: Connection closed by 222.138.248.68 port 2423 ...
show more2026-08-27T08:53:44.449127+02:00 aurora sshd[3365082]: Connection closed by 222.138.248.68 port 24238 [preauth]
...
show less
Brute-Force
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩