AbuseIPDB » 222.160.142.218

222.160.142.218 was found in our database!

This IP was reported 1,751 times. Confidence of Abuse is 75%: ?

75%

ISP	China Unicom Jilin province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	218.142.160.222.adsl-pool.jlccptt.net.cn
Domain Name	chinaunicom.cn
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 222.160.142.218

Whois 222.160.142.218

IP Abuse Reports for 222.160.142.218:

This IP address has been reported a total of 1,751 times from 254 distinct sources. 222.160.142.218 was first reported on January 9th 2021, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-04-23 20:06:15 (5 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-04-22 20:06:14 (1 day ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
NXTwoThou	2025-04-22 09:02:55 (1 day ago)	IMAP	Brute-Force
INTEQ	2025-04-22 01:52:16 (1 day ago)	Brute force attack from 222.160.142.218	Brute-Force
Anonymous	2025-04-22 01:18:18 (1 day ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
rtbh.com.tr	2025-04-21 20:06:13 (2 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-04-21 00:43:28 (3 days ago)	2025-04-21T02:43:24.880842+02:00 ns dovecot: auth-worker(1899680): conn unix:auth-worker (pid=189955 ... show more2025-04-21T02:43:24.880842+02:00 ns dovecot: auth-worker(1899680): conn unix:auth-worker (pid=1899557,uid=121): auth-worker<7>: shadow([email protected],222.160.142.218,<I7/HJz8zpJ7eoI7a>): unknown user (given password: ramma72) 2025-04-21T02:43:27.690236+02:00 ns dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=222.160.142.218, lip=192.168.0.2, TLS, session=<I7/HJz8zpJ7eoI7a> ... show less	Web Spam Email Spam Port Scan Brute-Force
hostseries	2025-04-20 13:59:47 (3 days ago)	Brute-force cPanel Services	Brute-Force
Anonymous	2025-04-20 05:00:39 (3 days ago)	bruteforce	Brute-Force
rtbh.com.tr	2025-04-19 00:06:10 (5 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-04-18 20:06:10 (5 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-04-18 18:19:06 (5 days ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
danskefilm.dk	2025-04-18 17:25:01 (5 days ago)	IMAP password guessing	Brute-Force
hostseries	2025-04-17 15:37:25 (6 days ago)	Brute-force cPanel Services	Brute-Force
unhfree.net	2025-04-17 12:35:21 (6 days ago)	Apr 17 14:19:17 canopus postfix/smtpd[691284]: improper command pipelining after CONNECT from unknow ... show moreApr 17 14:19:17 canopus postfix/smtpd[691284]: improper command pipelining after CONNECT from unknown[222.160.142.218]: \026\003\001\001\212\001\000\001\206\003\003\346j\017\211M\v\264\224\031\253\244[\022\024\3253\370\312#\261v\032F\227\206\341OZ\nk"\304 ]\376\033l\230\347\276\005\330[\326\246I$fXo\211\335\377\a\360\310[\001\002 H\307S\333<\000\210\023\002\023\003\023\001\300,\3000\000\243\000\237\314\251\314\250\314\252\300\255 Apr 17 14:35:07 canopus postfix/smtpd[694559]: D50EADC04DF: reject: RCPT from unknown[222.160.142.218]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 17 14:35:07 canopus postfix/smtpd[694559]: D50EADC04DF: reject: RCPT from unknown[222.160.142.218]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to ... show less	Brute-Force Exploited Host

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩