JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 222.160.85.252

222.160.85.252 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	China Unicom Jilin province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	252.85.160.222.adsl-pool.jlccptt.net.cn
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Changchun, Jilin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 222.160.85.252

Whois 222.160.85.252

IP Abuse Reports for 222.160.85.252:

This IP address has been reported a total of 17 times from 13 distinct sources. 222.160.85.252 was first reported on May 19th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SiyCah	2026-05-23 06:00:03 (3 months ago)	222.160.85.252 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time ... show more 222.160.85.252 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 6s. Total bytes sent by tarpit: 403B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇫🇷 SiyCah	2026-05-22 06:00:02 (3 months ago)	222.160.85.252 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time ... show more 222.160.85.252 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 6s. Total bytes sent by tarpit: 403B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇺🇸 bigscoots.com	2026-05-22 01:16:10 (3 months ago)	222.160.85.252 (CN/China/252.85.160.222.adsl-pool.jlccptt.net.cn), 5 distributed sshd attacks on acc ... show more 222.160.85.252 (CN/China/252.85.160.222.adsl-pool.jlccptt.net.cn), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 21 20:15:52 15011 sshd[1008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.180.79.132 user=root May 21 20:15:53 15011 sshd[1008]: Failed password for root from 158.180.79.132 port 46004 ssh2 May 21 20:12:45 15011 sshd[32739]: Failed password for root from 222.160.85.252 port 43822 ssh2 May 21 20:12:42 15011 sshd[32739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.160.85.252 user=root May 21 19:17:04 15011 sshd[24965]: Failed password for root from 222.107.254.200 port 39958 ssh2 IP Addresses Blocked: 158.180.79.132 (KR/South Korea/-) show less	Brute-Force SSH
🇫🇮 GamesGames	2026-05-21 22:16:46 (3 months ago)	SSH login attempts	Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-05-21 17:33:47 (3 months ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇷 mailox	2026-05-21 16:10:20 (3 months ago)	Unauthorized SSH connection on tarpit ...	SSH
🇫🇷 SiyCah	2026-05-21 06:00:03 (3 months ago)	222.160.85.252 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 222.160.85.252 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 304B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇫🇷 SiyCah	2026-05-20 06:00:03 (3 months ago)	222.160.85.252 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 222.160.85.252 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 304B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇦🇺 Telemetry2U.com	2026-05-20 04:51:32 (3 months ago)	Unauthorized connection attempt to port 22 detected	SSH
🇩🇪 dispaisyenterprises	2026-05-20 03:57:45 (3 months ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 NetWatch	2026-05-19 20:24:01 (3 months ago)	The IP 222.160.85.252 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇩🇪 markawes	2026-05-19 17:27:16 (3 months ago)	[markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence ... show more [markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence: 2026-05-19T17:27:05.392707+00:00 sshd-session[533543]: Failed password for root from 222.160.85.252 port 38200 ssh2 2026-05-19T17:27:09.118440+00:00 sshd-session[533546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.160.85.252 user=root 2026-05-19T17:27:11.051768+00:00 sshd-session[533546]: Failed password for root from 222.160.85.252 port 38214 ssh2 2026-05-19T17:27:12.747426+00:00 sshd-session[533549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.160.85.252 user=root 2026-05-19T17:27:14.291854+00:00 sshd-session[533549]: Failed password for root from 222.160.85.252 port 37728 ssh2 show less	Brute-Force SSH
🇹🇷 Threat.live	2026-05-19 17:05:04 (3 months ago)	Threat.live: Brute Force	Brute-Force
🇺🇸 ShadowWhisperer	2026-05-19 16:08:25 (3 months ago)	SSH fingerprint.	Port Scan
🇺🇸 slish	2026-05-19 13:34:22 (3 months ago)	SSH honeypot: ssh_auth	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.170

🇺🇸 162.216.149.172

🇨🇳 123.53.113.203

🇯🇵 52.103.66.50

🇩🇪 47.245.138.78

🇨🇷 179.48.251.182

🇺🇸 162.216.150.23

🇺🇸 162.216.149.132

🇮🇩 103.139.126.5

🇯🇵 52.103.66.49

🇯🇵 52.103.66.48

🇻🇳 42.1.65.79

🇳🇱 20.73.199.251

🇩🇪 2a00:1450:4001:c17::66

🇺🇸 207.45.26.29

🇧🇷 190.115.84.25

🇺🇸 154.17.138.48

🇻🇳 112.197.2.116

🇧🇬 109.160.32.16

🇸🇮 102.220.161.86