This IP address has been reported a total of
22
times from
21 distinct
sources.
222.253.59.104 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 6
reports;
Spain
with 2
reports;
Poland
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
18
times;
SSH
11
times;
Hacking
4
times;
Web App Attack
4
times;
Port Scan
3
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 1 SSH credential attack (attempts) on 05-10-2026. For more information o ...
show moreThis IP address carried out 1 SSH credential attack (attempts) on 05-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Synology DSM web login brute-force: 1 failed sign-in attempt(s) between 11:51:43 and 11:51:43 CEST o ...
show moreSynology DSM web login brute-force: 1 failed sign-in attempt(s) between 11:51:43 and 11:51:43 CEST on 2026-10-06; part of distributed low-and-slow campaign (1000+ IPs).
show less
Honeypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no s ...
show moreHoneypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no such service. There is no legitimate reason to connect to these ports.
Observed 1 connection(s) from 2026-10-04T23:15:16Z to 2026-10-04T23:15:16Z UTC.
2026-10-04T23:15:16Z tcp/2222 data: SSH-2.0-OpenSSH_8.9
Connection was blocked automatically at the firewall. Reported by an automated honeypot.
show less
2026-10-05T00:26:03.806179+00:00 instance-20241105-1951 sshd[3177622]: Connection closed by authenti ...
show more2026-10-05T00:26:03.806179+00:00 instance-20241105-1951 sshd[3177622]: Connection closed by authenticating user root 222.253.59.104 port 45087 [preauth]
...
show less
SSH Brute force: 1 attempts were recorded from 222.253.59.104
2026-10-05T00:50:10+02:00 Connection c ...
show moreSSH Brute force: 1 attempts were recorded from 222.253.59.104
2026-10-05T00:50:10+02:00 Connection closed by authenticating user root 222.253.59.104 port 43780 [preauth]
show less
Brute-Force
SSH
Anonymous
Oct 5 01:38:45 con01 sshd[3353620]: Failed password for root from 222.253.59.104 port 61326 ssh2
Oc ...
show moreOct 5 01:38:45 con01 sshd[3353620]: Failed password for root from 222.253.59.104 port 61326 ssh2
Oct 5 01:38:51 con01 sshd[3353819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.59.104 user=root
Oct 5 01:38:53 con01 sshd[3353819]: Failed password for root from 222.253.59.104 port 26006 ssh2
Oct 5 01:44:42 con01 sshd[3365467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.59.104 user=root
Oct 5 01:44:44 con01 sshd[3365467]: Failed password for root from 222.253.59.104 port 41342 ssh2
...
show less
Active SSH brute-force detected. Logs: 2026-10-05T07:13:53.357852+08:00 AVM-273525 sshd-session[1295 ...
show moreActive SSH brute-force detected. Logs: 2026-10-05T07:13:53.357852+08:00 AVM-273525 sshd-session[129584]: Failed password for root from 222.253.59.104 port 20398 ssh2 2026-10-05T07:14:27.871388+08:00 AVM-273525 sshd-session[129679]: pam_unix(sshd:auth):...
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-10-04T21:40:01Z and 2026-10-0 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-10-04T21:40:01Z and 2026-10-04T21:40:04Z
show less
SFTP Brute-Force login attempts or hacking probe detected against Pelican control panel. Evidence: 2 ...
show moreSFTP Brute-Force login attempts or hacking probe detected against Pelican control panel. Evidence: 2026-10-04T21:14:14.587845+00:00 pl-waw-01 wings[761033]: ERROR: [Oct 4 21:14:14.587] sftp: failed to accept inbound connection error=[ssh: no auth passed yet, the credentials provided were invalid] ip=222.253.59.104:35742 2026-10-04T21:15:33.833433+00:00 pl-waw-01 wings[761033]: ERROR: [Oct 4 21:15:33.833] sftp: failed to accept inbound connection error=[ssh: no auth passed yet, the credentials provided were invalid] ip=222.253.59.104:55800 2026-10-04T21:19:59.725689+00:00 pl-waw-01 wings[761033]: ERROR: [Oct 4 21:19:59.725] sftp: failed to accept inbound connection error=[ssh: no auth passed yet, the credentials provided were invalid] ip=222.253.59.104:39824 ...
show less
Oct 4 23:12:08 isp sshd[4089424]: Failed password for root from 222.253.59.104 port 38268 ssh2
Oct ...
show moreOct 4 23:12:08 isp sshd[4089424]: Failed password for root from 222.253.59.104 port 38268 ssh2
Oct 4 23:12:06 isp sshd[4089426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.59.104 user=root
Oct 4 23:12:08 isp sshd[4089426]: Failed password for root from 222.253.59.104 port 37504 ssh2
...
show less
