JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

222.67.197.249

Neutral Activity

Abuse confidence score ?

0% Low Risk

15 reports

8 reporters · latest 4 years ago

ISP	CHINANET shanghai province network
Usage Type	Fixed Line ISP
ASN	AS4812
Domain Name	online.sh.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

222.67.197.249 has been reported 15 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 222.67.197.249

Export CSV

This IP address has been reported a total of 15 times from 8 distinct sources. 222.67.197.249 was first reported on September 22nd 2021, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 FireGuard Server	2021-10-28 23:30:45 (4 years ago)	IP: 222.67.197.249 Ports affected Simple Mail Transfer (25) Abuse Confidence rating 43% Fou ... show more IP: 222.67.197.249 Ports affected Simple Mail Transfer (25) Abuse Confidence rating 43% Found in DNSBL('s) ASN Details AS4812 China Telecom Group China (CN) CIDR 222.64.0.0/13 Log Date: 29/10/2021 12:53:41 AM UTC show less	Email Spam Hacking
🇩🇪 bsoft.de	2021-10-26 14:16:19 (4 years ago)	2021-10-26T20:16:05.404177MailD imap[3146]: badlogin: 249.197.67.222.broad.xw.sh.dynamic.163data.com ... show more 2021-10-26T20:16:05.404177MailD imap[3146]: badlogin: 249.197.67.222.broad.xw.sh.dynamic.163data.com.cn [222.67.197.249] PLAIN [SASL(-13): authentication failure: Password verification failed] 2021-10-26T20:16:11.641948MailD imap[3146]: badlogin: 249.197.67.222.broad.xw.sh.dynamic.163data.com.cn [222.67.197.249] PLAIN [SASL(-13): authentication failure: Password verification failed] 2021-10-26T20:16:18.344142MailD imap[3146]: badlogin: 249.197.67.222.broad.xw.sh.dynamic.163data.com.cn [222.67.197.249] PLAIN [SASL(-13): authentication failure: Password verification failed] show less	Hacking Brute-Force
🇮🇳 A B	2021-10-18 14:01:37 (4 years ago)	none	FTP Brute-Force
🇲🇾 syokadmin	2021-10-15 00:57:23 (4 years ago)	(imapd) Failed IMAP login from 222.67.197.249 (CN/China/249.197.67.222.broad.xw.sh.dynamic.163data.c ... show more (imapd) Failed IMAP login from 222.67.197.249 (CN/China/249.197.67.222.broad.xw.sh.dynamic.163data.com.cn): 5 in the last 3600 secs show less	Brute-Force
🇲🇾 syokadmin	2021-10-14 20:35:40 (4 years ago)	(imapd) Failed IMAP login from 222.67.197.249 (CN/China/249.197.67.222.broad.xw.sh.dynamic.163data.c ... show more (imapd) Failed IMAP login from 222.67.197.249 (CN/China/249.197.67.222.broad.xw.sh.dynamic.163data.com.cn): 4 in the last 3600 secs show less	Brute-Force
🇩🇪 ipcop.net	2021-10-14 11:01:16 (4 years ago)	Oct 14 07:00:18 mail.srvfarm.net dovecot: auth-worker(700673): sql(marketing,222.67.197.249,<nhN49Ej ... show more Oct 14 07:00:18 mail.srvfarm.net dovecot: auth-worker(700673): sql(marketing,222.67.197.249,<nhN49EjO5K7eQ8X5>): unknown user Oct 14 07:00:27 mail.srvfarm.net dovecot: auth-worker(700673): sql(marketing,222.67.197.249,<nhN49EjO5K7eQ8X5>): unknown user Oct 14 07:00:39 mail.srvfarm.net dovecot: auth-worker(700673): sql(marketing,222.67.197.249,<nhN49EjO5K7eQ8X5>): unknown user Oct 14 07:00:58 mail.srvfarm.net dovecot: auth-worker(700673): sql(marketing,222.67.197.249,<nhN49EjO5K7eQ8X5>): unknown user Oct 14 07:01:15 mail.srvfarm.net dovecot: auth-worker(700673): sql(marketing,222.67.197.249,<nhN49EjO5K7eQ8X5>): unknown user show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 23:50:27 (4 years ago)	Oct 13 19:49:30 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/ ... show more Oct 13 19:49:30 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:49:38 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:49:50 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:50:09 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:50:26 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 23:50:27 (4 years ago)	Oct 13 19:49:30 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/ ... show more Oct 13 19:49:30 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:49:38 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:49:50 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:50:09 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:50:26 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 23:50:27 (4 years ago)	Oct 13 19:49:30 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/ ... show more Oct 13 19:49:30 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:49:38 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:49:50 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:50:09 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user Oct 13 19:50:26 mail.srvfarm.net dovecot: auth-worker(700673): sql(comercial,222.67.197.249,<GtWIlT/OHuveQ8X5>): unknown user show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 21:16:48 (4 years ago)	Oct 13 17:15:50 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222. ... show more Oct 13 17:15:50 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222.67.197.249,<rsH8bz3OWsPeQ8X5>): unknown user Oct 13 17:15:59 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222.67.197.249,<rsH8bz3OWsPeQ8X5>): unknown user Oct 13 17:16:11 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222.67.197.249,<rsH8bz3OWsPeQ8X5>): unknown user Oct 13 17:16:30 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222.67.197.249,<rsH8bz3OWsPeQ8X5>): unknown user Oct 13 17:16:47 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222.67.197.249,<rsH8bz3OWsPeQ8X5>): unknown user show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 21:16:48 (4 years ago)	Oct 13 17:15:50 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222. ... show more Oct 13 17:15:50 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222.67.197.249,<rsH8bz3OWsPeQ8X5>): unknown user Oct 13 17:15:59 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222.67.197.249,<rsH8bz3OWsPeQ8X5>): unknown user Oct 13 17:16:11 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222.67.197.249,<rsH8bz3OWsPeQ8X5>): unknown user Oct 13 17:16:30 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222.67.197.249,<rsH8bz3OWsPeQ8X5>): unknown user Oct 13 17:16:47 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],222.67.197.249,<rsH8bz3OWsPeQ8X5>): unknown user show less	Fraud VoIP Brute-Force
🇳🇱 Koen	2021-10-13 11:33:45 (4 years ago)	Auto Fail2Ban report, multiple IMAP login attempts.	Brute-Force
🇬🇧 headwall	2021-09-27 16:23:18 (5 years ago)	WordPress contact/comment-form spam by client 222.67.197.249	Web Spam
🇬🇧 headwall	2021-09-27 16:23:18 (5 years ago)	WordPress contact/comment-form spam by client 222.67.197.249	Web Spam
🇮🇹 codabar	2021-09-22 02:16:31 (5 years ago)	SMTP login attempts.	Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 210.1.59.163

🇺🇸 104.234.32.136

🇦🇺 203.18.243.123

🇧🇩 202.4.114.162

🇺🇸 191.101.241.242

🇮🇹 95.255.158.96

🇮🇷 94.184.17.112

🇳🇱 77.239.124.61

🇺🇸 70.182.12.165

🇺🇸 66.132.186.223

🇬🇷 62.38.20.61

🇨🇦 20.116.34.103

🇻🇳 14.225.251.219

🇧🇷 177.196.27.93

🇮🇳 160.187.54.202

🇮🇹 158.47.217.88

🇹🇭 118.194.251.58

🇫🇷 91.231.89.28

🇺🇸 65.49.213.86

🇧🇪 34.77.70.178