AbuseIPDB » 222.89.138.40

222.89.138.40 was found in our database!

This IP was reported 1,679 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET henan province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	hntele.com
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 222.89.138.40

Whois 222.89.138.40

IP Abuse Reports for 222.89.138.40:

This IP address has been reported a total of 1,679 times from 530 distinct sources. 222.89.138.40 was first reported on May 26th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
urnilxfgbez	2025-04-19 22:45:00 (1 hour ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
ghostwarriors	2025-04-19 20:50:10 (3 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
asagiri.moe	2025-04-19 19:31:01 (4 hours ago)	yuki sshd[49997]: Failed password for root from 222.89.138.40 port 55547 ssh2	Brute-Force SSH
sRichy	2025-04-19 18:21:54 (5 hours ago)	Apr 19 20:21:50 racetecweb sshd[837829]: User root from 222.89.138.40 not allowed because not listed ... show moreApr 19 20:21:50 racetecweb sshd[837829]: User root from 222.89.138.40 not allowed because not listed in AllowUsers Apr 19 20:21:51 racetecweb sshd[837831]: User root from 222.89.138.40 not allowed because not listed in AllowUsers Apr 19 20:21:53 racetecweb sshd[837833]: User root from 222.89.138.40 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
rroethof	2025-04-19 17:09:55 (6 hours ago)	2025-04-19T19:09:50.221236+02:00 mx2 sshd[2893665]: Failed password for root from 222.89.138.40 port ... show more2025-04-19T19:09:50.221236+02:00 mx2 sshd[2893665]: Failed password for root from 222.89.138.40 port 52043 ssh2 2025-04-19T19:09:52.094749+02:00 mx2 sshd[2893831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.89.138.40 user=root 2025-04-19T19:09:54.642163+02:00 mx2 sshd[2893831]: Failed password for root from 222.89.138.40 port 53612 ssh2 ... show less	Brute-Force SSH
SOC [GOLINE SA]	2025-04-19 17:01:09 (6 hours ago)	FortiGate detected brute force login from IP 222.89.138.40	Brute-Force
DAUGDE	2025-04-19 17:00:36 (6 hours ago)	2025-04-19T19:00:25.670900+02:00 v2202106133598155680 sshd[97593]: Failed password for root from 222 ... show more2025-04-19T19:00:25.670900+02:00 v2202106133598155680 sshd[97593]: Failed password for root from 222.89.138.40 port 21317 ssh2 2025-04-19T19:00:28.624234+02:00 v2202106133598155680 sshd[97595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.89.138.40 user=root 2025-04-19T19:00:31.231161+02:00 v2202106133598155680 sshd[97595]: Failed password for root from 222.89.138.40 port 29745 ssh2 2025-04-19T19:00:32.918344+02:00 v2202106133598155680 sshd[97597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.89.138.40 user=root 2025-04-19T19:00:35.396255+02:00 v2202106133598155680 sshd[97597]: Failed password for root from 222.89.138.40 port 31874 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-04-19 16:37:47 (7 hours ago)	2025-04-19T13:37:43.816287 host.likenet.com.br sshd[3689900]: Invalid user user from 222.89.138.40 p ... show more2025-04-19T13:37:43.816287 host.likenet.com.br sshd[3689900]: Invalid user user from 222.89.138.40 port 3110 2025-04-19T13:37:46.228416 host.likenet.com.br sshd[3689902]: Invalid user user from 222.89.138.40 port 3820 ... show less	SSH
security.rdmc.fr	2025-04-19 15:06:19 (8 hours ago)	IP in Malicious Database	Web App Attack
NetWatch	2025-04-19 13:45:38 (10 hours ago)	The IP 222.89.138.40 tried multiple SSH logins	Brute-Force SSH
RossTheRoss	2025-04-19 12:16:02 (11 hours ago)	Fail2ban: Attempted SSH Brute Force	Brute-Force SSH
hanb.jp	2025-04-19 10:00:57 (13 hours ago)	Apr 19 10:00:52 v4bgp sshd[2238592]: Failed password for root from 222.89.138.40 port 49195 ssh2<br ... show moreApr 19 10:00:52 v4bgp sshd[2238592]: Failed password for root from 222.89.138.40 port 49195 ssh2 Apr 19 10:00:54 v4bgp sshd[2238594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.89.138.40 user=root Apr 19 10:00:56 v4bgp sshd[2238594]: Failed password for root from 222.89.138.40 port 51767 ssh2 ... show less	Brute-Force SSH
Woodie	2025-04-19 02:34:01 (21 hours ago)	2025-04-18T22:33:45.062788-04:00 debian sshd[2814299]: Failed password for root from 222.89.138.40 p ... show more2025-04-18T22:33:45.062788-04:00 debian sshd[2814299]: Failed password for root from 222.89.138.40 port 7757 ssh2 2025-04-18T22:33:53.073347-04:00 debian sshd[2814377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.89.138.40 user=root 2025-04-18T22:33:55.319658-04:00 debian sshd[2814377]: Failed password for root from 222.89.138.40 port 12829 ssh2 2025-04-18T22:33:58.830624-04:00 debian sshd[2814409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.89.138.40 user=root 2025-04-18T22:34:00.766006-04:00 debian sshd[2814409]: Failed password for root from 222.89.138.40 port 16077 ssh2 ... show less	Brute-Force SSH
urnilxfgbez	2025-04-18 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
rtbh.com.tr	2025-04-18 20:06:10 (1 day ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩