AbuseIPDB » 222.90.12.17

222.90.12.17 was found in our database!

This IP was reported 140 times. Confidence of Abuse is 100%: ?

100%

ISP	ChinaNet Shanxi (SN) Province Network
Usage Type	Data Center/Web Hosting/Transit
Domain Name	chinatelecom.com.cn
Country	China
City	Taiyuan, Shanxi

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 222.90.12.17

Whois 222.90.12.17

IP Abuse Reports for 222.90.12.17:

This IP address has been reported a total of 140 times from 104 distinct sources. 222.90.12.17 was first reported on October 16th 2022, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
strefapi_com	2024-08-09 07:17:49 (4 weeks ago)	Aug 9 09:17:07 mail sshd[1024799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show moreAug 9 09:17:07 mail sshd[1024799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.12.17 Aug 9 09:17:09 mail sshd[1024799]: Failed password for invalid user angela from 222.90.12.17 port 45990 ssh2 Aug 9 09:17:46 mail sshd[1024837]: Invalid user ubuntu from 222.90.12.17 port 52020 Aug 9 09:17:46 mail sshd[1024837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.12.17 Aug 9 09:17:48 mail sshd[1024837]: Failed password for invalid user ubuntu from 222.90.12.17 port 52020 ssh2 ... show less	Brute-Force SSH
lmathe	2024-08-09 06:28:21 (4 weeks ago)	Aug 9 08:20:03 h2908150 sshd[1264304]: Failed password for invalid user anu from 222.90.12.17 port ... show moreAug 9 08:20:03 h2908150 sshd[1264304]: Failed password for invalid user anu from 222.90.12.17 port 36554 ssh2 Aug 9 08:28:17 h2908150 sshd[1264431]: Connection from 222.90.12.17 port 33328 on 85.214.73.9 port 22 rdomain "" Aug 9 08:28:20 h2908150 sshd[1264431]: Invalid user admin1 from 222.90.12.17 port 33328 ... show less	Brute-Force SSH
NeverBehave	2024-08-09 05:33:40 (4 weeks ago)	Fail2ban Triggered	Brute-Force SSH
dwmp	2024-08-09 04:52:15 (4 weeks ago)	2024-08-09T06:50:47.068356news0.dwmp.it sshd[10849]: pam_unix(sshd:auth): authentication failure; lo ... show more2024-08-09T06:50:47.068356news0.dwmp.it sshd[10849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.12.17 2024-08-09T06:50:49.178475news0.dwmp.it sshd[10849]: Failed password for invalid user chenyihong from 222.90.12.17 port 43644 ssh2 2024-08-09T06:52:14.266610news0.dwmp.it sshd[10877]: User root from 222.90.12.17 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
TGCFabian	2024-08-08 22:30:45 (1 month ago)	Aug 8 22:29:48 VPS sshd[2433020]: Invalid user zebra from 222.90.12.17 port 54362 Aug 8 22:2 ... show moreAug 8 22:29:48 VPS sshd[2433020]: Invalid user zebra from 222.90.12.17 port 54362 Aug 8 22:29:48 VPS sshd[2433020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.12.17 Aug 8 22:29:48 VPS sshd[2433020]: Invalid user zebra from 222.90.12.17 port 54362 Aug 8 22:29:50 VPS sshd[2433020]: Failed password for invalid user zebra from 222.90.12.17 port 54362 ssh2 Aug 8 22:30:44 VPS sshd[2433505]: Invalid user uni from 222.90.12.17 port 39742 ... show less	Brute-Force SSH
LoNET	2024-08-08 22:06:40 (1 month ago)	Report 1286966 with IP 2329908 for SSH brute-force attack by source 2329191 via ssh-honeypot/0.2.0+h ... show moreReport 1286966 with IP 2329908 for SSH brute-force attack by source 2329191 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
TGCFabian	2024-08-08 22:06:12 (1 month ago)	Aug 8 22:05:21 VPS sshd[2429697]: Invalid user element from 222.90.12.17 port 39306 Aug 8 22 ... show moreAug 8 22:05:21 VPS sshd[2429697]: Invalid user element from 222.90.12.17 port 39306 Aug 8 22:05:21 VPS sshd[2429697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.12.17 Aug 8 22:05:21 VPS sshd[2429697]: Invalid user element from 222.90.12.17 port 39306 Aug 8 22:05:23 VPS sshd[2429697]: Failed password for invalid user element from 222.90.12.17 port 39306 ssh2 Aug 8 22:06:12 VPS sshd[2429746]: User root from 222.90.12.17 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
kosmonot	2024-08-08 20:11:56 (1 month ago)	Aug 8 16:06:36 buttnugget sshd[3594015]: Invalid user nginx from 222.90.12.17 port 52804 Aug ... show moreAug 8 16:06:36 buttnugget sshd[3594015]: Invalid user nginx from 222.90.12.17 port 52804 Aug 8 16:11:02 buttnugget sshd[3596273]: Invalid user qw from 222.90.12.17 port 59820 Aug 8 16:11:55 buttnugget sshd[3596743]: Invalid user jmr from 222.90.12.17 port 45364 ... show less	Port Scan Brute-Force SSH
Anonymous	2024-08-08 20:11:44 (1 month ago)	(sshd) Failed SSH login from 222.90.12.17 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction ... show more(sshd) Failed SSH login from 222.90.12.17 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Aug 8 16:04:00 server2 sshd[13646]: Invalid user nginx from 222.90.12.17 port 52978 Aug 8 16:04:00 server2 sshd[13646]: Failed password for invalid user nginx from 222.90.12.17 port 52978 ssh2 Aug 8 16:10:46 server2 sshd[15206]: Invalid user qw from 222.90.12.17 port 46178 Aug 8 16:10:46 server2 sshd[15206]: Failed password for invalid user qw from 222.90.12.17 port 46178 ssh2 Aug 8 16:11:39 server2 sshd[15360]: Invalid user jmr from 222.90.12.17 port 59952 show less	Brute-Force
Wonderland	2024-08-08 20:02:36 (1 month ago)	Aug 8 13:02:36 jabberwocky sshd[2552022]: Invalid user nginx from 222.90.12.17 port 35072 ...	Brute-Force SSH
Mike	2024-08-08 19:25:38 (1 month ago)	Brute force sshd	Brute-Force SSH
cxnky	2024-08-08 18:11:30 (1 month ago)	Aug 8 18:10:18 prod sshd[333173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show moreAug 8 18:10:18 prod sshd[333173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.12.17 Aug 8 18:10:20 prod sshd[333173]: Failed password for invalid user t3 from 222.90.12.17 port 60848 ssh2 Aug 8 18:11:29 prod sshd[333542]: Invalid user corrado from 222.90.12.17 port 48564 ... show less	Brute-Force SSH
ⓔⓜⓙⓔⓔ	2024-08-08 17:22:57 (1 month ago)	SSH ⎆ Honeypot login with user "yzf" at 2024-08-08	Brute-Force SSH
cxnky	2024-08-08 16:09:40 (1 month ago)	Aug 8 16:09:01 portainer sshd[811066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreAug 8 16:09:01 portainer sshd[811066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.12.17 Aug 8 16:09:03 portainer sshd[811066]: Failed password for invalid user proxyuser from 222.90.12.17 port 53712 ssh2 Aug 8 16:09:39 portainer sshd[811081]: Invalid user ubuntu from 222.90.12.17 port 32914 ... show less	Brute-Force SSH
suble.org	2024-08-08 16:09:21 (1 month ago)	Aug 8 18:06:25 sasrv sshd[2271728]: Invalid user zhangzaodi from 222.90.12.17 port 59140 Aug ... show moreAug 8 18:06:25 sasrv sshd[2271728]: Invalid user zhangzaodi from 222.90.12.17 port 59140 Aug 8 18:07:32 sasrv sshd[2271753]: User root from 222.90.12.17 not allowed because not listed in AllowUsers Aug 8 18:08:09 sasrv sshd[2271785]: Invalid user user002 from 222.90.12.17 port 48602 Aug 8 18:08:46 sasrv sshd[2271800]: User root from 222.90.12.17 not allowed because not listed in AllowUsers Aug 8 18:09:21 sasrv sshd[2271874]: Invalid user proxyuser from 222.90.12.17 port 35006 ... show less	Brute-Force SSH