JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 59.80.22.209

59.80.22.209 was found in our database!

This IP was reported 909 times. Confidence of Abuse is 39%: ?

39%

ISP	CHINA UNICOM CLOUD DATA COMPANY LIMITED
Usage Type	Fixed Line ISP
ASN	AS134542
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Guiyang, Guizhou

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 59.80.22.209

Whois 59.80.22.209

IP Abuse Reports for 59.80.22.209:

This IP address has been reported a total of 909 times from 386 distinct sources. 59.80.22.209 was first reported on February 1st 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 victoryur	2026-07-18 00:08:29 (4 hours ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇷🇺 victoryur	2026-06-17 00:05:51 (1 month ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇧🇷 ICS Labs	2026-06-05 19:52:03 (1 month ago)	ICS Labs identified 59.80.22.209 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇪🇸 helix	2026-05-28 04:41:26 (1 month ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇮🇳 Parth Maniar	2026-05-25 19:56:29 (1 month ago)	This IP address carried out 10 port scanning attempts on 25-05-2026. For more information or to repo ... show more This IP address carried out 10 port scanning attempts on 25-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇧🇪 Fanjoe	2026-05-25 07:32:14 (1 month ago)	May 25 09:32:04 raspberrypi sshd\[3158\]: Did not receive identification string from 59.80.22.209\	DDoS Attack SSH
🇳🇱 donarev419	2026-05-25 00:30:19 (1 month ago)	Port scan detected on port 1001 (connection without data transfer)	Port Scan
🇩🇪 AS213449.net	2026-05-25 00:09:18 (1 month ago)	05/25/2026-02:09:14.937522 src=59.80.22.209 dst=89.144.63.79:22 proto=6 msg=ET SCAN Potential SSH Sc ... show more 05/25/2026-02:09:14.937522 src=59.80.22.209 dst=89.144.63.79:22 proto=6 msg=ET SCAN Potential SSH Scan show less	Brute-Force SSH
🇺🇸 RAP	2026-05-24 22:57:09 (1 month ago)	2026-05-24 22:57:09 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇩🇪 ghostwarriors	2026-05-24 17:50:34 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 bigscoots.com	2026-05-24 14:32:51 (1 month ago)	(sshd) Failed SSH login from 59.80.22.209 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction ... show more (sshd) Failed SSH login from 59.80.22.209 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 24 09:31:34 15726 sshd[10579]: Did not receive identification string from 59.80.22.209 port 13635 May 24 09:32:16 15726 sshd[10580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.80.22.209 user=root May 24 09:32:17 15726 sshd[10580]: Failed password for root from 59.80.22.209 port 22524 ssh2 May 24 09:32:24 15726 sshd[10678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.80.22.209 user=root May 24 09:32:27 15726 sshd[10678]: Failed password for root from 59.80.22.209 port 1705 ssh2 show less	Brute-Force SSH
🇩🇪 Justin F. \| AS204464	2026-05-24 13:53:11 (1 month ago)	Honeypot [nx-infrastructure]: Unauthorized connection attempt detected on 22/SSH Reported by: Justin ... show more Honeypot [nx-infrastructure]: Unauthorized connection attempt detected on 22/SSH Reported by: Justin F. show less	SSH Port Scan
🇺🇸 bigscoots.com	2026-05-24 10:44:54 (1 month ago)	59.80.22.209 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports ... show more 59.80.22.209 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 24 05:18:35 14379 sshd[20307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.22.228 user=root May 24 05:18:37 14379 sshd[20307]: Failed password for root from 165.154.22.228 port 28016 ssh2 May 24 05:15:28 14379 sshd[19937]: Failed password for root from 124.156.202.242 port 42754 ssh2 May 24 05:44:39 14379 sshd[23183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.80.22.209 user=root May 24 05:44:41 14379 sshd[23183]: Failed password for root from 59.80.22.209 port 48210 ssh2 IP Addresses Blocked: 165.154.22.228 (HK/Hong Kong/-) 124.156.202.242 (SG/Singapore/-) show less	Brute-Force SSH
🇩🇪 killmself	2026-05-24 10:01:11 (1 month ago)	Caught by Fail2Ban	Brute-Force SSH
🇬🇧 sverre26	2026-05-23 19:55:36 (1 month ago)	Bruteforce detected by fail2ban	Brute-Force SSH

Showing 1 to 15 of 909 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.183

🇺🇸 45.194.67.27

🇬🇧 35.203.210.145

🇳🇱 195.178.110.30

🇮🇷 194.5.176.86

🇨🇴 186.146.235.58

🇯🇵 160.251.202.50

🇺🇸 153.75.235.217

🇫🇮 147.185.133.186

🇧🇩 116.204.228.55

🇸🇬 98.159.43.56

🇩🇪 69.5.169.208

🇺🇸 65.49.1.53

🇺🇸 50.116.72.11

🇵🇱 45.138.16.102

🇺🇸 34.229.252.170

🇧🇪 34.14.86.81

🇨🇳 14.103.120.147

🇬🇧 2.57.17.2

🇩🇪 2a09:bac5:280a:18f0::27c:a9