1.28.220.226

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
89% Critical
18 reports
18 reporters · latest 6 hours ago
ISP
China unicom InnerMongolia province network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Hohhot, Inner Mongolia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
18 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 10 🇫🇷 France 3 🇺🇸 United States of America 3
Most common categories Brute-Force 16 SSH 15 Port Scan 3 Exploited Host 1 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 swk
Brute-Force SSH
🇺🇸 Like Ma
Nov 7 22:11:53 newage sshd[18415]: Failed password for root from 1.28.220.226 port 64353 ssh2 ...
Brute-Force SSH
Anonymous
Brute-Force SSH
Anonymous
Brute-Force SSH
🇺🇸 aks4226
Brute force on SSH.
SSH Brute-Force
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇩🇪 lf-abuse-1
SSH attack
Brute-Force SSH
Anonymous
Fail2Ban sshd: SSH authentication failure
Brute-Force SSH
Anonymous
Brute-Force SSH
🇩🇪 mnpx
SSH brute force login attempt (6×) over 0h:04m; first seen here 2026-11-07T07:55Z
Brute-Force Exploited Host SSH
🇺🇸 factor1
CrowdSec at athena Reports Abuse
Web App Attack
Anonymous
DDoS Attack Port Scan Brute-Force SSH
🇫🇷 Batz
Multiple Unauthorized Connection Attempt
Brute-Force SSH Hacking Port Scan
🇫🇷 basing
2026-11-07 02:35:39 idz SASL PLAIN auth failed: rhost=1.28.220.226...
Brute-Force
🇫🇷 Ricardo Lopez
Fail2Ban: Banned SSH on fireland
Brute-Force SSH

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 192.253.248.229
🇧🇷 187.60.185.199
🇺🇸 45.92.229.172
🇺🇸 198.74.58.192
🇨🇭 179.43.153.2
🇦🇷 149.107.228.75
🇻🇳 103.121.89.16
🇨🇳 101.227.203.162
🇬🇧 92.27.101.99
🇬🇧 35.203.211.36
🇺🇸 20.120.108.52
🇺🇸 5.181.170.34
🇺🇸 199.165.159.33
🇫🇷 185.34.33.2
🇳🇱 89.21.67.146
🇮🇩 202.65.238.52
🇺🇸 199.165.159.211
🇲🇦 196.119.14.114
🇨🇴 190.60.60.98
🇵🇱 172.64.200.131
feedback