JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 115.220.170.50

115.220.170.50

Recent Activity

25 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

CHINANET-ZJ Ningbo node network

Usage Type

Fixed Line ISP

ASN

AS4134

Domain Name

hz.zj.cn

Country

🇨🇳 China

City

Ningbo, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 115.220.170.50:

This IP address has been reported a total of 25 times from 24 distinct sources. 115.220.170.50 was first reported on September 2nd 2026, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: United States of America with 9 reports; Germany with 8 reports; Austria with 1 report. The most common categories in these recent reports were: SSH 20 times; Brute-Force 18 times; Port Scan 11 times; Hacking 4 times; Exploited Host 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SiyCah	2026-09-05 06:00:17 (3 days ago)	115.220.170.50 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 115.220.170.50 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 8m 55s. Total bytes sent by tarpit: 66.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇲🇳 Public CSIRT/CC of Mongolia	2026-09-04 17:08:22 (4 days ago)	Honeypot hit: Unauthorized connection attempt detected on 22/SSH	Hacking SSH Port Scan
🇧🇷 noconex	2026-09-04 16:31:15 (4 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 115.220.17 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 115.220.170.50 show less	Port Scan Brute-Force SSH
🇩🇪 crnpekgoz	2026-09-04 15:25:10 (4 days ago)	[PortScan] Risk=100 ASN=4134 (portscan) Port=22 HoneypotTrap=true \| Reported by WardenIPS: https://g ... show more [PortScan] Risk=100 ASN=4134 (portscan) Port=22 HoneypotTrap=true \| Reported by WardenIPS: https://github.com/msncakma/WardenIPS show less	Port Scan
🇰🇷 demonsword	2026-09-04 11:08:31 (4 days ago)	SSH brute-force detected: 6 failed login attempts in the last 1 hour.	Brute-Force SSH
🇺🇸 sumnone	2026-09-04 10:43:07 (4 days ago)	Port probing on unauthorized port 22	Port Scan Hacking Exploited Host
🇩🇪 SiyCah	2026-09-04 06:00:17 (4 days ago)	115.220.170.50 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 115.220.170.50 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 8m 55s. Total bytes sent by tarpit: 66.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇩🇪 hmt	2026-09-04 03:07:01 (4 days ago)	2026-09-04T05:06:44.583759+02:00 vps-14ca24d5 sshd[818366]: error: maximum authentication attempts e ... show more 2026-09-04T05:06:44.583759+02:00 vps-14ca24d5 sshd[818366]: error: maximum authentication attempts exceeded for root from 115.220.170.50 port 46872 ssh2 [preauth] 2026-09-04T05:06:45.395410+02:00 vps-14ca24d5 sshd[818368]: Connection from 115.220.170.50 port 46993 on 135.125.200.16 port 22 rdomain "" 2026-09-04T05:06:53.197163+02:00 vps-14ca24d5 sshd[818368]: error: maximum authentication attempts exceeded for root from 115.220.170.50 port 46993 ssh2 [preauth] 2026-09-04T05:06:53.549752+02:00 vps-14ca24d5 sshd[818372]: Connection from 115.220.170.50 port 47082 on 135.125.200.16 port 22 rdomain "" 2026-09-04T05:07:00.797856+02:00 vps-14ca24d5 sshd[818372]: error: maximum authentication attempts exceeded for root from 115.220.170.50 port 47082 ssh2 [preauth] ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-09-03 22:45:00 (5 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 ZIME	2026-09-03 21:38:14 (5 days ago)	UFW BLOCK Report: Total attempts: 15 Top ports and details: - Port 22 (15x): SSH Brute-Force ( ... show more UFW BLOCK Report: Total attempts: 15 Top ports and details: - Port 22 (15x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi) Source IP: 115.220.170.50 \| this report is autogenerated by ZIME Cloud show less	Brute-Force SSH
🇭🇺 whitehoodie	2026-09-03 19:16:55 (5 days ago)	Sep 3 21:16:28 whitehoodie sshd[1287854]: pam_unix(sshd:auth): authentication failure; logname= uid ... show more Sep 3 21:16:28 whitehoodie sshd[1287854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.220.170.50 user=root Sep 3 21:16:30 whitehoodie sshd[1287854]: Failed password for root from 115.220.170.50 port 54746 ssh2 Sep 3 21:16:42 whitehoodie sshd[1287854]: error: maximum authentication attempts exceeded for root from 115.220.170.50 port 54746 ssh2 [preauth] Sep 3 21:16:53 whitehoodie sshd[1287856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.220.170.50 user=root Sep 3 21:16:54 whitehoodie sshd[1287856]: Failed password for root from 115.220.170.50 port 55032 ssh2 ... show less	Brute-Force SSH
🇬🇧 chrisw	2026-09-03 17:33:40 (5 days ago)	2026-09-03T18:33:24.003067l03.customhost.org.uk sshd[2345]: error: maximum authentication attempts e ... show more 2026-09-03T18:33:24.003067l03.customhost.org.uk sshd[2345]: error: maximum authentication attempts exceeded for root from 115.220.170.50 port 33890 ssh2 [preauth] 2026-09-03T18:33:24.003188l03.customhost.org.uk sshd[2345]: Disconnecting: Too many authentication failures [preauth] 2026-09-03T18:33:31.914640l03.customhost.org.uk sshd[2347]: error: maximum authentication attempts exceeded for root from 115.220.170.50 port 33970 ssh2 [preauth] 2026-09-03T18:33:31.914731l03.customhost.org.uk sshd[2347]: Disconnecting: Too many authentication failures [preauth] 2026-09-03T18:33:39.685439l03.customhost.org.uk sshd[2351]: error: maximum authentication attempts exceeded for root from 115.220.170.50 port 34067 ssh2 [preauth] ... show less	DDoS Attack SSH
🇺🇸 MPL	2026-09-03 15:42:52 (5 days ago)	tcp/22 (2 or more attempts)	Port Scan
🇺🇸 kemonos.net	2026-09-03 14:59:51 (5 days ago)	2026-09-03T10:59:41.528330-04:00 raspberrypi sshd[1073471]: error: maximum authentication attempts e ... show more 2026-09-03T10:59:41.528330-04:00 raspberrypi sshd[1073471]: error: maximum authentication attempts exceeded for root from 115.220.170.50 port 53882 ssh2 [preauth] 2026-09-03T10:59:46.555404-04:00 raspberrypi sshd[1073481]: error: maximum authentication attempts exceeded for root from 115.220.170.50 port 53932 ssh2 [preauth] 2026-09-03T10:59:50.097283-04:00 raspberrypi sshd[1073565]: error: maximum authentication attempts exceeded for root from 115.220.170.50 port 53998 ssh2 [preauth] ... show less	Brute-Force SSH
🇺🇸 xmission.com	2026-09-03 14:40:59 (5 days ago)	Blocked by UFW (TCP on 22) Source port: 38950 TTL: 38 Packet length: 44 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 38950 TTL: 38 Packet length: 44 TOS: 0x00 This report (for 115.220.170.50) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.244.5.213

🇺🇸 147.185.132.107

🇭🇰 116.48.151.58

🇮🇩 103.191.14.243

🇷🇺 62.183.82.70

🇸🇬 194.164.107.6

🇬🇧 194.50.235.157

🇦🇷 181.85.89.33

🇺🇸 172.172.164.244

🇺🇸 162.216.150.97

🇩🇪 161.35.76.11

🇨🇳 113.64.234.82

🇺🇸 66.132.186.213

🇩🇪 64.226.110.44

🇪🇨 45.230.240.46

🇺🇸 38.148.99.59

🇮🇳 4.240.126.25

🇩🇪 194.88.98.113

🇬🇧 193.163.125.189

🇺🇸 167.253.18.173