JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.227.173.58

122.227.173.58 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 62%: ?

62%

ISP	Yuyao Wugu Metal Co.,Ltd
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	hz.zj.cn
Country	🇨🇳 China
City	Ningbo, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.227.173.58

Whois 122.227.173.58

IP Abuse Reports for 122.227.173.58:

This IP address has been reported a total of 28 times from 20 distinct sources. 122.227.173.58 was first reported on July 21st 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Luhte	2026-08-23 14:47:07 (2 days ago)	Unsolicited TCP connection from 122.227.173.58 to port 0 at 2026-08-23T14:47:07Z. Source IP complete ... show more Unsolicited TCP connection from 122.227.173.58 to port 0 at 2026-08-23T14:47:07Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇸🇬 drewf.ink	2026-08-21 10:16:02 (4 days ago)	[10:16] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticati ... show more [10:16] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as 3322:3**2 show less	Open Proxy Port Scan
🇸🇬 drewf.ink	2026-08-20 18:05:54 (5 days ago)	[18:05] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticati ... show more [18:05] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as 36:36 show less	Open Proxy Port Scan
🇿🇦 maximonline.co.za	2026-08-13 19:40:48 (1 week ago)	Brute Force RDP Attack	Port Scan Hacking Brute-Force
🇻🇳 scuslon	2026-08-09 15:51:51 (2 weeks ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇰🇷 tjx	2026-08-07 16:25:38 (2 weeks ago)	Part of detected botnet campaign. Shared hassh: eb0e0554de9aeb368191c86016a40080. 611 IPs in this ca ... show more Part of detected botnet campaign. Shared hassh: eb0e0554de9aeb368191c86016a40080. 611 IPs in this campaign. show less	Port Scan Brute-Force SSH
🇰🇷 tjx	2026-08-06 09:10:48 (2 weeks ago)	SSH brute-force honeypot (Cowrie). Part of botnet campaign — HASSH eb0e0554de9aeb368191c86016a40080 ... show more SSH brute-force honeypot (Cowrie). Part of botnet campaign — HASSH eb0e0554de9aeb368191c86016a40080 shared by 784 IPs: 5.255.97.209, 20.244.21.255, 124.221.186.24, 103.93.97.230, 154.57.213.93, 4.247.139.22, 150.241.245.47, 20.199.40.42.... Session: 53ca6f5e show less	Port Scan Brute-Force SSH
🇩🇪 EnthecSolutions	2026-08-05 14:03:35 (2 weeks ago)	Detected by Enthec Solutions. \| Attempts: 24 in 24h \| Target port: 1080	Brute-Force
🇺🇸 sandra361	2026-08-05 09:01:55 (2 weeks ago)	Port scan detected: 7 attempts across 4 ports (8934,9650,42320,43552). \| Evidence: GHOST_SCAN: IN=en ... show more Port scan detected: 7 attempts across 4 ports (8934,9650,42320,43552). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=122.227.173.58 LEN=52 TOS=0x02 PREC=0x00 TTL=105 ID=26346 DF PROTO=TCP SPT=61293 DPT=8934 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 show less	Port Scan
🇬🇧 sandra361	2026-08-03 21:34:17 (3 weeks ago)	Port scan detected: 9 attempts across 9 ports (41942,41944,41945,41946,41947,41948,41950,41955,41959 ... show more Port scan detected: 9 attempts across 9 ports (41942,41944,41945,41946,41947,41948,41950,41955,41959). \| Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=122.227.173.58 LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=4635 DF PROTO=TCP SPT=60488 DPT=41959 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 show less	Port Scan
🇩🇪 anycast_ac	2026-07-30 14:40:08 (3 weeks ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials: b'user1':b'12345672026!' Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth', 'user/pass'] $ socks5 auth: 'user1' : '12345672026!' show less	DDoS Attack
🇩🇪 anycast_ac	2026-07-30 14:20:57 (3 weeks ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials: b'tinyproxy':b'tinyproxy' Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth', 'user/pass'] $ socks5 auth: 'tinyproxy' : 'tinyproxy' show less	DDoS Attack
🇩🇪 NxtGenIT	2026-07-30 12:33:20 (3 weeks ago)	Heralding Honeypot hit, Protocol: socks5, username: admin, password: 1234567891234567	Hacking
🇺🇸 NetGuard	2026-07-29 08:04:49 (3 weeks ago)	#honeypot #netguard247 #heralding #credentialharvesting Captured by NetGuard 24/7 T-Pot honeypot (ne ... show more #honeypot #netguard247 #heralding #credentialharvesting Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-07-29T08:04:49.366+00:00 Attacker IP: 122.227.173.58 \| Port: 1080 \| Country: China Honeypot: heralding \| Attack: credential_harvesting Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force
🇩🇪 anycast_ac	2026-07-28 19:36:05 (4 weeks ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials: b'brittney':b'brittney' Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth', 'user/pass'] $ socks5 auth: 'brittney' : 'brittney' show less	DDoS Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 34.34.225.217

🇫🇷 2400:cb00:533:1000:b63e:edde:bdd3:18

🇹🇼 220.132.149.61

🇺🇸 207.90.244.4

🇧🇷 179.64.43.210

🇭🇰 165.154.225.20

🇺🇸 162.216.150.148

🇲🇽 158.23.184.117

🇻🇳 125.212.217.143

🇺🇸 73.130.77.134

🇺🇸 52.173.121.69

🇩🇪 46.101.180.162

🇳🇱 45.154.98.191

🇺🇸 3.234.254.133

🇺🇸 199.47.82.20

🇺🇸 167.172.153.138

🇮🇳 103.207.9.246

🇵🇰 103.82.120.215

🇳🇱 77.239.124.252

🇮🇳 66.116.242.235