JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

220.165.89.66

Recent Activity

Abuse confidence score ?

40% Elevated

23 reports

8 reporters · latest 3 days ago

ISP	CHINANET yunnan province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Kunming, Yunnan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 220.165.89.66

This IP address has been reported a total of 23 times from 8 distinct sources. 220.165.89.66 was first reported on March 11th 2022, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: China with 10 reports; Australia with 6 reports; United States of America with 5 reports. The most common categories in these recent reports were: Fraud VoIP 15 times; Brute-Force 10 times; Hacking 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 Aidar Kamalov	2026-09-22 01:35:38 (3 days ago)	2026-09-22T01:35:37.320972+00:00 beijing-sip-ulap-net kamailio-23[938004]: { "level": "NOTICE", "mod ... show more 2026-09-22T01:35:37.320972+00:00 beijing-sip-ulap-net kamailio-23[938004]: { "level": "NOTICE", "module": "xlog", "file": "xlog.c", "line": 283, "function": "", "callid": "7817d3f5", "src": "[email protected]", "dst": "[email protected]", "mt": 1, "method": "REGISTER", "cseq": "7260 REGISTER", "version_config": "26.0918", "message": "AUTH: REGISTER FAILED from 220.165.89.66 (code: -5) fd=39.106.157.175, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]" } ... show less	Fraud VoIP
🇺🇸 knock	2026-09-18 16:56:52 (6 days ago)	Knock-Knock honeypot brute-force: SIP (16 total hits)	Fraud VoIP Brute-Force
🇦🇺 delilahagaki	2026-09-18 16:54:40 (6 days ago)	[2026-09-19 02:52:32] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:8888@1 ... show more [2026-09-19 02:52:32] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '220.165.89.66:5160' (callid: 679bc96f1c15a664) - Failed to authenticate [2026-09-19 02:52:32] SECURITY[1945] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-09-19T02:52:32.302+1000",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="679bc96f1c15a664",LocalAddress="IPV4/UDP/192.168.0.232/5060",RemoteAddress="IPV4/UDP/220.165.89.66/5160",Challenge="1789750345/9cc920685156784e7290812f09ea020f",Response="7660a43549569ee810bfde00bdffc5b4",ExpectedResponse="" [2026-09-19 02:52:39] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '220.165.89.66:5160' (callid: 679bc96f1c15a664) - Failed to authenticate [2026-09-19 02:52:39] SECURITY[1945] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-09-19T02:52:39.364+1000",Severity="Error",Service ... show less	Brute-Force
🇦🇺 dyln	2026-09-18 16:42:34 (6 days ago)	Dyls honeypot brute-force: SIP (50 total hits)	Hacking Brute-Force
🇦🇺 delilahagaki	2026-09-18 16:20:59 (6 days ago)	[2026-09-19 02:20:37] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:8888@1 ... show more [2026-09-19 02:20:37] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '220.165.89.66:5160' (callid: 09a20373ae86c02a) - Failed to authenticate [2026-09-19 02:20:37] SECURITY[1945] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-09-19T02:20:37.255+1000",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="09a20373ae86c02a",LocalAddress="IPV4/UDP/192.168.0.232/5060",RemoteAddress="IPV4/UDP/220.165.89.66/5160",Challenge="1789748431/d581a5a82b14f47f4835280425e486ca",Response="22d164dc0dc905cef211f8c65a379125",ExpectedResponse="" [2026-09-19 02:20:50] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '220.165.89.66:5160' (callid: 09a20373ae86c02a) - Failed to authenticate [2026-09-19 02:20:50] SECURITY[1945] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-09-19T02:20:50.928+1000",Severity="Error",Service ... show less	Brute-Force
🇦🇺 delilahagaki	2026-09-18 14:57:44 (6 days ago)	[2026-09-19 00:57:25] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:8888@1 ... show more [2026-09-19 00:57:25] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '220.165.89.66:5160' (callid: e6eaaa48ff5ed5c6) - Failed to authenticate [2026-09-19 00:57:25] SECURITY[1945] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-09-19T00:57:25.533+1000",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="e6eaaa48ff5ed5c6",LocalAddress="IPV4/UDP/192.168.0.232/5060",RemoteAddress="IPV4/UDP/220.165.89.66/5160",Challenge="1789743436/4ff9c89844662b165490d47fb408d10c",Response="b57662405b21657eee75afa1c552dc0c",ExpectedResponse="" [2026-09-19 00:57:34] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '220.165.89.66:5160' (callid: e6eaaa48ff5ed5c6) - Failed to authenticate [2026-09-19 00:57:34] SECURITY[1945] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-09-19T00:57:34.175+1000",Severity="Error",Service ... show less	Brute-Force
🇦🇺 delilahagaki	2026-09-18 14:00:21 (1 week ago)	[2026-09-18 23:59:58] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:8888@1 ... show more [2026-09-18 23:59:58] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '220.165.89.66:5160' (callid: 675c5f26e8b1091b) - Failed to authenticate [2026-09-18 23:59:58] SECURITY[1945] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-09-18T23:59:58.813+1000",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="675c5f26e8b1091b",LocalAddress="IPV4/UDP/192.168.0.232/5060",RemoteAddress="IPV4/UDP/220.165.89.66/5160",Challenge="1789739990/6cb4c3fa24ee7126c255e25e1230e7af",Response="564bd3905586fde0177ac37f184a302c",ExpectedResponse="" [2026-09-19 00:00:06] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '220.165.89.66:5160' (callid: 675c5f26e8b1091b) - Failed to authenticate [2026-09-19 00:00:06] SECURITY[1945] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-09-19T00:00:06.872+1000",Severity="Error",Service ... show less	Brute-Force
🇦🇺 delilahagaki	2026-09-18 12:32:37 (1 week ago)	[2026-09-18 22:32:12] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:8888@1 ... show more [2026-09-18 22:32:12] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '220.165.89.66:5160' (callid: eed62d959109355b) - Failed to authenticate [2026-09-18 22:32:12] SECURITY[1945] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-09-18T22:32:12.700+1000",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="eed62d959109355b",LocalAddress="IPV4/UDP/192.168.0.232/5060",RemoteAddress="IPV4/UDP/220.165.89.66/5160",Challenge="1789734725/6425f69014fedd6c6d6f9c1849a755f8",Response="90a1234a6cf0658250abb13476b3f6b2",ExpectedResponse="" [2026-09-18 22:32:20] NOTICE[1868] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '220.165.89.66:5160' (callid: eed62d959109355b) - Failed to authenticate [2026-09-18 22:32:20] SECURITY[1945] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-09-18T22:32:20.356+1000",Severity="Error",Service ... show less	Brute-Force
🇺🇸 multitel.net	2026-09-18 12:04:42 (1 week ago)	VoIP brute-force attack on port 5060, with User-Agent eyeBeam release 3006o stamp 17551	Fraud VoIP Brute-Force
🇺🇸 IndigoRidge	2026-09-18 11:43:19 (1 week ago)	Knock-Knock SIP honeypot activity; time=2026-09-18 11:42:29; sip_method=INVITE; sip_dial_number=+140 ... show more Knock-Knock SIP honeypot activity; time=2026-09-18 11:42:29; sip_method=INVITE; sip_dial_number=+14063247527 show less	Fraud VoIP Brute-Force
🇿🇦 Aidar Kamalov	2026-09-18 11:28:32 (1 week ago)	2026-09-18T11:28:09.068222+00:00 joburg-sip-ulap-net kamailio-29[547598]: { "level": "NOTICE", "modu ... show more 2026-09-18T11:28:09.068222+00:00 joburg-sip-ulap-net kamailio-29[547598]: { "level": "NOTICE", "module": "xlog", "file": "xlog.c", "line": 283, "function": "", "callid": "c149792962df3c24", "src": "[email protected]", "dst": "[email protected]", "mt": 1, "method": "REGISTER", "cseq": "1 REGISTER", "version_config": "26.0914", "message": "AUTH: REGISTER FAILED from 220.165.89.66 (code: -5) fd=129.151.175.85, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]" } 2026-09-18T11:28:09.145518+00:00 joburg-sip-ulap-net kamailio-29[547594]: { "level": "NOTICE", "module": "xlog", "file": "xlog.c", "line": 283, "function": "", "callid": "38ca1ee8d062c835", "src": "[email protected]", "dst": "[email protected]", "mt": 1, "method": "REGISTER", "cseq": "1 REGISTER", "version_config": "26.0914", "message": "AUTH: REGISTER FAILED from 220.165.89.66 (code: -5) fd=129.151.175.85, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, Au=8888@12 ... show less	Fraud VoIP
🇺🇸 drewf.ink	2026-09-18 10:12:45 (1 week ago)	[10:12] SIP REGISTER as 8888 with credentials (User-Agent: 'eyeBeam release 3006o stamp 17551')	Brute-Force Hacking
🇺🇸 Aidar Kamalov	2026-09-18 10:11:26 (1 week ago)	2026-09-18T10:10:56.823463+00:00 ashburn-sip-ulap-net kamailio-5[157888]: { "level": "NOTICE", "modu ... show more 2026-09-18T10:10:56.823463+00:00 ashburn-sip-ulap-net kamailio-5[157888]: { "level": "NOTICE", "module": "xlog", "file": "xlog.c", "line": 283, "function": "", "callid": "4bb57e637114eaec", "src": "[email protected]", "dst": "[email protected]", "mt": 1, "method": "REGISTER", "cseq": "1 REGISTER", "version_config": "26.0914", "message": "AUTH: REGISTER FAILED from 220.165.89.66 (code: -5) fd=129.153.18.213, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]" } 2026-09-18T10:10:57.282613+00:00 ashburn-sip-ulap-net kamailio-5[157885]: { "level": "NOTICE", "module": "xlog", "file": "xlog.c", "line": 283, "function": "", "callid": "4bb57e637114eaec", "src": "[email protected]", "dst": "[email protected]", "mt": 1, "method": "REGISTER", "cseq": "1 REGISTER", "version_config": "26.0914", "message": "AUTH: REGISTER FAILED from 220.165.89.66 (code: -5) fd=129.153.18.213, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, Au=8888@12 ... show less	Fraud VoIP
🇨🇳 Aidar Kamalov	2026-09-16 17:35:36 (1 week ago)	2026-09-16T17:35:35.304073+00:00 beijing-sip-ulap-net kamailio-23[2312164]: { "level": "NOTICE", "mo ... show more 2026-09-16T17:35:35.304073+00:00 beijing-sip-ulap-net kamailio-23[2312164]: { "level": "NOTICE", "module": "xlog", "file": "xlog.c", "line": 283, "function": "", "callid": "395632f854538d3c", "src": "[email protected]", "dst": "[email protected]", "mt": 1, "method": "REGISTER", "cseq": "1 REGISTER", "version_config": "26.0914", "message": "AUTH: REGISTER FAILED from 220.165.89.66 (code: -5) fd=39.106.157.175, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]" } ... show less	Fraud VoIP
🇨🇳 Aidar Kamalov	2026-09-13 22:48:45 (1 week ago)	2026-09-13T22:48:44.273953+00:00 beijing-sip-ulap-net kamailio-23[1826488]: { "level": "NOTICE", "mo ... show more 2026-09-13T22:48:44.273953+00:00 beijing-sip-ulap-net kamailio-23[1826488]: { "level": "NOTICE", "module": "xlog", "file": "xlog.c", "line": 283, "function": "", "callid": "2452d829f61e5f60", "src": "[email protected]", "dst": "[email protected]", "mt": 1, "method": "REGISTER", "cseq": "1 REGISTER", "version_config": "26.0905", "message": "AUTH: REGISTER FAILED from 220.165.89.66 (code: -5) fd=39.106.157.175, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]" } ... show less	Fraud VoIP

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.141.43.146

🇳🇱 204.76.203.231

🇩🇪 167.233.153.196

🇮🇳 152.58.45.144

🇧🇩 103.72.64.8

🇺🇸 66.240.192.138

🇺🇸 9.234.19.75

🇺🇸 207.246.69.216

🇮🇩 103.75.101.41

🇳🇱 77.239.124.46

🇳🇱 62.212.70.129

🇹🇼 60.199.224.55

🇨🇦 51.79.86.230

🇵🇰 39.61.130.180

🇨🇿 31.222.11.63

🇻🇳 27.118.23.21

🇺🇦 188.163.49.96

🇮🇳 182.71.132.139

🇦🇷 181.174.128.83

🇫🇷 176.31.21.38