JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.167.232.125

220.167.232.125 was found in our database!

This IP was reported 167 times. Confidence of Abuse is 67%: ?

67%

ISP	CHINANET QINGHAI province network
Usage Type	Fixed Line ISP
ASN	AS140061
Domain Name	xn.qh.cn
Country	🇨🇳 China
City	Xining, Qinghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.167.232.125

Whois 220.167.232.125

IP Abuse Reports for 220.167.232.125:

This IP address has been reported a total of 167 times from 70 distinct sources. 220.167.232.125 was first reported on January 23rd 2024, and the most recent report was 56 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-21 08:28:53 (56 minutes ago)	Blocked by UFW (TCP on 10335) Source port: 62911 TTL: 239 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 10335) Source port: 62911 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 220.167.232.125) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 sefinek.net	2026-06-20 00:52:48 (1 day ago)	Blocked by UFW on NY01 [10440/tcp] \| SPT: 58426 \| TTL: 231 \| LEN: 44 \| TOS: 0x08 • Reported by: gith ... show more Blocked by UFW on NY01 [10440/tcp] \| SPT: 58426 \| TTL: 231 \| LEN: 44 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-19 00:19:33 (2 days ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇮 Yachiyo Runami	2026-06-18 23:00:45 (2 days ago)	Port Scan on Honeypot \| Ports: 50000/HoneyTrap \| Proto: TCP(1) \| Flags: all SYN \| TTL: 230 \| Len: 44 ... show more Port Scan on Honeypot \| Ports: 50000/HoneyTrap \| Proto: TCP(1) \| Flags: all SYN \| TTL: 230 \| Len: 44B \| Win: 1024(1) \| F2B/ufw-honeypot@2026-06-18T23:00:45Z show less	Port Scan Hacking
🇩🇪 check-the-sum.fr	2026-06-18 15:50:11 (2 days ago)	Port Scanning	Port Scan
🇳🇱 i-turnradio.nl	2026-06-14 16:36:09 (6 days ago)	2026-06-14 18:36:09 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇺🇸 Axel	2026-06-13 19:39:48 (1 week ago)	Blocked by UFW on LAXHH [8222/tcp] \| SPT: 21339 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8222/tcp] \| SPT: 21339 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-11 20:27:39 (1 week ago)	Blocked by UFW on LAXHH [52200/tcp] \| SPT: 18257 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [52200/tcp] \| SPT: 18257 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-09 14:55:44 (1 week ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-08 20:40:37 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 MPL	2026-06-07 13:09:33 (1 week ago)	tcp/5000 (2 or more attempts)	Port Scan
🇬🇧 PeravixGroup	2026-06-03 15:38:58 (2 weeks ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-31 10:36:05 (2 weeks ago)	Honeypot hit: Large payload (1457 bytes); 1521 [1] TCP	Hacking
🇬🇧 PeravixGroup	2026-05-29 13:48:17 (3 weeks ago)	Honeypot detection: LDAP injection / directory service abuse attempt on port 9042. Severity: MEDIUM. ... show more Honeypot detection: LDAP injection / directory service abuse attempt on port 9042. Severity: MEDIUM. Aaran.cloud show less	Web App Attack
🇬🇧 PeravixGroup	2026-05-29 10:01:41 (3 weeks ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 167 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.226

🇬🇧 188.122.37.97

🇮🇸 185.40.122.250

🇩🇪 37.218.255.158

🇲🇽 187.191.48.23

🇺🇸 162.216.149.116

🇺🇸 52.180.146.145

🇭🇰 43.161.234.148

🇸🇬 43.160.241.129

🇮🇩 2406:da19:776:6e00:8661:d7a3:fe65:899b

🇮🇳 103.190.253.181

🇺🇸 2604:a880:400:d1:0:4:9e92:c001

🇷🇺 188.225.56.112

🇳🇱 185.93.89.167

🇨🇦 165.22.225.218

🇩🇪 144.76.32.238

🇨🇳 120.233.73.156

🇹🇭 43.164.0.21

🇺🇸 31.59.40.94

🇵🇱 194.180.48.110