220.167.232.166
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET QINGHAI province network
- Usage Type
- Fixed Line ISP
- ASN
- AS140061
- Domain Name
- xn.qh.cn
- Country
- 🇨🇳 China
- City
- Xining, Qinghai
Abuse Reports
Total reports
244 from
80 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/220.167.232.166
2026-04-23 03:17:22 /favicon.ico
|
Web App Attack | |
| Anonymous |
Unauthorized connection attempt. Port 8567
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 12520
GET /
Accept: */*; 12520 [1] TCP
|
Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 10107 [1] TCP
|
Port Scan | |
| 🇺🇸 MPL |
tcp/2626
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 donarev419 |
Port scan detected on port 1801 (connection without data transfer)
|
Port Scan | |
| 🇷🇺 Agrohim |
Gate Inet blocked for categories:
|
DDoS Attack Ping of Death Port Scan Hacking Brute-Force | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 9999/tcp
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3389)
Source port: 62104
TTL: 237
Packet length: 44
TOS: 0x08
This report (for 220.167.232.166) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 MPL |
tcp/8161 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 RAP |
2026-03-15 13:45:56 UTC Unauthorized activity to TCP port 8089. Web App
|
Port Scan Web App Attack | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 donarev419 |
Connection to port 555 with data transfer.
Data preview:
|
Port Scan Hacking | |
| 🇺🇸 donarev419 |
Connection to port 2154 with data transfer.
Data preview:
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown