JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.167.232.201

220.167.232.201 was found in our database!

This IP was reported 212 times. Confidence of Abuse is 53%: ?

53%

ISP	CHINANET QINGHAI province network
Usage Type	Fixed Line ISP
ASN	AS140061
Domain Name	xn.qh.cn
Country	🇨🇳 China
City	Xining, Qinghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.167.232.201

Whois 220.167.232.201

IP Abuse Reports for 220.167.232.201:

This IP address has been reported a total of 212 times from 80 distinct sources. 220.167.232.201 was first reported on January 23rd 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 TheHoneyPotter	2026-06-17 16:38:02 (2 days ago)	Honeypot [fc-honeypot]: Large payload (1457 bytes); 9003 [1] TCP Reported by: https://github.com/sef ... show more Honeypot [fc-honeypot]: Large payload (1457 bytes); 9003 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 xmission.com	2026-06-17 15:30:18 (2 days ago)	Blocked by UFW (TCP on 12211) Source port: 35696 TTL: 239 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 12211) Source port: 35696 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 220.167.232.201) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-15 19:06:57 (3 days ago)	Blocked by UFW (TCP on 8765) Source port: 18119 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8765) Source port: 18119 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.167.232.201) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 EDSL	2026-06-11 00:29:36 (1 week ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇬🇧 PeravixGroup	2026-06-08 09:54:22 (1 week ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-06 13:25:39 (1 week ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇸🇪 donarev419	2026-06-05 06:24:08 (2 weeks ago)	Connection to port 2572 with data transfer. Data preview: GET / HTTP/1.1 Host: 51.21.134.169:2572 ... show more Connection to port 2572 with data transfer. Data preview: GET / HTTP/1.1 Host: 51.21.134.169:2572 Accept: / show less	Port Scan Hacking
🇬🇧 PeravixGroup	2026-06-04 12:32:19 (2 weeks ago)	Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aara ... show more Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aaran.cloud show less	Email Spam
🇬🇧 PeravixGroup	2026-05-31 13:08:18 (2 weeks ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇺🇸 MPL	2026-05-31 09:08:48 (2 weeks ago)	tcp/11211	Port Scan
🇫🇷 security.rdmc.fr	2026-05-31 06:54:33 (2 weeks ago)	Port Scan Attack proto:TCP src:30636 dst:873	Port Scan
🇩🇪 Sculk Ltd.	2026-05-30 03:29:41 (2 weeks ago)	Unsolicited Minecraft server-list ping (handshake/status) to TCP/25565 across 0 address(es); protoco ... show more Unsolicited Minecraft server-list ping (handshake/status) to TCP/25565 across 0 address(es); protocol Legacy. Automated port scan detected by a Velocity proxy. show less	Port Scan
🇬🇧 PeravixGroup	2026-05-30 02:34:21 (2 weeks ago)	Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. A ... show more Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud show less	DDoS Attack Hacking
🇩🇪 pltcldvlpr	2026-05-30 01:00:01 (2 weeks ago)	Bogus Useragent: 220.167.232.201 - - [30/May/2026:03:00:00 +0200] "GET /sites/favicon.png HTTP/1.1" ... show more Bogus Useragent: 220.167.232.201 - - [30/May/2026:03:00:00 +0200] "GET /sites/favicon.png HTTP/1.1" 444 0 "-" "Mozilla/4.066686748 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" asn=140061 org="China Telecom" country=CN ... show less	Bad Web Bot
🇺🇸 MPL	2026-05-27 17:11:34 (3 weeks ago)	tcp/10075 (3 or more attempts)	Port Scan

Showing 1 to 15 of 212 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.242

🇵🇪 201.230.200.46

🇳🇱 176.65.149.27

🇸🇬 172.253.211.26

🇳🇱 154.86.119.173

🇩🇪 151.243.11.35

🇨🇳 111.113.89.104

🇳🇱 45.198.224.138

🇳🇱 204.76.203.219

🇨🇳 116.26.13.173

🇨🇳 111.26.62.39

🇩🇪 87.106.75.222

🇧🇬 78.90.19.40

🇺🇸 50.217.40.11

🇧🇷 45.205.1.243

🇬🇧 213.166.84.40

🇺🇸 165.154.134.203

🇺🇸 65.49.20.71

🇳🇱 176.65.149.31

🇫🇮 147.185.133.10