JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.167.232.239

220.167.232.239 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 71%: ?

71%

ISP	CHINANET QINGHAI province network
Usage Type	Fixed Line ISP
ASN	AS140061
Domain Name	xn.qh.cn
Country	🇨🇳 China
City	Xining, Qinghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.167.232.239

Whois 220.167.232.239

IP Abuse Reports for 220.167.232.239:

This IP address has been reported a total of 151 times from 60 distinct sources. 220.167.232.239 was first reported on January 24th 2024, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-23 17:26:33 (8 hours ago)	Honeypot hit: Empty payload (likely service probe); 3010 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 3010 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇷 TheHoneyPotter	2026-06-23 09:01:01 (16 hours ago)	Honeypot [fc-honeypot]: Empty payload (likely service probe); 1344 [1] TCP Reported by: https://gith ... show more Honeypot [fc-honeypot]: Empty payload (likely service probe); 1344 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 MPL	2026-06-23 07:09:05 (18 hours ago)	tcp/12318 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-06-21 19:41:00 (2 days ago)	tcp/2103 (2 or more attempts)	Port Scan
🇺🇸 Axel	2026-06-21 09:57:09 (2 days ago)	Blocked by UFW on LAXHH [4200/tcp] \| SPT: 52103 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [4200/tcp] \| SPT: 52103 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-20 00:35:43 (4 days ago)	tcp/84	Port Scan
🇺🇸 xmission.com	2026-06-19 20:06:34 (4 days ago)	Blocked by UFW (TCP on 2167) Source port: 33823 TTL: 239 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 2167) Source port: 33823 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 220.167.232.239) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-19 02:58:34 (4 days ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 xmission.com	2026-06-18 00:19:51 (6 days ago)	Blocked by UFW (TCP on 49155) Source port: 30981 TTL: 239 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 49155) Source port: 30981 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 220.167.232.239) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇳 Mr.Singh	2026-06-17 21:30:12 (6 days ago)	NFT blocked 220.167.232.239 on 18-Jun-2026..	Port Scan Brute-Force
🇳🇱 BIV	2026-06-17 18:07:50 (6 days ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 2601. Automated ti ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 2601. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇬🇧 sandra361	2026-06-17 18:02:04 (6 days ago)	Port scan detected: 6 attempts across 1 ports (10008). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=22 ... show more Port scan detected: 6 attempts across 1 ports (10008). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=220.167.232.239 LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=57225 DF PROTO=TCP SPT=37698 DPT=10008 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 celestialcity	2026-06-17 16:52:21 (6 days ago)	Blocked by UFW on celestialcityeu [6466/tcp] \| SPT: 40327 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityeu [6466/tcp] \| SPT: 40327 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-10 01:41:45 (1 week ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇦🇺 LiftUp Hosting	2026-06-09 14:39:59 (2 weeks ago)	Honeypot hit: Unauthorized traffic (4 bytes of payload); 8086 [1] TCP	Port Scan

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.34

🇬🇧 193.176.29.30

🇺🇸 153.75.228.162

🇸🇬 152.32.218.149

🇮🇳 2404:6800:4000:1003::12b

🇻🇳 203.162.197.175

🇺🇸 172.212.174.123

🇮🇳 157.50.88.88

🇸🇬 152.42.170.216

🇫🇮 147.185.133.149

🇮🇩 103.182.200.10

🇮🇩 103.46.4.37

🇸🇪 88.218.45.216

🇱🇹 62.60.130.219

🇳🇿 45.133.7.77

🇮🇩 36.92.41.115

🇨🇳 27.17.182.94

🇧🇪 198.235.24.229

🇲🇦 196.92.7.247

🇪🇸 193.46.192.20