220.167.232.45
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- XiNing City,XiNing Telecom JianGuoLu node,QingHai Province
- Usage Type
- Fixed Line ISP
- ASN
- AS140061
- Domain Name
- xn.qh.cn
- Country
- 🇨🇳 China
- City
- Xining, Qinghai
Abuse Reports
Total reports
231 from
69 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 bontekoe.technology |
220.167.232.45 banned on rtr - Threshold reached: 3 failures
|
Web App Attack | |
| 🇨🇦 Largnet SOC |
220.167.232.45 triggered Icarus honeypot on port 3389. Check us out on github.
|
Port Scan Hacking | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 MPL |
tcp/3306 (3 or more attempts)
|
Port Scan | |
| 🇩🇪 _ArminS_ |
SP-Scan 24161:7080 detected 2025.08.05 03:36:36
blocked until 2025.09.23 20:39:23
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/220.167.232.45
2025-07-30 05:33:57 /
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/49152 (2 or more attempts)
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/220.167.232.45
2025-07-23 01:20:27 /favicon.ico
|
Web App Attack | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/220.167.232.45
2025-07-14 15:02:37 /
|
Web App Attack | |
| 🇯🇵 mkaraki |
1751575343 # Service_probe # SIGNATURE_SEND # source_ip:220.167.232.45 # dst_port:1521
...
|
Port Scan | |
| 🇺🇸 drewf.ink |
[04:45] Port scanning. Port(s) scanned: TCP/8081
|
Port Scan | |
| 🇺🇸 MPL |
tcp/16000 (2 or more attempts)
|
Port Scan | |
| 🇧🇷 diego |
[probe-168-134] 2025-06-16 09:13:22, Client: 220.167.232.45, Protocol: 6, Unauthorized activity to HTTP: GET /
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/9000
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1443 (2 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown