220.167.232.64

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
51% Elevated
224 reports
87 reporters · latest 4 days ago
ISP
XiNing City,XiNing Telecom JianGuoLu node,QingHai Province
Usage Type
Fixed Line ISP
ASN
AS140061
Domain Name
xn.qh.cn
Country
🇨🇳 China
City
Xining, Qinghai
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
224 from 87 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇲🇳 Mongolia 5 🇩🇪 Germany 3 🇳🇱 Netherlands 3
Most common categories Port Scan 15 Hacking 5 Bad Web Bot 2 Email Spam 1 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
denied traffic to a honeypot network. destination port 1080.
Port Scan Hacking
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇪🇸 raiolanetworks.com
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 10298 [1] TCP
Port Scan
🇫🇮 6kilowatti
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 3306.
Port Scan Hacking
🇭🇰 sandra361
Port scan detected: 13 attempts across 1 port (1863). | Evidence: REAPER_TARPIT: IN=eth0 SRC=220.167.232.64 LEN=40 TOS=0x14 PREC=0x00 TTL=47 ID=51113 DF PROTO=TCP SPT=29918 DPT=1863 WINDOW=29200 RES=0x00 ACK FIN URGP=0
Port Scan
🇺🇸 donarev419
Connection to port 3310 with data transfer. Data preview: �
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 5342.
Port Scan Hacking
🇺🇸 Axel
Blocked by UFW on LAXHH [27008/tcp] | SPT: 57311 | TTL: 235 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 sukka
VLESS Client trying to do VPN Domain-Fronting with Cloudflare CDN via a WebSocket Tunnel
Hacking Web App Attack
🇺🇸 Aurealize
firewall port scanning detected. 2 or more observation(s) from 2026-08-05T21:12:38.000Z through 2026-08-05T21:12:38.000Z.
Port Scan
🇺🇸 MPL
tcp/8085
Port Scan
🇺🇸 donarev419
Connection to port 1031 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:1031 Accept: */*
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 94.176.94.150
🇫🇮 45.133.115.104
🇺🇸 45.131.193.74
🇺🇸 2.57.78.59
🇷🇴 193.46.255.86
🇺🇦 176.99.104.8
🇵🇱 172.64.198.221
🇵🇱 172.64.198.115
🇺🇸 107.21.64.122
🇧🇩 103.91.231.185
🇳🇱 77.239.124.35
🇳🇱 77.67.26.157
🇳🇱 64.205.72.145
🇺🇸 51.19.194.81
🇺🇸 45.146.55.129
🇺🇸 45.132.227.160
🇺🇸 45.132.227.2
🇺🇸 45.132.115.169
🇺🇸 45.132.115.164
🇺🇸 45.132.115.152
feedback