220.167.232.6

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
52% Elevated
246 reports
86 reporters · latest 5 days ago
ISP
XiNing City,XiNing Telecom JianGuoLu node,QingHai Province
Usage Type
Fixed Line ISP
ASN
AS140061
Domain Name
xn.qh.cn
Country
🇨🇳 China
City
Xining, Qinghai
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
246 from 86 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 7 🇩🇪 Germany 3 🇫🇷 France 2
Most common categories Port Scan 11 Bad Web Bot 3 Brute-Force 3 Web App Attack 3 Hacking 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (243 bytes of payload); 3152 [1] TCP
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: HTTP/1.1 request on 2208 GET / Accept: */*; 2208 [1] TCP
Web App Attack
🇺🇸 MPL
tcp/50000 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/50000
Port Scan
🇺🇸 MPL
tcp/264 (2 or more attempts)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 12366) Source port: 11535 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.167.232.6) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇧🇪 sid3windr
SSH port scan (Tarpitted for 20s, wasted 32B)
Port Scan SSH
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:15236 dst:389
Port Scan
Anonymous
unsolicited connect TCP dport 2010 (sport 20692)
Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 2020) Source port: 46629 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.167.232.6) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
Port Scan Brute-Force
🇺🇸 MPL
tcp/9007
Port Scan
🇷🇺 nyuuzyou
{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "1080", "server": "socks5_server", "src_ip": "220.167.232.6", "src_port": "40486", "timestamp": "2026-01-10T18:08:54.945144"}
Port Scan Brute-Force
🇺🇸 shabi
UFW Blocked [10002/TCP] Source: 220.167.232.6:28874 TTL: 237 Lenth: 44 TOS: 0x00
Port Scan
Anonymous
Unauthorized connection to openVPN port 1194
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 88.189.235.168
🇳🇱 45.148.10.9
🇺🇸 199.165.159.180
🇬🇧 185.247.137.189
🇨🇭 179.43.153.2
🇵🇰 117.134.194.216
🇺🇦 94.178.149.10
🇳🇱 45.148.10.151
🇰🇿 2.132.234.104
🇩🇪 167.94.145.24
🇺🇸 152.163.101.41
🇺🇸 134.33.96.243
🇨🇷 200.229.0.135
🇬🇧 193.163.125.17
🇺🇸 172.236.96.130
🇲🇦 105.77.99.196
feedback