JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.167.233.133

220.167.233.133 was found in our database!

This IP was reported 159 times. Confidence of Abuse is 48%: ?

48%

ISP	CHINANET QINGHAI province network
Usage Type	Fixed Line ISP
ASN	AS140061
Domain Name	xn.qh.cn
Country	🇨🇳 China
City	Xining, Qinghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.167.233.133

Whois 220.167.233.133

IP Abuse Reports for 220.167.233.133:

This IP address has been reported a total of 159 times from 66 distinct sources. 220.167.233.133 was first reported on January 23rd 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 TheHoneyPotter	2026-06-25 17:19:36 (1 day ago)	Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2 ... show more Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2026-06-25T17:19:35.913Z ACCEPT host=::ffff:220.167.233.133 port=37066 fd=9 n=6/4096 ... show less	Brute-Force SSH
🇺🇸 MPL	2026-06-25 11:26:22 (1 day ago)	tcp/27006 (2 or more attempts)	Port Scan
🇬🇧 sandra361	2026-06-23 16:34:03 (3 days ago)	Port scan detected: 6 attempts across 1 ports (7779). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=220 ... show more Port scan detected: 6 attempts across 1 ports (7779). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=220.167.233.133 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=57182 DF PROTO=TCP SPT=15742 DPT=7779 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-06-20 01:58:54 (6 days ago)	2026-06-20T02:58:53.952280+01:00 vps kernel: [43660885.172294] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-20T02:58:53.952280+01:00 vps kernel: [43660885.172294] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=220.167.233.133 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=3755 PROTO=TCP SPT=45728 DPT=7199 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇷 TheHoneyPotter	2026-06-19 18:33:00 (1 week ago)	Honeypot [fc-honeypot]: HTTP/1.1 request on 2762 GET / Accept: /; 2762 [1] TCP Reported by: https ... show more Honeypot [fc-honeypot]: HTTP/1.1 request on 2762 GET / Accept: /; 2762 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 Axel	2026-06-17 14:02:22 (1 week ago)	Blocked by UFW on LAXHH [5557/tcp] \| SPT: 52912 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [5557/tcp] \| SPT: 52912 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-14 21:32:53 (1 week ago)	tcp/7999	Port Scan
🇺🇸 Axel	2026-06-13 01:28:37 (1 week ago)	Blocked by UFW on LAXHH [554/tcp] \| SPT: 38970 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on LAXHH [554/tcp] \| SPT: 38970 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-11 05:29:10 (2 weeks ago)	Blocked by UFW (TCP on 9000) Source port: 14649 TTL: 239 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 9000) Source port: 14649 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 220.167.233.133) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Admins@FBN	2026-06-03 04:18:54 (3 weeks ago)	FW-PortScan: Traffic Blocked srcport=62887 dstport=1723	Port Scan
🇺🇸 MPL	2026-05-30 18:54:59 (3 weeks ago)	tcp/2012	Port Scan
🇮🇳 evicky2002	2026-05-30 08:05:12 (3 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=3)	Hacking Brute-Force SSH
Anonymous	2026-05-29 14:51:29 (4 weeks ago)	2026-05-29T15:51:27.922180+01:00 vps kernel: [41806459.769811] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-05-29T15:51:27.922180+01:00 vps kernel: [41806459.769811] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=220.167.233.133 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=31785 PROTO=TCP SPT=61015 DPT=12192 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 MPL	2026-05-22 08:48:17 (1 month ago)	tcp/10312	Port Scan
🇺🇸 MPL	2026-05-10 04:41:03 (1 month ago)	tcp/1028	Port Scan

Showing 1 to 15 of 159 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 34.106.192.93

🇺🇸 20.168.7.136

🇪🇸 196.245.53.229

🇳🇱 195.178.110.232

🇺🇸 147.185.132.178

🇰🇷 125.137.115.145

🇨🇳 116.179.37.228

🇹🇼 111.70.1.128

🇨🇳 60.25.68.213

🇳🇱 204.76.203.64

🇺🇸 162.216.150.15

🇺🇸 162.216.149.222

🇮🇳 122.162.149.183

🇨🇳 116.179.37.209

🇨🇳 116.179.37.57

🇮🇹 72.146.8.190

🇳🇱 50.7.127.99

🇺🇸 199.104.120.81

🇲🇾 175.136.140.181

🇺🇸 162.216.149.212