JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.167.233.143

220.167.233.143 was found in our database!

This IP was reported 183 times. Confidence of Abuse is 48%: ?

48%

ISP	CHINANET QINGHAI province network
Usage Type	Fixed Line ISP
ASN	AS140061
Domain Name	xn.qh.cn
Country	🇨🇳 China
City	Xining, Qinghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.167.233.143

Whois 220.167.233.143

IP Abuse Reports for 220.167.233.143:

This IP address has been reported a total of 183 times from 66 distinct sources. 220.167.233.143 was first reported on January 23rd 2024, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-04 22:37:50 (3 hours ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 MPL	2026-06-04 18:30:39 (7 hours ago)	tcp/8030	Port Scan
🇬🇧 PeravixGroup	2026-05-27 05:32:19 (1 week ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-05-27 04:33:45 (1 week ago)	2026-05-27T06:33:44.466747+02:00 myserver sshd[1848661]: banner exchange: Connection from 220.167.23 ... show more 2026-05-27T06:33:44.466747+02:00 myserver sshd[1848661]: banner exchange: Connection from 220.167.233.143 port 63977: invalid format 2026-05-27T06:33:44.466747+02:00 myserver sshd[1848661]: banner exchange: Connection from 220.167.233.143 port 63977: invalid format ... show less	Brute-Force SSH
🇬🇧 PeravixGroup	2026-05-26 10:16:49 (1 week ago)	Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5986. Seve ... show more Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5986. Severity: MEDIUM. Aaran.cloud show less	Brute-Force Hacking
🇺🇸 xmission.com	2026-05-26 08:58:43 (1 week ago)	Blocked by UFW (TCP on 2198) Source port: 53998 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2198) Source port: 53998 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.167.233.143) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-24 10:52:51 (1 week ago)	Honeypot detection: Server-Side Template Injection (SSTI) attempt on port 8443. Severity: HIGH. Aara ... show more Honeypot detection: Server-Side Template Injection (SSTI) attempt on port 8443. Severity: HIGH. Aaran.cloud show less	Hacking Web App Attack
🇺🇸 cazae	2026-05-20 01:19:48 (2 weeks ago)	Unauthorized attempt on debian [2332/tcp] Source port: 11377 TTL: 234 Packet length: 44 TOS: 0x08 h ... show more Unauthorized attempt on debian [2332/tcp] Source port: 11377 TTL: 234 Packet length: 44 TOS: 0x08 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-17 15:33:26 (2 weeks ago)	Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MED ... show more Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇦🇹 urnilxfgbez	2026-05-16 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-05-16 02:09:19 (2 weeks ago)	tcp/10073 (2 or more attempts)	Port Scan
🇫🇷 ELYAZ	2026-05-08 08:43:03 (3 weeks ago)	(y3) Failed access -byebye- from 220.167.233.143 (CN/China/-): (CF_ENABLE)	Hacking
🇩🇪 Justin F. \| AS204464	2026-05-07 04:05:09 (4 weeks ago)	Honeypot [nx-infrastructure]: Unauthorized traffic (16 bytes of payload); 10234 [1] TCP Reported by: ... show more Honeypot [nx-infrastructure]: Unauthorized traffic (16 bytes of payload); 10234 [1] TCP Reported by: Justin F. show less	Port Scan
🇳🇱 DonAtari	2026-04-22 11:33:05 (1 month ago)	DShield firewall scan - TCP to port 9292	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-20 01:11:34 (1 month ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/220.167.233.143 2026-0 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/220.167.233.143 2026-04-19 19:07:22 / show less	Web App Attack

Showing 1 to 15 of 183 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 152.32.205.7

🇮🇳 122.176.122.24

🇨🇳 121.229.9.110

🇫🇷 81.65.89.86

🇳🇱 45.148.10.230

🇧🇪 198.235.24.232

🇺🇸 162.216.149.177

🇻🇳 125.253.121.228

🇨🇳 122.115.224.56

🇹🇼 111.248.235.141

🇱🇺 46.151.182.186

🇨🇳 221.229.218.50

🇺🇸 192.3.218.12

🇩🇪 185.220.101.105

🇮🇳 182.95.42.130

🇨🇳 180.76.98.88

🇺🇸 162.216.150.138

🇮🇩 116.197.133.25

🇱🇹 45.227.254.170

🇬🇧 35.203.210.224