JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.167.233.65

220.167.233.65 was found in our database!

This IP was reported 212 times. Confidence of Abuse is 83%: ?

83%

ISP	CHINANET QINGHAI province network
Usage Type	Fixed Line ISP
ASN	AS140061
Domain Name	xn.qh.cn
Country	🇨🇳 China
City	Xining, Qinghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.167.233.65

Whois 220.167.233.65

IP Abuse Reports for 220.167.233.65:

This IP address has been reported a total of 212 times from 67 distinct sources. 220.167.233.65 was first reported on January 24th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Axel	2026-08-22 01:22:50 (4 days ago)	Blocked by UFW on LAXHH [12187/tcp] \| SPT: 55321 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [12187/tcp] \| SPT: 55321 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇸 Scan	2026-08-22 00:59:08 (4 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇨🇦 lakered	2026-08-21 11:10:38 (4 days ago)	Detectors: [NGINX] \| Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole \| Evid ... show more Detectors: [NGINX] \| Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole \| Evidence: High-Criminality-Signature (p0f::64:0::mss*20,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98) \| TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m) show less	Port Scan
🇺🇸 Axel	2026-08-21 09:36:19 (4 days ago)	Blocked by UFW on LAXHH [2223/tcp] \| SPT: 12783 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [2223/tcp] \| SPT: 12783 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 donarev419	2026-08-20 06:07:49 (6 days ago)	Connection to port 12699 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:1269 ... show more Connection to port 12699 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:12699 Accept: / show less	Port Scan Hacking
🇺🇸 Axel	2026-08-20 03:37:36 (6 days ago)	Blocked by UFW on LAXHH [1443/tcp] \| SPT: 33876 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [1443/tcp] \| SPT: 33876 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-20 03:10:53 (6 days ago)	denied traffic to a honeypot network. destination port 8098.	Port Scan Hacking
🇺🇸 Axel	2026-08-19 15:28:07 (6 days ago)	Blocked by UFW on LAXHH [14100/tcp] \| SPT: 46941 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [14100/tcp] \| SPT: 46941 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 azminawwar	2026-08-17 11:55:41 (1 week ago)	[220.167.233.65] triggered by honeypot on port [3389], Timestamp [2026-08-17T11:55:41Z]USER anonymou ... show more [220.167.233.65] triggered by honeypot on port [3389], Timestamp [2026-08-17T11:55:41Z]USER anonymous show less	Port Scan Hacking
🇫🇮 6kilowatti	2026-08-17 10:07:25 (1 week ago)	2026-08-17T13:07:25.382755+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-08-17T13:07:25.382755+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=220.167.233.65 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=59756 PROTO=TCP SPT=38752 DPT=9004 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-08-16 19:37:29 (1 week ago)	5236/tcp (1 or more attempts)	Port Scan
🇩🇪 Admins@FBN	2026-08-16 13:36:01 (1 week ago)	FW-PortScan: Traffic Blocked srcport=60434 dstport=10039	Port Scan
🇺🇸 Axel	2026-08-11 10:19:36 (2 weeks ago)	Blocked by UFW on LAXHH [12334/tcp] \| SPT: 44717 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [12334/tcp] \| SPT: 44717 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-08-10 04:14:53 (2 weeks ago)	Honeypot hit: Large payload (1457 bytes); 12151 [1] TCP	Hacking
🇭🇰 sandra361	2026-08-08 12:45:17 (2 weeks ago)	Port scan detected: 11 attempts across 1 port (50000). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=220.16 ... show more Port scan detected: 11 attempts across 1 port (50000). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=220.167.233.65 LEN=473 TOS=0x14 PREC=0x00 TTL=47 ID=38827 DF PROTO=TCP SPT=57563 DPT=50000 WINDOW=29200 RES=0x00 ACK PSH FIN URGP=0 show less	Port Scan

Showing 1 to 15 of 212 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.170

🇧🇷 138.185.242.212

🇺🇸 100.29.192.85

🇧🇬 79.124.60.218

🇱🇹 62.60.130.242

🇳🇴 20.251.63.238

🇮🇷 2.180.6.8

🇺🇸 2620:171:2f:f002:9999::241

🇷🇴 193.46.255.146

🇦🇷 186.60.158.100

🇳🇱 185.224.128.16

🇨🇱 181.42.138.40

🇺🇸 168.62.48.100

🇫🇮 147.185.133.47

🇮🇳 144.16.21.150

🇰🇷 118.39.50.107

🇨🇳 113.237.230.65

🇮🇩 101.255.111.209

🇨🇦 99.249.183.235

🇺🇸 45.61.185.216