JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.187.56.59

220.187.56.59 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 63%: ?

63%

ISP	CHINANET-ZJ Zhoushan node network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	zsptt.zj.cn
Country	🇨🇳 China
City	Ningbo, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.187.56.59

Whois 220.187.56.59

IP Abuse Reports for 220.187.56.59:

This IP address has been reported a total of 11 times from 10 distinct sources. 220.187.56.59 was first reported on July 11th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 mkey	2026-07-13 22:05:01 (1 hour ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-07-14 00:00:10 \| LAST=2026-07-14 00:00:11. Last seen 2026-07-14 00:00:11. show less	Port Scan
Anonymous	2026-07-13 21:52:07 (1 hour ago)	Unauthorized connection to Telnet port 23	Port Scan
Anonymous	2026-07-13 17:44:57 (5 hours ago)	1783964696 - 07/13/2026 19:44:56 Host: 220.187.56.59/220.187.56.59 Port: 23 TCP Blocked ...	Port Scan
🇨🇭 m_vlasov	2026-07-13 07:53:43 (15 hours ago)	SSH/Telnet honeypot: 0 login attempts, 1 sessions, 0 shell commands.	Port Scan IoT Targeted
🇳🇱 soverin	2026-07-13 05:32:15 (17 hours ago)	Network scan on port 23	Email Spam
🇺🇸 pcprincipal8752	2026-07-13 02:00:47 (21 hours ago)	NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| ... show more NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| 6) ping ;sh \| 7) /bin/busybox \| 8) iptables -F \| 9) /bin/busybox echo > /tmp/.fxcat && sh /tmp/.fxcat && cd /tmp/ \| 10) /bin/busybox echo > /var/.fxcat && sh /var/.fxcat && cd /var/ \| 11) /bin/busybox echo > /var/run/.fxcat && sh /var/run/.fxcat && cd /var/run/ \| 12) /bin/busybox echo > /var/tmp/.fxcat && sh /var/tmp/.fxcat && cd /var/tmp/ \| 13) /bin/busybox echo > /dev/.fxcat && sh /dev/.fxcat && cd /dev/ \| 14) /bin/busybox echo > /dev/shm/.fxcat && sh /dev/shm/.fxcat && cd /dev/shm/ \| 15) /bin/busybox echo > /etc/.fxcat && sh /etc/.fxcat && cd /etc/ \| 16) /bin/busybox echo > /mnt/.fxcat && sh /mnt/.fxcat && cd /mnt/ \| 17) /bin/busybox echo > /usr/.fxcat && sh /usr/.fxcat && cd /usr/ \| 18) /bin/busybox echo > /boot/.fxcat && sh /boot/.fxcat && cd /boot/ \| 19) /bin/busybox echo > /home/.fxcat && sh /home/.fxcat && cd /home/ \| 20) for pid in /proc/[0-9]; do pid_num="${pid##/}"; if [ -r "$pid/maps" ]; then sus show less	Brute-Force
🇫🇷 sthoyer.de	2026-07-12 15:44:42 (1 day ago)	Jul 12 17:44:42 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 12 17:44:42 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=220.187.56.59 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=52 ID=53041 DF PROTO=TCP SPT=37641 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-07-12 13:03:27 (1 day ago)	tcp/23 (4 or more attempts)	Port Scan
Anonymous	2026-07-11 21:25:52 (2 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-07-11 20:49:09 (2 days ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇫🇷 wiredalter	2026-07-11 20:41:37 (2 days ago)	Blocked by fail2ban on o2VPS [23/tcp] Source Port: 40077 TTL: 45 Packet Length: 60 TOS: 0x00 Analyz ... show more Blocked by fail2ban on o2VPS [23/tcp] Source Port: 40077 TTL: 45 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇧🇷 172.69.55.132

🇺🇸 152.32.208.7

🇳🇱 45.148.10.157

🇩🇿 41.100.242.52

🇮🇳 38.225.205.193

🇬🇧 35.203.210.200

🇩🇪 213.209.159.108

🇩🇪 130.12.180.153

🇨🇳 117.69.255.239

🇲🇲 103.154.241.40

🇺🇸 103.143.238.100

🇮🇳 103.67.152.201

🇳🇱 89.124.112.117

🇮🇹 78.209.224.45

🇱🇻 46.8.64.167

🇨🇦 20.63.63.128

🇷🇴 2.57.121.112

🇹🇷 212.98.224.95

🇹🇼 198.235.24.117