AbuseIPDB » 220.196.249.6

220.196.249.6 was found in our database!

This IP was reported 160 times. Confidence of Abuse is 3%: ?

ISP	China Unicom
Usage Type	Unknown
Domain Name	chinaunicom.com
Country	China
City	Taizhou, Jiangsu

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 220.196.249.6

Whois 220.196.249.6

IP Abuse Reports for 220.196.249.6:

This IP address has been reported a total of 160 times from 87 distinct sources. 220.196.249.6 was first reported on June 13th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2024-06-14 18:32:18 (2 months ago)	(mod_security) mod_security (id:211220) triggered by 220.196.249.6 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:211220) triggered by 220.196.249.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 14 14:32:10.420358 2024] [security2:error] [pid 31943] [client 220.196.249.6:38308] [client 220.196.249.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\?(?!xml\\\\s)" at ARGS_NAMES:/<?echo(md5("hi"));?> /tmp/index1.php. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "70"] [id "211220"] [rev "4"] [msg "COMODO WAF: PHP Injection Attack\|\|192.64.151.16:443\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.16"] [uri "/index.php"] [unique_id "ZmyMqlON8vUK6VNz7awYFgAAAAw"] show less	Brute-Force Brute-Force Bad Web Bot Bad Web Bot Web App Attack Web App Attack
ICT KnTl	2024-06-14 14:38:50 (3 months ago)	[Fri Jun 14 16:38:48.783247 2024] [php7:error] [pid 81189] [client 220.196.249.6:53146] script &#039 ... show more[Fri Jun 14 16:38:48.783247 2024] [php7:error] [pid 81189] [client 220.196.249.6:53146] script '/var/www/html/index.php' not found or unable to stat [Fri Jun 14 16:38:49.306585 2024] [php7:error] [pid 81189] [client 220.196.249.6:53146] script '/var/www/html/index.php' not found or unable to stat [Fri Jun 14 16:38:49.483025 2024] [php7:error] [pid 81189] [client 220.196.249.6:53146] script '/var/www/html/index.php' not found or unable to stat ... show less	Web App Attack Web App Attack
cxnky	2024-06-14 14:31:49 (3 months ago)	Jun 14 14:31:35 staging-api sshd[1762219]: Failed password for root from 220.196.249.6 port 41854 ss ... show moreJun 14 14:31:35 staging-api sshd[1762219]: Failed password for root from 220.196.249.6 port 41854 ssh2 Jun 14 14:31:46 staging-api sshd[1762233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.196.249.6 user=root Jun 14 14:31:47 staging-api sshd[1762233]: Failed password for root from 220.196.249.6 port 55210 ssh2 ... show less	Brute-Force Brute-Force SSH SSH
ipHunter	2024-06-14 14:25:46 (3 months ago)	$f2bV_matches	Brute-Force Brute-Force SSH SSH
MU-star.net	2024-06-14 14:14:36 (3 months ago)	Invalid user lighthouse from 220.196.249.6 port 37812	Port Scan Port Scan Brute-Force Brute-Force SSH SSH
MU-star.net	2024-06-14 14:14:36 (3 months ago)	Invalid user lighthouse from 220.196.249.6 port 37812	Port Scan Port Scan Brute-Force Brute-Force SSH SSH
AaranCloud	2024-06-14 13:25:13 (3 months ago)	2024-06-14T13:25:09.629544 Abus sshd[650103]: pam_unix(sshd:auth): authentication failure; logname= ... show more2024-06-14T13:25:09.629544 Abus sshd[650103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.196.249.6 user=root 2024-06-14T13:25:11.837171 Abus sshd[650103]: Failed password for root from 220.196.249.6 port 46876 ssh2 ... show less	Brute-Force Brute-Force SSH SSH
MPL	2024-06-14 12:43:00 (3 months ago)	tcp/2222 (2 or more attempts)	Port Scan Port Scan
cxnky	2024-06-14 11:33:38 (3 months ago)	Jun 14 11:33:26 flipt sshd[3350917]: Failed password for root from 220.196.249.6 port 51206 ssh2<br ... show moreJun 14 11:33:26 flipt sshd[3350917]: Failed password for root from 220.196.249.6 port 51206 ssh2 Jun 14 11:33:37 flipt sshd[3350940]: Invalid user sa from 220.196.249.6 port 36374 ... show less	Brute-Force Brute-Force SSH SSH
SaferWeb	2024-06-14 10:15:38 (3 months ago)	#2 (mod_security) mod_security (id:920170) triggered by 220.196.249.6 (CN/China/-): 3 in the last 60 ... show more#2 (mod_security) mod_security (id:920170) triggered by 220.196.249.6 (CN/China/-): 3 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: show less	Bad Web Bot Bad Web Bot Web App Attack Web App Attack
Admins@FBN	2024-06-14 10:05:11 (3 months ago)	FW-PortScan: Traffic Blocked srcport=18645 dstport=22	Port Scan Port Scan Hacking Hacking SSH SSH
sverre26	2024-06-14 09:58:25 (3 months ago)	Bruteforce detected by fail2ban	Brute-Force Brute-Force SSH SSH
Admins@FBN	2024-06-14 09:22:29 (3 months ago)	FW-PortScan: Traffic Blocked srcport=15343 dstport=22	Port Scan Port Scan Hacking Hacking SSH SSH
Mario Silber	2024-06-14 07:25:27 (3 months ago)	(sshd) Failed SSH login from 220.196.249.6 (CN/China/-)	Brute-Force Brute-Force SSH SSH
gu-alvareza	2024-06-14 07:05:23 (3 months ago)	Apache.HTTP.Server.cgi-bin.Path.Traversal	Hacking Hacking Web App Attack Web App Attack