JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.197.78.196

220.197.78.196 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 70%: ?

70%

ISP	China Unicom
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Chongqing, Chongqing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.197.78.196

Whois 220.197.78.196

IP Abuse Reports for 220.197.78.196:

This IP address has been reported a total of 110 times from 42 distinct sources. 220.197.78.196 was first reported on December 6th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-05 10:41:42 (4 hours ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇫🇮 6kilowatti	2026-06-04 14:01:36 (1 day ago)	2026-06-04T17:01:35.858687+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-04T17:01:35.858687+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=220.197.78.196 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=228 ID=31172 PROTO=TCP SPT=44574 DPT=2232 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇺 LiftUp Hosting	2026-06-04 06:58:37 (1 day ago)	Honeypot hit: HTTP/1.1 request on 18182 GET / Accept: /; 18182 [1] TCP	Hacking Bad Web Bot
🇬🇧 PeravixGroup	2026-06-04 03:21:55 (1 day ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-06-04 01:02:10 (1 day ago)	Honeypot hit: HTTP/1.1 request on 12121 GET / Accept: /; 12121 [1] TCP Reported by: https://githu ... show more Honeypot hit: HTTP/1.1 request on 12121 GET / Accept: /; 12121 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-05-30 19:11:44 (5 days ago)	tcp/2012 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-05-30 11:43:50 (6 days ago)	tcp/1443 (2 or more attempts)	Port Scan
🇵🇱 sefinek.net	2026-05-30 01:15:37 (6 days ago)	Honeypot hit: HTTP/1.1 request on 50000 GET / Accept: /; 50000 [1] TCP Reported by: https://githu ... show more Honeypot hit: HTTP/1.1 request on 50000 GET / Accept: /; 50000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇬🇧 PeravixGroup	2026-05-28 05:12:52 (1 week ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-27 06:06:04 (1 week ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 gbzret4d	2026-05-26 13:58:07 (1 week ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 6699 [1] TCP	Port Scan
🇺🇸 xmission.com	2026-05-23 04:29:55 (1 week ago)	Blocked by UFW (TCP on 5342) Source port: 12725 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5342) Source port: 12725 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.197.78.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-23 03:27:06 (1 week ago)	Blocked by UFW (TCP on 9000) Source port: 32241 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9000) Source port: 32241 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.197.78.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-20 15:25:46 (2 weeks ago)	Blocked by UFW (TCP on 853) Source port: 23940 TTL: 237 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 853) Source port: 23940 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.197.78.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 EDSL	2026-05-20 10:57:56 (2 weeks ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.87.89

🇧🇪 198.235.24.181

🇧🇪 198.235.24.172

🇰🇿 188.246.251.181

🇰🇿 45.138.221.36

🇨🇳 218.18.204.143

🇺🇿 213.230.120.138

🇺🇿 213.230.86.254

🇰🇬 212.241.5.25

🇺🇸 208.109.240.82

🇧🇪 198.235.24.229

🇸🇾 185.185.74.147

🇮🇷 185.177.158.69

🇧🇴 181.115.172.126

🇵🇭 180.191.232.47

🇺🇸 162.216.149.84

🇮🇩 140.213.128.52

🇮🇳 125.19.163.58

🇨🇳 120.239.177.104

🇨🇳 114.226.49.16