JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.197.78.8

220.197.78.8 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 79%: ?

79%

ISP	China Unicom
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Guiyang, Guizhou

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.197.78.8

Whois 220.197.78.8

IP Abuse Reports for 220.197.78.8:

This IP address has been reported a total of 138 times from 49 distinct sources. 220.197.78.8 was first reported on December 5th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 gbzret4d	2026-06-11 04:03:52 (3 days ago)	Honeypot [uk-production01]: Unauthorized traffic (16 bytes of payload); 44818 [1] TCP	Port Scan
🇬🇧 PeravixGroup	2026-06-11 01:12:04 (3 days ago)	Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: ... show more Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: MEDIUM. Aaran.cloud show less	Port Scan Brute-Force
🇸🇪 NordhTech	2026-06-10 14:30:13 (3 days ago)	More than 3 malicious connection attempts, trying port(s) 2112/tcp, then blocked from services ...	Port Scan Hacking
🇺🇸 xmission.com	2026-06-08 18:24:13 (5 days ago)	Blocked by UFW (TCP on 234) Source port: 62242 TTL: 237 Packet length: 44 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 234) Source port: 62242 TTL: 237 Packet length: 44 TOS: 0x00 This report (for 220.197.78.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-08 16:55:12 (5 days ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-06 20:30:18 (1 week ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-06 16:33:36 (1 week ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇧🇷 ICS Labs	2026-06-04 17:43:22 (1 week ago)	ICS Labs identified 220.197.78.8 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-04 11:58:48 (1 week ago)	Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aara ... show more Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aaran.cloud show less	Email Spam
🇬🇧 PeravixGroup	2026-06-04 02:07:11 (1 week ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 Petre 21_ip	2026-06-03 22:00:21 (1 week ago)	2026-06-04T00:00:20.156157+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-04T00:00:20.156157+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=220.197.78.8 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=25798 PROTO=TCP SPT=52809 DPT=16993 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇱 sefinek.net	2026-06-03 18:27:25 (1 week ago)	Honeypot hit: HTTP/1.1 request on 9007 GET / Accept: /; 9007 [1] TCP Reported by: https://github. ... show more Honeypot hit: HTTP/1.1 request on 9007 GET / Accept: /; 9007 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-06-03 17:56:11 (1 week ago)	tcp/3128	Port Scan
🇺🇸 MPL	2026-06-02 02:07:23 (1 week ago)	tcp/13720	Port Scan
🇬🇧 PeravixGroup	2026-05-31 00:23:17 (2 weeks ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.191.48.9

🇦🇷 181.46.39.95

🇺🇸 165.154.182.85

🇨🇳 106.75.141.181

🇧🇪 104.155.59.220

🇮🇳 34.47.243.143

🇳🇱 204.76.203.15

🇳🇱 176.65.139.249

🇮🇪 108.131.2.153

🇺🇸 98.169.154.62

🇺🇸 47.251.86.217

🇸🇬 47.128.61.236

🇳🇱 34.13.204.9

🇨🇦 2607:5300:203:7433::2

🇺🇸 2604:a880:400:d1:0:4:9639:7001

🇺🇸 184.105.139.104

🇨🇳 175.172.194.98

🇺🇸 172.234.199.93

🇩🇪 172.217.34.22

🇮🇳 103.147.248.23