JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.202.112.121

220.202.112.121 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 78%: ?

78%

ISP	China Unicom
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Changsha, Hunan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.202.112.121

Whois 220.202.112.121

IP Abuse Reports for 220.202.112.121:

This IP address has been reported a total of 86 times from 34 distinct sources. 220.202.112.121 was first reported on January 19th 2024, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-27 03:08:03 (14 hours ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-06-26 15:45:52 (1 day ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇦🇺 LiftUp Hosting	2026-06-26 04:03:55 (1 day ago)	Honeypot hit: Large payload (1457 bytes); 2112 [1] TCP	Bad Web Bot
🇺🇸 sandra361	2026-06-25 07:19:44 (2 days ago)	Port scan detected: 8 attempts across 1 ports (20547). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=220. ... show more Port scan detected: 8 attempts across 1 ports (20547). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=220.202.112.121 LEN=60 TOS=0x00 PREC=0x00 TTL=34 ID=58591 DF PROTO=TCP SPT=39017 DPT=20547 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-25 06:14:42 (2 days ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 20202 [1] TCP	Port Scan
🇵🇱 sefinek.net	2026-06-23 14:02:52 (4 days ago)	Blocked by UFW on PL02 [10005/tcp] \| SPT: 57204 \| TTL: 228 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on PL02 [10005/tcp] \| SPT: 57204 \| TTL: 228 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-23 02:59:24 (4 days ago)	tcp/11210	Port Scan
🇦🇹 centurion	2026-06-21 03:39:14 (6 days ago)	Blocked by UFW on cloud [2105/tcp] Source port: 32365 TTL: 234 Packet length: 44 TOS: 0x00 This rep ... show more Blocked by UFW on cloud [2105/tcp] Source port: 32365 TTL: 234 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Petre 21_ip	2026-06-20 06:08:41 (1 week ago)	2026-06-20T08:08:41.197223+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-20T08:08:41.197223+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=220.202.112.121 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=43155 PROTO=TCP SPT=54308 DPT=6466 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-20 00:38:03 (1 week ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇳🇱 BIV	2026-06-19 12:41:38 (1 week ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 10209. Automated t ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 10209. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇺🇸 MPL	2026-06-18 03:49:46 (1 week ago)	tcp/51001	Port Scan
🇬🇧 PeravixGroup	2026-06-18 01:57:07 (1 week ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇯🇵 jay hung	2026-06-17 11:31:08 (1 week ago)	2026-06-17T11:31:07.596323+00:00 quarktech kernel: [340520.047100] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-06-17T11:31:07.596323+00:00 quarktech kernel: [340520.047100] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=220.202.112.121 DST=172.237.20.248 LEN=42 TOS=0x00 PREC=0x00 TTL=232 ID=45369 PROTO=UDP SPT=17062 DPT=80 LEN=22 ... show less	Port Scan
🇺🇸 MPL	2026-06-16 16:39:51 (1 week ago)	tcp/10250	Port Scan

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 203.145.34.182

🇺🇸 185.223.152.80

🇳🇱 172.94.9.120

🇺🇸 44.93.225.190

🇮🇳 182.70.255.242

🇧🇷 177.44.97.22

🇰🇷 121.162.101.73

🇺🇸 52.167.144.162

🇳🇱 45.148.10.157

🇳🇱 45.148.10.151

🇩🇪 44.149.221.44

🇺🇸 216.244.66.238

🇺🇸 192.0.102.142

🇺🇸 162.241.33.238

🇮🇳 122.187.249.88

🇻🇳 113.160.209.29

🇷🇴 92.118.39.148

🇧🇬 79.124.59.78

🇺🇸 70.167.235.133

🇨🇳 58.47.110.157