220.202.112.148

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
73% Elevated
175 reports
63 reporters ยท latest 8 hours ago
ISP
China Unicom
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
๐Ÿ‡จ๐Ÿ‡ณ China
City
Changsha, Hunan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
175 from 63 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 22 ๐Ÿ‡ฒ๐Ÿ‡ณ Mongolia 5 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 4
Most common categories Port Scan 42 Hacking 12 Brute-Force 2 SSH 2 Web App Attack 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ญ๐Ÿ‡ฐ sandra361
Port scan detected: 5 attempts across 1 port (1154). | Evidence: REAPER_TARPIT: IN=eth0 SRC=220.202.112.148 LEN=40 TOS=0x14 PREC=0x00 TTL=45 ID=10837 DF PROTO=TCP SPT=18241 DPT=1154 WINDOW=29200 RES=0x00 ACK FIN URGP=0
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 6588) Source port: 53482 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 220.202.112.148) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 10380 with data transfer. Data preview: ๏ฟฝ
Port Scan Hacking
Anonymous
Blocked by firewall on hugin [2809/tcp] | Rule: UFW | SPT: 18945 | TTL: 233 | LEN: 44 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Activity from blacklisted IP
Hacking
๐Ÿ‡ณ๐Ÿ‡ฑ donarev419
Connection to port 9443 with data transfer. Data preview: GET / HTTP/1.1 Host: 109.110.170.76:9443 Accept: */*
Port Scan Hacking
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Large payload (1457 bytes); 6100 [1] TCP
Hacking
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Port scan detected on port 8887 (connection without data transfer)
Port Scan
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 2983 [1] TCP
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 15555) Source port: 17922 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 220.202.112.148) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท EvoX
๐Ÿ›ก๏ธ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (16 bytes of payload); 19133 [1] TCP
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 3522 with data transfer. Data preview: USER anonymous
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 19528 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:19528 Accept: */*
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/9007 (2 or more attempts)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/3389 (2 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ธ๐Ÿ‡ฌ 8.222.162.136
๐Ÿ‡ฎ๐Ÿ‡ฉ 202.51.214.99
๐Ÿ‡ฌ๐Ÿ‡ง 172.71.178.124
๐Ÿ‡ฉ๐Ÿ‡ช 172.71.164.182
๐Ÿ‡บ๐Ÿ‡ธ 172.71.155.22
๐Ÿ‡บ๐Ÿ‡ธ 157.254.18.71
๐Ÿ‡น๐Ÿ‡ญ 101.108.36.157
๐Ÿ‡บ๐Ÿ‡ธ 47.251.120.157
๐Ÿ‡ธ๐Ÿ‡ฌ 34.87.106.175
๐Ÿ‡ฆ๐Ÿ‡ช 2.51.4.116
๐Ÿ‡ธ๐Ÿ‡ฌ 217.142.187.160
๐Ÿ‡ญ๐Ÿ‡ฐ 185.242.235.139
๐Ÿ‡ณ๐Ÿ‡ฑ 185.136.15.111
๐Ÿ‡ช๐Ÿ‡จ 181.39.152.195
๐Ÿ‡บ๐Ÿ‡ธ 174.96.40.241
๐Ÿ‡บ๐Ÿ‡ธ 132.196.86.222
๐Ÿ‡บ๐Ÿ‡ธ 107.150.96.71
๐Ÿ‡ง๐Ÿ‡ฉ 103.149.56.234
๐Ÿ‡จ๐Ÿ‡ณ 101.35.210.162
๐Ÿ‡บ๐Ÿ‡ธ 85.89.204.116