JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.202.112.170

220.202.112.170 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 60%: ?

60%

ISP	China Unicom
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Changsha, Hunan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.202.112.170

Whois 220.202.112.170

IP Abuse Reports for 220.202.112.170:

This IP address has been reported a total of 63 times from 35 distinct sources. 220.202.112.170 was first reported on January 21st 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-11 05:09:51 (2 days ago)	Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: ... show more Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: MEDIUM. Aaran.cloud show less	Port Scan Brute-Force
🇩🇰 RhQM	2026-06-11 00:33:38 (3 days ago)		Bad Web Bot Exploited Host Web App Attack
🇳🇱 BIV	2026-06-10 19:05:50 (3 days ago)	Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 12276. Automated tiered (T-Pot+DS ... show more Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 12276. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-08 13:47:27 (5 days ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 AS213449.net	2026-06-08 04:58:15 (5 days ago)	06/08/2026-06:58:15.127547 src=220.202.112.170 dst=5.175.170.125:1521 proto=6 msg=ET SCAN Suspicious ... show more 06/08/2026-06:58:15.127547 src=220.202.112.170 dst=5.175.170.125:1521 proto=6 msg=ET SCAN Suspicious inbound to Oracle SQL port 1521 show less	SQL Injection
🇬🇧 PeravixGroup	2026-06-07 12:09:54 (6 days ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 gbzret4d	2026-06-06 22:03:58 (1 week ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 49665 [1] TCP	Port Scan
🇬🇧 PeravixGroup	2026-06-05 23:18:54 (1 week ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-06-05 18:53:31 (1 week ago)	unsolicited connect TCP dport 2440 (sport 44524)	Hacking
🇬🇧 PeravixGroup	2026-06-05 10:44:44 (1 week ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇺🇸 sumnone	2026-06-05 08:41:05 (1 week ago)	Port probing on unauthorized port 7687	Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-04 06:44:19 (1 week ago)	Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MED ... show more Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇯🇵 jay hung	2026-06-04 04:31:30 (1 week ago)	2026-06-04T04:31:29.477935+00:00 quarktech kernel: [382329.940886] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-06-04T04:31:29.477935+00:00 quarktech kernel: [382329.940886] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=220.202.112.170 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=52939 PROTO=TCP SPT=49635 DPT=12178 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-06-02 14:51:03 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇭🇰 PingMeMaybe	2026-06-01 12:44:23 (1 week ago)	Blocked by UFW on hk [9200/tcp] Source port: 11537 TTL: 233 Packet length: 44 TOS: 0x00 This report ... show more Blocked by UFW on hk [9200/tcp] Source port: 11537 TTL: 233 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.65.239.92

🇧🇪 198.235.24.178

🇨🇴 190.60.242.28

🇮🇷 185.173.106.193

🇺🇸 185.26.9.81

🇺🇸 137.184.214.123

🇻🇳 103.75.182.132

🇬🇧 91.230.225.222

🇳🇱 87.121.69.138

🇧🇬 78.128.113.46

🇮🇪 52.48.7.133

🇻🇳 36.50.54.243

🇺🇸 20.127.187.30

🇯🇵 4.190.161.111

🇰🇷 211.169.131.196

🇺🇸 185.198.240.159

🇭🇺 94.248.149.41

🇳🇱 91.92.40.8

🇹🇷 88.250.47.224

🇮🇹 82.53.82.254