JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.202.112.177

220.202.112.177 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 77%: ?

77%

ISP	China Unicom
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Changsha, Hunan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.202.112.177

Whois 220.202.112.177

IP Abuse Reports for 220.202.112.177:

This IP address has been reported a total of 73 times from 37 distinct sources. 220.202.112.177 was first reported on January 18th 2024, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 DonAtari	2026-07-04 04:24:10 (18 hours ago)	DShield firewall scan - TCP to port 10215	Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-07-03 16:21:53 (1 day ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (16 bytes of payload); 8086 [1] TCP Reported by Dis ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (16 bytes of payload); 8086 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇾 StatsMe	2026-07-01 00:31:35 (3 days ago)	2026-06-30T13:41:36.660046+0300 ET SCAN NMAP -sS window 1024	Port Scan
🇺🇸 xmission.com	2026-06-28 00:35:03 (6 days ago)	Blocked by UFW (TCP on 50580) Source port: 65146 TTL: 237 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 50580) Source port: 65146 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.202.112.177) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 LiftUp Hosting	2026-06-27 02:45:59 (1 week ago)	Honeypot hit: Large payload (1457 bytes); 50000 [1] TCP	Bad Web Bot
🇺🇸 donarev419	2026-06-26 03:53:07 (1 week ago)	Connection to port 9443 with data transfer. Data preview: �	Port Scan Hacking
🇵🇱 sefinek.net	2026-06-25 07:33:36 (1 week ago)	Honeypot hit: HTTP/1.1 request on 3013 GET / Accept: /; 3013 [1] TCP Reported by: https://github. ... show more Honeypot hit: HTTP/1.1 request on 3013 GET / Accept: /; 3013 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-06-22 12:46:53 (1 week ago)	tcp/1026	Port Scan
🇬🇧 PeravixGroup	2026-06-22 02:07:04 (1 week ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 TheHoneyPotter	2026-06-20 17:38:02 (2 weeks ago)	Honeypot [fc-honeypot]: HTTP/1.1 request on 51004 GET / Accept: /; 51004 [1] TCP Reported by: htt ... show more Honeypot [fc-honeypot]: HTTP/1.1 request on 51004 GET / Accept: /; 51004 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇯🇵 jay hung	2026-06-20 09:21:30 (2 weeks ago)	2026-06-20T09:21:29.760286+00:00 quarktech kernel: [591943.079206] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-06-20T09:21:29.760286+00:00 quarktech kernel: [591943.079206] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=220.202.112.177 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=48615 PROTO=TCP SPT=35835 DPT=10375 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇩 hermawan	2026-06-19 12:35:41 (2 weeks ago)	06/19/2026-19:35:38.267305 [Drop] [] [1:741481:3] Suricata ET扫描NMAP-sS窗口1024 [] [Classification ... show more 06/19/2026-19:35:38.267305 [Drop] [] [1:741481:3] Suricata ET扫描NMAP-sS窗口1024 [] [Classification: Attempted Information Leak] [Priority: 3] {TCP} 220.202.112.177:51274 -> 103.166.156.58:16002 ... show less	Email Spam Hacking
🇺🇸 MPL	2026-06-19 00:45:55 (2 weeks ago)	tcp/1352	Port Scan
🇦🇺 LiftUp Hosting	2026-06-16 23:49:03 (2 weeks ago)	Honeypot hit: Empty payload (likely service probe); 6005 [1] TCP	Port Scan
🇬🇧 PeravixGroup	2026-06-15 01:37:05 (2 weeks ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.203.134.70

🇻🇳 103.75.183.57

🇺🇸 139.144.239.72

🇬🇧 81.92.219.205

🇸🇬 52.237.126.164

🇮🇳 27.123.107.154

🇮🇳 8.231.66.150

🇻🇳 160.22.170.38

🇳🇱 91.92.40.45

🇺🇸 43.130.72.177

🇰🇷 220.119.37.141

🇩🇪 192.248.180.101

🇨🇳 182.204.178.210

🇦🇫 180.94.75.110

🇳🇱 52.232.19.79

🇺🇸 47.254.86.57

🇸🇬 47.82.50.84

🇧🇷 45.5.222.112

🇨🇳 14.103.64.177

🇨🇳 182.138.158.125