JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.202.112.196

220.202.112.196 was found in our database!

This IP was reported 119 times. Confidence of Abuse is 82%: ?

82%

ISP	China Unicom
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Changsha, Hunan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.202.112.196

Whois 220.202.112.196

IP Abuse Reports for 220.202.112.196:

This IP address has been reported a total of 119 times from 43 distinct sources. 220.202.112.196 was first reported on January 18th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 gbzret4d	2026-07-30 17:27:48 (2 days ago)	Honeypot [uk-production01]: Large payload (1457 bytes); 10394 [1] TCP	Bad Web Bot
🇺🇸 xmission.com	2026-07-30 12:48:51 (2 days ago)	Blocked by UFW (TCP on 20202) Source port: 40673 TTL: 237 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 20202) Source port: 40673 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.202.112.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 RAP	2026-07-29 23:21:47 (2 days ago)	2026-07-29 23:21:47 UTC Unauthorized activity to TCP port 3306.	Port Scan
🇺🇸 xmission.com	2026-07-26 12:46:39 (6 days ago)	Blocked by UFW (TCP on 2989) Source port: 55143 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2989) Source port: 55143 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.202.112.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 gbzret4d	2026-07-26 05:57:57 (6 days ago)	Honeypot [uk-production01]: HTTP/1.1 request on 2992 GET / Accept: /; 2992 [1] TCP	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-07-25 12:51:44 (1 week ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 10397 GET / Accept: /; 10397 [1] TCP Reported by ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 10397 GET / Accept: /; 10397 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
Anonymous	2026-07-25 03:21:01 (1 week ago)	Honeypot hit: Large payload (1457 bytes); 2513 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot hit: Large payload (1457 bytes); 2513 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-22 21:16:23 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 8935 [1] TCP	Port Scan
🇵🇱 sefinek.net	2026-07-22 03:27:36 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 4343 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 4343 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-21 12:09:21 (1 week ago)	Honeypot hit: Large payload (1457 bytes); 8125 [1] TCP	Hacking
🇭🇰 sandra361	2026-07-20 18:18:17 (1 week ago)	Port scan detected: 6 attempts across 1 port (10021). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=220.202 ... show more Port scan detected: 6 attempts across 1 port (10021). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=220.202.112.196 LEN=40 TOS=0x14 PREC=0x00 TTL=45 ID=25634 DF PROTO=TCP SPT=29185 DPT=10021 WINDOW=29200 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇺🇸 xmission.com	2026-07-19 17:22:28 (1 week ago)	Blocked by UFW (TCP on 1064) Source port: 63590 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1064) Source port: 63590 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.202.112.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-19 01:39:45 (1 week ago)	Honeypot hit: HTTP/1.1 request on 2335 GET / Accept: /; 2335 [1] TCP Reported by: https://github. ... show more Honeypot hit: HTTP/1.1 request on 2335 GET / Accept: /; 2335 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇦🇺 LiftUp Hosting	2026-07-18 00:03:57 (2 weeks ago)	Honeypot hit: HTTP/1.1 request on 7272 GET / Accept: /; 7272 [1] TCP	Hacking Bad Web Bot
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-17 15:57:19 (2 weeks ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 4437 [1] TCP	Port Scan

Showing 1 to 15 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.176.26.22

🇧🇪 198.235.24.255

🇲🇽 187.170.224.116

🇫🇮 147.185.133.0

🇩🇪 217.160.138.181

🇩🇪 213.209.159.241

🇺🇸 205.210.31.66

🇩🇪 185.242.3.226

🇯🇵 172.253.6.221

🇭🇳 168.228.192.216

🇨🇳 144.123.77.236

🇨🇦 139.177.194.14

🇸🇬 128.199.90.135

🇻🇳 103.153.254.96

🇸🇮 102.220.160.239

🇷🇴 92.118.39.50

🇬🇧 87.236.176.157

🇺🇸 68.225.58.59

🇺🇸 63.141.242.2

🇰🇷 58.229.253.119