JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.202.112.203

220.202.112.203 was found in our database!

This IP was reported 95 times. Confidence of Abuse is 81%: ?

81%

ISP	China Unicom
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Changsha, Hunan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.202.112.203

Whois 220.202.112.203

IP Abuse Reports for 220.202.112.203:

This IP address has been reported a total of 95 times from 40 distinct sources. 220.202.112.203 was first reported on January 18th 2024, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 femboy.cat	2026-07-12 18:11:16 (3 hours ago)	Port scan to tcp/49158 from 220.202.112.203	Brute-Force
🇺🇸 MPL	2026-07-12 05:59:53 (15 hours ago)	tcp/9051	Port Scan
🇭🇰 sandra361	2026-07-11 21:21:22 (23 hours ago)	Port scan detected: 5 attempts across 1 port (12000). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=220.202 ... show more Port scan detected: 5 attempts across 1 port (12000). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=220.202.112.203 LEN=40 TOS=0x14 PREC=0x00 TTL=45 ID=11760 DF PROTO=TCP SPT=44916 DPT=12000 WINDOW=29200 RES=0x00 ACK URGP=0 show less	Port Scan
🇫🇮 as211431.net	2026-07-11 05:13:52 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/4.047745454 Mozilla/4.0 (compatible; MSIE 5.00; Windows 98) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 dispaisyenterprises	2026-07-09 21:27:48 (2 days ago)	Honeypot [fra-de-honeypot]: Large payload (1457 bytes); 6868 [1] TCP Reported by DisPaisy Enterprise ... show more Honeypot [fra-de-honeypot]: Large payload (1457 bytes); 6868 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 MPL	2026-07-06 22:09:35 (5 days ago)	tcp/32080	Port Scan
🇫🇷 vincent_EUDIER	2026-07-06 14:40:01 (6 days ago)	ET SCAN NMAP -sS window 1024	Port Scan
🇺🇸 MPL	2026-07-01 12:46:04 (1 week ago)	tcp/1122	Port Scan
🇺🇸 MPL	2026-06-30 02:32:41 (1 week ago)	tcp/50000	Port Scan
🇩🇪 Luhte	2026-06-29 05:56:02 (1 week ago)	Unsolicited TCP connection from 220.202.112.203 to port 0 at 2026-06-29T05:56:02Z. Source IP complet ... show more Unsolicited TCP connection from 220.202.112.203 to port 0 at 2026-06-29T05:56:02Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇺🇸 donarev419	2026-06-29 01:45:59 (1 week ago)	Connection to port 1971 with data transfer. Data preview: �	Port Scan Hacking
🇧🇾 StatsMe	2026-06-28 22:21:33 (1 week ago)	2026-06-28T04:00:15.652760+0300 ET SCAN NMAP -sS window 1024	Port Scan
🇵🇱 sefinek.net	2026-06-28 21:21:35 (1 week ago)	Honeypot hit: Large payload (1457 bytes); 2379 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot hit: Large payload (1457 bytes); 2379 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 MPL	2026-06-27 01:18:41 (2 weeks ago)	tcp/80	Port Scan
🇺🇸 MPL	2026-06-26 15:21:41 (2 weeks ago)	tcp/40193 (2 or more attempts)	Port Scan

Showing 1 to 15 of 95 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.13.26.42

🇳🇱 195.178.110.227

🇨🇴 191.97.12.90

🇨🇳 180.184.142.135

🇺🇸 172.172.26.136

🇩🇪 167.94.145.19

🇺🇸 165.154.172.200

🇺🇸 157.230.191.249

🇫🇮 144.31.156.154

🇺🇸 216.226.77.20

🇺🇸 205.210.31.102

🇵🇭 136.158.60.178

🇺🇸 100.24.164.150

🇺🇸 66.132.195.96

🇨🇳 60.166.82.17

🇷🇺 37.110.113.113

🇺🇸 143.110.147.138

🇺🇸 65.110.40.162

🇺🇸 45.32.203.5

🇪🇹 196.189.116.182