220.202.112.209
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- China Unicom
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Changsha, Hunan
Abuse Reports
Total reports
154 from
61 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇮 6kilowatti |
|
Port Scan | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 16025.
|
Port Scan | |
| 🇩🇪 ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (2002/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
|
Hacking | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 5558
GET /
Accept: */*; 5558 [1] TCP
|
Hacking Bad Web Bot | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 12362
GET /
Accept: */*; 12362 [1] TCP
|
Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 11121 [1] TCP
|
Port Scan | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 9443 [1] TCP
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
VoIP Attack proto:UDP src:48982 dst:5060
|
Port Scan Fraud VoIP | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 5 malicious events (exploit_attempt, port_scan) detected.
|
Port Scan Hacking | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound)) detectado de 220.202.112.209
|
Port Scan Brute-Force SSH | |
| 🇺🇸 MPL |
tcp/50001 (2 or more attempts)
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 1962
GET /
Accept: */*; 1962 [1] TCP
|
Web App Attack | |
| 🇧🇷 diego |
[rede-top188] 09/14/2026-21:20:53.489919, 220.202.112.209, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 295
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown