JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.250.11.208

220.250.11.208 was found in our database!

This IP was reported 166 times. Confidence of Abuse is 0%: ?

ISP	Fuzhou city, fujian provincial network of CNCGROUP
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	wo.com.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.250.11.208

Whois 220.250.11.208

IP Abuse Reports for 220.250.11.208:

This IP address has been reported a total of 166 times from 57 distinct sources. 220.250.11.208 was first reported on June 22nd 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Nov	2026-06-28 13:33:01 (2 months ago)	Unauthorized access attempt (tcp/2228)	Port Scan
🇬🇧 gbzret4d	2026-06-21 22:09:58 (2 months ago)	Honeypot [uk-production01]: Large payload (1457 bytes); 25010 [1] TCP	Bad Web Bot
🇬🇧 PeravixGroup	2026-06-19 00:15:25 (2 months ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇯🇵 mkaraki	2026-06-17 21:22:27 (3 months ago)	1781731346 # Service_probe # SIGNATURE_SEND # source_ip:220.250.11.208 # dst_port:27000 ...	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-13 10:10:39 (3 months ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 7443 [1] TCP Reported by: Justin ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 7443 [1] TCP Reported by: Justin F. show less	Port Scan
🇬🇧 PeravixGroup	2026-06-02 01:21:53 (3 months ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 xmission.com	2026-06-01 20:26:42 (3 months ago)	Blocked by UFW (TCP on 8030) Source port: 62205 TTL: 237 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8030) Source port: 62205 TTL: 237 Packet length: 44 TOS: 0x00 This report (for 220.250.11.208) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-01 09:16:07 (3 months ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇺🇸 thororen	2026-06-01 09:10:32 (3 months ago)	Blocked by UFW [6433/tcp] Source port: 46153 TTL: 238 Packet length: 44 TOS: 0x00 This report was g ... show more Blocked by UFW [6433/tcp] Source port: 46153 TTL: 238 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-31 02:41:07 (3 months ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-29 14:56:36 (3 months ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇩🇪 femboy.cat	2026-05-13 08:31:34 (4 months ago)	Port scan to tcp/10000 from 220.250.11.208	Brute-Force
🇨🇭 pingusurmars	2026-05-13 04:05:20 (4 months ago)	Blocked by UFW on amperetwo [9200/tcp] Source port: 23500 TTL: 238 Packet length: 44 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [9200/tcp] Source port: 23500 TTL: 238 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇵 radheykrishna.com.np	2026-05-12 22:04:41 (4 months ago)	May 13 03:49:40 kernel: [2113233.183950] [UFW BLOCK] IN=ens160 OUT= SRC=220.250.11.208 LEN=44 TOS=0x ... show more May 13 03:49:40 kernel: [2113233.183950] [UFW BLOCK] IN=ens160 OUT= SRC=220.250.11.208 LEN=44 TOS=0x00 PREC=0x00 TTL=234 ID=60023 PROTO=TCP SPT=14717 DPT=9042 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇭 ALPHANET	2026-05-12 21:11:36 (4 months ago)	SSH honeypot 2 login attempt	Hacking Brute-Force Exploited Host SSH

Showing 1 to 15 of 166 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 93.170.116.56

🇺🇸 69.163.90.94

🇬🇧 35.203.211.164

🇦🇷 216.244.224.228

🇨🇳 171.120.121.183

🇺🇸 162.216.150.114

🇺🇸 158.51.96.38

🇸🇬 148.66.142.9

🇺🇸 147.185.132.59

🇳🇱 86.54.31.38

🇧🇬 79.124.49.70

🇺🇸 66.132.172.121

🇺🇸 52.186.183.216

🇨🇦 45.194.92.100

🇫🇷 45.77.61.56

🇨🇳 42.193.108.162

🇨🇳 36.135.107.57

🇧🇪 34.77.116.133

🇩🇪 207.154.255.215

🇭🇰 165.154.224.136