220.250.11.221

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
32% Elevated
160 reports
58 reporters · latest 27 minutes ago
ISP
Fuzhou city, fujian provincial network of CNCGROUP
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
wo.com.cn
Country
🇨🇳 China
City
Fuzhou, Fujian
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
160 from 58 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇨🇳 China 1 🇲🇳 Mongolia 1
Most common categories Port Scan 5 Hacking 3 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 sefinek.net
Honeypot hit: Unauthorized traffic (16 bytes of payload); 50009 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 995.
Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (16 bytes of payload); 8859 [1] TCP
Port Scan
🇨🇳 SA19999
Auto-report: ps:f2b:wordpress-waf | sources=["peer-sync"] | Fox honeypot cluster
Web App Attack
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 8084.
Port Scan Hacking
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
Anonymous
Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 10357. Automated tiered (T-Pot+DShield).
Port Scan Hacking
🇬🇧 PeravixGroup
Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud
DDoS Attack Hacking
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:43506 dst:5061
Port Scan
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/220.250.11.221 2026-05-07 07:35:49 http://dongtaiwang.com/
Web App Attack
🇦🇺 trentwiles.com
Unauthorized connection attempt detected from IP address 220.250.11.221 to port 2443 [SYD]
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 185.223.235.35
🇫🇷 185.194.178.61
🇩🇪 167.94.146.45
🇩🇪 161.35.69.77
🇺🇸 45.41.86.226
🇰🇷 43.155.230.108
🇱🇰 220.247.224.226
🇧🇪 198.235.24.234
🇺🇸 195.184.76.149
🇨🇱 186.10.205.46
🇺🇸 162.216.149.160
🇺🇸 93.152.77.164
🇬🇧 87.236.176.128
🇺🇸 66.132.159.87
🇺🇸 20.65.202.190
🇺🇸 216.73.161.190
🇭🇰 191.223.40.6
🇨🇳 115.191.40.50
🇨🇮 102.207.1.84
🇺🇸 98.81.25.90
feedback