JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 221.231.120.218

221.231.120.218 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 85%: ?

85%

ISP	binhai qinda netbar
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	yc.js.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 221.231.120.218

Whois 221.231.120.218

IP Abuse Reports for 221.231.120.218:

This IP address has been reported a total of 20 times from 14 distinct sources. 221.231.120.218 was first reported on August 16th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Aurealize	2026-08-21 23:31:46 (2 hours ago)	firewall port scanning detected. 2 or more observation(s) from 2026-08-21T23:31:46.000Z through 2026 ... show more firewall port scanning detected. 2 or more observation(s) from 2026-08-21T23:31:46.000Z through 2026-08-21T23:31:46.000Z. show less	Port Scan
🇫🇮 6kilowatti	2026-08-21 12:39:16 (13 hours ago)	2026-08-21T15:39:15.904950+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-08-21T15:39:15.904950+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=221.231.120.218 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=37102 PROTO=TCP SPT=41536 DPT=8000 WINDOW=48209 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Aurealize	2026-08-21 11:30:04 (14 hours ago)	firewall port scanning detected. 2 or more observation(s) from 2026-08-21T11:30:04.000Z through 2026 ... show more firewall port scanning detected. 2 or more observation(s) from 2026-08-21T11:30:04.000Z through 2026-08-21T11:30:04.000Z. show less	Port Scan
🇫🇷 security.rdmc.fr	2026-08-21 02:02:12 (23 hours ago)	Port Scan Attack proto:TCP src:2315 dst:23	Port Scan
🇺🇸 Aurealize	2026-08-20 23:53:54 (1 day ago)	firewall port scanning detected. 2 or more observation(s) from 2026-08-20T23:53:54.000Z through 2026 ... show more firewall port scanning detected. 2 or more observation(s) from 2026-08-20T23:53:54.000Z through 2026-08-20T23:53:54.000Z. show less	Port Scan
🇰🇷 windykc	2026-08-20 08:30:10 (1 day ago)	Honeypot capture. Telnet: 10 sessions, 50 commands. Geo/ISP: CN/binhai qinda netbar. Last seen: 2026 ... show more Honeypot capture. Telnet: 10 sessions, 50 commands. Geo/ISP: CN/binhai qinda netbar. Last seen: 2026-08-20T08:11:39Z. show less	Brute-Force IoT Targeted
🇫🇷 security.rdmc.fr	2026-08-20 01:22:31 (2 days ago)	Port Scan Attack proto:TCP src:43982 dst:23	Port Scan
Anonymous	2026-08-20 00:43:14 (2 days ago)	Port Scanner	Port Scan
🇩🇪 DasDuo	2026-08-20 00:38:07 (2 days ago)	Attempt on port 23 (Telnet) - potential remote access / brute-force attempt. Blocked by firewall (un ... show more Attempt on port 23 (Telnet) - potential remote access / brute-force attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection). show less	Port Scan Hacking Brute-Force
🇫🇮 6kilowatti	2026-08-20 00:37:48 (2 days ago)	2026-08-20T03:37:47.469096+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-08-20T03:37:47.469096+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=221.231.120.218 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=46740 PROTO=TCP SPT=43982 DPT=23 WINDOW=19045 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Aurealize	2026-08-19 23:21:11 (2 days ago)	firewall port scanning detected. 2 or more observation(s) from 2026-08-19T23:21:11.000Z through 2026 ... show more firewall port scanning detected. 2 or more observation(s) from 2026-08-19T23:21:11.000Z through 2026-08-19T23:21:11.000Z. show less	Port Scan
🇯🇵 VXG-NET	2026-08-19 04:24:23 (2 days ago)	port=80, indicator_type=code-execution	Hacking
🇫🇷 vtchost.com	2026-08-18 11:20:29 (3 days ago)	2026-08-18T13:20:29.054026+02:00 vmi3491693 kernel: [1015898.372417] PORTSCAN: IN=eth0 OUT= MAC=00:5 ... show more 2026-08-18T13:20:29.054026+02:00 vmi3491693 kernel: [1015898.372417] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=221.231.120.218 DST=169.58.138.2 LEN=44 TOS=0x00 PREC=0x00 TTL=43 ID=60379 PROTO=TCP SPT=5719 DPT=8080 WINDOW=54882 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-08-18 08:05:12 (3 days ago)	tcp/8080	Port Scan
🇮🇪 RoboSOC	2026-08-17 21:13:13 (4 days ago)	GPON Home Routers Remote Code Execution Vulnerability CVE 2018-10562, PTR: PTR record not found	Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 201.179.206.169

🇬🇧 193.32.209.241

🇺🇸 184.105.247.232

🇺🇸 162.216.149.186

🇷🇺 95.161.140.32

🇺🇸 74.207.240.187

🇨🇦 51.161.37.151

🇺🇸 47.77.216.216

🇺🇸 34.172.22.193

🇺🇸 3.235.99.171

🇨🇴 201.233.140.10

🇿🇼 197.221.232.44

🇺🇦 194.44.215.189

🇧🇷 177.97.1.62

🇮🇳 157.48.204.103

🇫🇷 146.70.194.236

🇹🇼 111.70.49.179

🇮🇱 109.226.15.135

🇭🇰 104.208.108.166

🇻🇳 103.145.253.100