223.167.206.167
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINA UNICOM Shanghai city network
- Usage Type
- Fixed Line ISP
- ASN
- AS17621
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Shanghai, Shanghai
Abuse Reports
Total reports
15 from
12 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 _ArminS_ |
SP-Scan 1431:47777 detected 2026.10.30 00:22:43
blocked until 2026.12.18 17:25:30
|
Port Scan | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-29 UTC.
|
Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 5060.
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 9066 [1] TCP
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to proxy port 8080
|
Port Scan Hacking | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1000)
Source port: 15179
TTL: 238
Packet length: 44
TOS: 0x08
This report (for 223.167.206.167) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 6004.
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/6480
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 60443)
Source port: 32095
TTL: 238
Packet length: 44
TOS: 0x08
This report (for 223.167.206.167) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud
|
Hacking Exploited Host | |
| Anonymous |
Honeypot hit: HTTP/1.1 request on 8983
GET /
Accept: */*; 8983 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Hacking Bad Web Bot | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown