AbuseIPDB » 223.167.206.73
223.167.206.73
This IP was reported 8 times. Confidence of
Abuse
is 31% : ?
ISP
CHINA UNICOM Shanghai city network
Usage Type
Fixed Line ISP
ASN
AS17621
Domain Name
chinaunicom.cn
Country
🇨🇳
China
City
Shanghai, Shanghai
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 223.167.206.73 :
This IP address has been reported a total of
8
times from
6 distinct
sources.
223.167.206.73 was first reported on
June 22nd 2026 , and the most recent report was
22 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-23 12:59:46
(22 hours ago)
denied traffic to a non-approved destination port. destination port 10158.
Port Scan
🇺🇸
MPL
2026-07-12 10:25:43
(1 week ago)
tcp/3310
Port Scan
🇺🇸
itsnixk
2026-07-08 03:37:47
(2 weeks ago)
(mod_security) mod_security (id:920350) triggered by 223.167.206.73 (CN/China/-): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920350) triggered by 223.167.206.73 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 07 23:37:44.832910 2026] [security2:error] [pid 1474604:tid 1475244] [client 223.167.206.73:26960] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "ak3GCE-eOw_n_uahZ0ciNwAAAPw"]
show less
Port Scan
2026-07-04 02:37:19
(2 weeks ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇬🇧
PeravixGroup
2026-06-26 01:51:03
(4 weeks ago)
Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ...
show more
Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇩🇪
_ArminS_
2026-06-22 04:51:10
(1 month ago)
SP-Scan 7510:2976 detected 2026.06.22 06:51:10
blocked until 2026.08.10 23:53:57
Port Scan
🇺🇸
MPL
2026-06-22 04:35:46
(1 month ago)
tcp/2068 (2 or more attempts)
Port Scan
🇫🇮
6kilowatti
2026-06-22 04:23:47
(1 month ago)
2026-06-22T07:23:47.093693+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ...
show more
2026-06-22T07:23:47.093693+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=223.167.206.73 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=228 ID=31884 PROTO=TCP SPT=8076 DPT=9003 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: