223.198.164.52

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
70 reports
58 reporters · latest 1 hour ago
ISP
CHINANET HAINAN PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Haikou, Hainan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
70 from 58 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 14 🇺🇸 United States of America 7 🇮🇹 Italy 6
Most common categories Brute-Force 62 Email Spam 9 SSH 8 Port Scan 5 Web App Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇺 KevinNeale
Fail2Ban recidive block for repeated malicious authentication attempts.
Web App Attack
🇦🇹 AustrianSimon
10 Nov 2026 16:19:26UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 223.198.164.52
Brute-Force
🇩🇪 DocNetzwerk
(smtpauth) Failed SMTP AUTH login from 223.198.164.52 (CN/China/-)
Brute-Force
🇺🇸 AEITS
Fail2Ban eMail
Brute-Force
🇵🇱 bmino.pl
Autoban IP(2): 223.198.164.52 - Hostname: Chinanet - City: Qiongshan - Country: China - Organization: Hainan TELECOM - Reason: Suspicious activity detected by Fail2ban
Brute-Force
🇺🇸 [email protected]
Total attacks: 1
Brute-Force
🇳🇱 Slartibartfast
SMTP Brute Force
Brute-Force
🇵🇱 Kotiacat_one
2026-11-10T13:45:13.846899+00:00 nddbd64 sshd-session[1074344]: Invalid user guest from 223.198.164.52 port 11654 ...
Brute-Force SSH
🇩🇪 kkeyser
warning: unknown[223.198.164.52]: SASL LOGIN authentication failed: authentication failure
Brute-Force
🇩🇪 sternwart
Automatisch erkannt: verteilter Login-Versuch gegen [email protected] (8 IPs in 30 Minuten, je meist 1 Versuch)
Brute-Force
🇮🇩 xveil
2026-11-10T18:48:27.836003 mail-honeypot postfix/submission/smtpd[25473]: warning: unknown[223.198.164.52]: SASL LOGIN authentication failed: authentication failure ...
Brute-Force
🇫🇮 inlink.ltd
SMTP AUTH attack
Brute-Force
🇺🇸 shaunc
Nov 10 04:07:13 mailman postfix/smtpd[17427]: warning: unknown[223.198.164.52]: SASL LOGIN authentication failed: authentication failure
Brute-Force
🇮🇩 xveil
2026-11-10T16:52:13.204237 mail-honeypot postfix/submission/smtpd[22467]: warning: unknown[223.198.164.52]: SASL LOGIN authentication failed: authentication failure ...
Brute-Force
🇸🇪 Juha Jurvanen
Blocked by Scantide Guard on exchange-smtp-failed-auth. Rule: AbuseIPDB confidence 100% (Scantide Guard reputation policy).
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.43
🇺🇸 35.174.253.85
🇺🇸 34.50.180.193
🇩🇪 31.56.19.217
🇷🇴 2.57.121.25
🇰🇷 221.161.235.168
🇻🇳 165.99.16.17
🇳🇱 109.160.32.151
🇳🇱 86.38.187.203
🇭🇰 42.200.66.164
🇦🇺 20.92.243.53
🇳🇿 210.54.120.82
🇩🇴 190.0.95.155
🇹🇹 181.118.37.78
🇨🇳 121.28.192.238
🇩🇪 84.200.80.6
🇷🇺 62.173.148.120
🇰🇷 61.81.133.182
🇨🇳 14.18.254.34
feedback