JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 46.20.109.223

46.20.109.223 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 100%: ?

100%

ISP	Nearoute Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS147293
Domain Name	nearoute.com
Country	🇭🇰 Hong Kong
City	Kadoorie, Kowloon City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 46.20.109.223

Whois 46.20.109.223

IP Abuse Reports for 46.20.109.223:

This IP address has been reported a total of 41 times from 29 distinct sources. 46.20.109.223 was first reported on October 5th 2023, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-06-17 07:26:21 (4 hours ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/23 (telnet). Tried credentials: ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/23 (telnet). Tried credentials: b'\x04\x19\x19\x02':b'\x035\x1a\x1f\x18\x03\x0e' Commands captured: $ enable $ system $ shell $ sh $ /bin/busybox IZ1H9 show less	DDoS Attack IoT Targeted Brute-Force
🇺🇸 RAP	2026-06-17 06:46:28 (5 hours ago)	2026-06-17 06:46:28 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-06-17 05:45:48 (6 hours ago)	Jun 16 13:24:30 localhost kernel: [109975958.617230] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 16 13:24:30 localhost kernel: [109975958.617230] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=46.20.109.223 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=39262 PROTO=TCP SPT=61435 DPT=23 WINDOW=40030 RES=0x00 SYN URGP=0 Jun 16 13:24:30 localhost kernel: [109975958.617257] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=46.20.109.223 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=39262 PROTO=TCP SPT=61435 DPT=23 SEQ=758669438 ACK=0 WINDOW=40030 RES=0x00 SYN URGP=0 Jun 17 01:45:48 localhost kernel: [110020435.861225] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=46.20.109.223 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=47 ID=50169 PROTO=TCP SPT=45254 DPT=52869 WINDOW=46148 RES=0x00 SYN URGP=0 Jun 17 01:45:48 localhost kernel: [110020435.861248] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=46.20.109.223 DST=[mungedIP2] LEN=40 TOS=0x00 show less	Port Scan
🇺🇸 MPL	2026-06-17 05:16:09 (7 hours ago)	tcp/5555	Port Scan
🇩🇪 Lazentis	2026-06-17 03:37:52 (8 hours ago)	Unauthorized access attempt to port 23 (tcp)	Brute-Force SSH
🇺🇸 RAP	2026-06-17 03:33:34 (8 hours ago)	2026-06-17 03:33:34 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇨🇦 senkodev	2026-06-17 02:38:12 (9 hours ago)	2026-06-17T02:38:11.608024Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 46.20.109. ... show more 2026-06-17T02:38:11.608024Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 46.20.109.223:56666 (158.69.22.11:2223) [session: 198dd07f0d3a] 2026-06-17T02:38:12.606425Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 46.20.109.223:56678 (158.69.22.11:2223) [session: 26f689179918] ... show less	Brute-Force SSH
🇫🇷 TheHoneyPotter	2026-06-17 02:13:57 (10 hours ago)	Honeypot [fc-honeypot]: Unauthorized connection attempt detected on 23/TELNET Reported by: https://g ... show more Honeypot [fc-honeypot]: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Port Scan
🇺🇸 RAP	2026-06-17 01:54:27 (10 hours ago)	2026-06-17 01:54:27 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 Petre 21_ip	2026-06-17 01:10:51 (11 hours ago)	2026-06-17T03:10:51.130695+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-17T03:10:51.130695+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=46.20.109.223 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=18968 PROTO=TCP SPT=25181 DPT=23 WINDOW=46367 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-06-17 01:09:16 (11 hours ago)	Blocked by UFW (TCP on 23) Source port: 58210 TTL: 52 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 58210 TTL: 52 Packet length: 40 TOS: 0x08 This report (for 46.20.109.223) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇩🇪 Admins@FBN	2026-06-17 00:32:36 (11 hours ago)	FW-PortScan: Traffic Blocked srcport=25181 dstport=23	Port Scan
🇦🇹 centurion	2026-06-17 00:04:56 (12 hours ago)	Blocked by UFW on cloud [23/tcp] Source port: 62369 TTL: 45 Packet length: 40 TOS: 0x00 This report ... show more Blocked by UFW on cloud [23/tcp] Source port: 62369 TTL: 45 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-06-16 23:25:05 (12 hours ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 RAP	2026-06-16 22:48:48 (13 hours ago)	2026-06-16 22:48:48 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.85

🇺🇸 100.49.117.77

🇺🇸 98.93.77.214

🇩🇪 69.5.169.222

🇩🇪 57.129.1.176

🇲🇽 189.206.189.150

🇵🇹 185.138.89.72

🇦🇷 185.64.78.206

🇺🇸 107.173.85.94

🇧🇩 103.183.62.3

🇮🇩 103.106.219.214

🇧🇬 77.85.171.68

🇧🇪 74.125.47.157

🇧🇷 45.164.251.67

🇨🇳 27.17.133.31

🇺🇸 20.96.179.87

🇪🇸 158.158.104.28

🇺🇸 20.172.71.160

🇦🇺 2404:6800:4006:1002::121

🇭🇰 221.127.182.168