AbuseIPDB » 220.197.85.191
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example previewReport Categories (Last 60 Days)
Example previewIP Abuse Reports for 220.197.85.191:
This IP address has been reported a total of 80 times from 39 distinct sources. 220.197.85.191 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 17 reports; Germany with 12 reports; France with 5 reports. The most common categories in these recent reports were: Port Scan 41 times; Hacking 8 times; Brute-Force 6 times; Bad Web Bot 5 times; Web App Attack 4 times; Other 4 times.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=36987 dstport=11211
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/13013
|
Port Scan | ||
| 🇵🇱 bart@ |
|
Port Scan | ||
| 🇩🇪 Admins@FBN |
IPS:drop <match> dstport=3268
|
Brute-Force Exploited Host | ||
| 🇩🇪 iNetWorker |
firewall-block, port(s): 2245/tcp
|
Port Scan | ||
| 🇮🇹 CoreTech srl |
|
Hacking | ||
| 🇺🇸 MPL |
tcp/2125
|
Port Scan | ||
| Anonymous |
denied traffic to a honeypot network. destination port 10000.
|
Port Scan Hacking | ||
| 🇺🇸 RAP |
2026-08-25 09:33:56 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack | ||
| Anonymous |
Fail2Ban triggered
|
Web App Attack | ||
| 🇧🇷 noconex |
|
Port Scan Brute-Force SSH | ||
| 🇩🇪 _ArminS_ |
SP-Scan 62370:5001 detected 2026.08.21 22:16:15
blocked until 2026.10.10 15:19:02
|
Port Scan | ||
| 🇫🇷 Petre 21_ip |
|
Port Scan | ||
| Anonymous |
denied traffic to a non-approved destination port. destination port 8100.
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/16668
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩