AbuseIPDB » 220.197.85.2
220.197.85.2 was found in our database!
This IP was reported 53 times. Confidence of Abuse is 77%: ?
| ISP | China Unicom |
|---|---|
| Usage Type | Fixed Line ISP |
| ASN | AS4837 |
| Domain Name | chinaunicom.cn |
| Country | 🇨🇳 China |
| City | Guiyang, Guizhou |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 220.197.85.2:
This IP address has been reported a total of 53 times from 29 distinct sources. 220.197.85.2 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇧🇷 noconex |
|
Port Scan Brute-Force SSH | ||
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=25805 dstport=49506
|
Port Scan | ||
| 🇺🇸 Aurealize |
|
Port Scan | ||
| 🇺🇸 xmission.com |
|
Port Scan | ||
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 2831 [1] TCP
|
Hacking | ||
| 🇧🇷 SOC Blue Team |
Tatic: TA0006 | Technique: T1110 | Source: TAP | Country Destination: BR
|
Brute-Force | ||
| 🇺🇸 xmission.com |
|
Port Scan | ||
| 🇺🇸 xmission.com |
|
Port Scan | ||
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 12084 [1] TCP
|
Port Scan | ||
| 🇮🇩 David Koswari |
REQ_BLOCKED_ACL
|
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted | ||
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 9869 [1] TCP
|
Port Scan | ||
| 🇧🇬 MazenHost |
1785951820 - 08/05/2026 19:43:40 Host: 220.197.85.2/220.197.85.2 Port: 6667 TCP Blocked
...
|
Port Scan | ||
| 🇩🇪 iNetWorker |
firewall-block, port(s): 49670/tcp
|
Port Scan | ||
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | ||
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan |
Showing 1 to 15 of 53 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩