220.197.85.124
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- China Unicom
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Guiyang, Guizhou
Abuse Reports
Total reports
107 from
43 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇺🇸 sandra361 |
Port scan detected: 5 packets across 1 port (2080). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=220.197.85.124 LEN=40 TOS=0x00 PREC=0x00 TTL=36 ID=34656 DF PROTO=TCP SPT=11238 DPT=2080 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 10256 [1] TCP
|
Hacking | |
| 🇺🇸 MPL |
tcp/9007 (2 or more attempts)
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 1 hits on ports [7090] (automated)
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1388 bytes); 2627 [1] TCP
|
Hacking | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [20005/tcp]
Source port: 48288
TTL: 232
Packet length: 44
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 10448 [1] TCP
|
Port Scan | |
| 🇷🇺 Panamaaa |
Port scan detected; Brute-force attack detected
|
Port Scan Brute-Force | |
| 🇫🇷 uthul |
T-Pot honeypot: 9 hits on ports [2547] (automated)
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (53420/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 4848 [1] TCP
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 15001)
Source port: 35002
TTL: 238
Packet length: 44
TOS: 0x00
This report (for 220.197.85.124) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 donarev419 |
Port scan detected on port 5000 (connection without data transfer)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown