AbuseIPDB » 220.197.85.252
220.197.85.252 was found in our database!
This IP was reported 27 times. Confidence of Abuse is 73%: ?
| ISP | China Unicom |
|---|---|
| Usage Type | Fixed Line ISP |
| ASN | AS4837 |
| Domain Name | chinaunicom.cn |
| Country | 🇨🇳 China |
| City | Guiyang, Guizhou |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 220.197.85.252:
This IP address has been reported a total of 27 times from 15 distinct sources. 220.197.85.252 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 64321 [1] TCP
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/9000
|
Port Scan | ||
| 🇭🇰 sandra361 |
|
Port Scan | ||
| 🇳🇱 COMPLEX |
Unsolicited TCP traffic | Action: DROP | Port 11211
|
Brute-Force | ||
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | ||
| 🇺🇸 MPL |
tcp/9000
|
Port Scan | ||
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=64303 dstport=9100
|
Port Scan | ||
| 🇭🇺 kranem |
|
Bad Web Bot | ||
| 🇺🇸 anon333 |
Hacker syslog review 1783247665
|
Hacking | ||
| 🇬🇧 gbzret4d |
Honeypot [uk-production01]: Large payload (1457 bytes); 11001 [1] TCP
|
Bad Web Bot | ||
| 🇪🇸 el-brujo |
07/02/2026-18:43:55.220131 220.197.85.252 Protocol: 6 ET SCAN NMAP -sS window 1024
|
Port Scan | ||
| 🇺🇸 anon333 |
Hacker syslog review 1782966886
|
Hacking | ||
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | ||
| 🇺🇸 MPL |
tcp/12350
|
Port Scan | ||
| 🇵🇱 sefinek.net |
|
Hacking Bad Web Bot |
Showing 1 to 15 of 27 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩