220.197.85.30
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- China Unicom
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Guiyang, Guizhou
Abuse Reports
Total reports
98 from
44 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 MPL |
tcp/8200 (2 or more attempts)
|
Port Scan | |
| 🇬🇧 sandra361 |
Port scan detected: 9 packets across 1 port (101). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=220.197.85.30 LEN=56 TOS=0x00 PREC=0x00 TTL=42 ID=47743 DF PROTO=TCP SPT=62795 DPT=101 WINDOW=29200 RES=0x00 ACK PSH FIN URGP=0
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇬🇧 sandra361 |
Port scan detected: 7 packets across 1 port (4470). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=220.197.85.30 LEN=40 TOS=0x00 PREC=0x00 TTL=42 ID=13086 DF PROTO=TCP SPT=13574 DPT=4470 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇺🇸 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port 6379 - dr
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/5557
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (1666/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇬🇧 sandra361 |
Port scan detected: 6 attempts across 1 port (10123). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=220.197.85.30 LEN=40 TOS=0x00 PREC=0x00 TTL=42 ID=31037 DF PROTO=TCP SPT=34178 DPT=10123 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 7998
GET /
Accept: */*; 7998 [1] TCP
|
Web App Attack | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: Large payload (1457 bytes); 10004 [1] TCP
|
Bad Web Bot | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 16073 [1] TCP
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown