JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.197.85.74

220.197.85.74 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 80%: ?

80%

ISP	China Unicom
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Guiyang, Guizhou

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.197.85.74

Whois 220.197.85.74

IP Abuse Reports for 220.197.85.74:

This IP address has been reported a total of 21 times from 18 distinct sources. 220.197.85.74 was first reported on June 13th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 donarev419	2026-07-05 06:33:04 (4 days ago)	Connection to port 9042 with data transfer. Data preview: �	Port Scan Hacking
🇬🇧 gbzret4d	2026-07-05 05:03:51 (4 days ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 4000 [1] TCP	Port Scan
🇺🇸 drewf.ink	2026-07-04 03:30:40 (5 days ago)	[03:30] Port scanning. Port(s) scanned: TCP/7001	Port Scan
🇳🇱 StopAbuse	2026-07-03 16:26:00 (5 days ago)	tcp/20443	Port Scan
🇫🇮 sonot	2026-07-03 01:31:43 (6 days ago)	Blocked by UFW on mail [5000/tcp] \| SPT: 46196 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on mail [5000/tcp] \| SPT: 46196 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇸 Smel	2026-06-30 03:45:26 (1 week ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-28 15:27:50 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 8007 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 8007 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇾 StatsMe	2026-06-27 23:50:10 (1 week ago)	2026-06-27T15:49:17.620550+0300 ET SCAN NMAP -sS window 1024	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-26 23:30:35 (1 week ago)	Honeypot hit: HTTP/1.1 request on 2166 GET / Accept: /; 2166 [1] TCP	Web App Attack
🇬🇧 sandra361	2026-06-22 14:10:04 (2 weeks ago)	Port scan detected: 6 attempts across 1 ports (1028). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=220 ... show more Port scan detected: 6 attempts across 1 ports (1028). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=220.197.85.74 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=27623 DF PROTO=TCP SPT=15967 DPT=1028 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 MPL	2026-06-22 13:11:44 (2 weeks ago)	tcp/17555 (2 or more attempts)	Port Scan
🇩🇪 femboy.cat	2026-06-20 14:00:59 (2 weeks ago)	Port scan to tcp/50070 from 220.197.85.74	Brute-Force
🇬🇧 gbzret4d	2026-06-19 16:59:57 (2 weeks ago)	Honeypot [uk-production01]: Unauthorized traffic on 3306/mysqld	Port Scan
🇺🇸 xmission.com	2026-06-19 12:45:48 (2 weeks ago)	Blocked by UFW (TCP on 1446) Source port: 28063 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1446) Source port: 28063 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 220.197.85.74) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-16 23:42:53 (3 weeks ago)	tcp/5560 (2 or more attempts)	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 207.154.201.114

🇵🇱 176.53.159.197

🇳🇱 91.92.40.5

🇮🇳 42.108.24.32

🇿🇦 196.210.216.126

🇵🇱 176.53.159.198

🇩🇪 139.59.140.35

🇸🇬 101.47.15.119

🇦🇪 93.177.125.216

🇩🇪 69.5.169.63

🇫🇷 13.39.87.124

🇧🇷 200.219.11.123

🇮🇹 172.253.13.155

🇨🇳 111.225.148.204

🇻🇳 103.199.16.90

🇺🇸 44.171.164.226

🇸🇪 13.61.147.70

🇺🇸 107.167.34.125

🇳🇱 102.129.200.117

🇩🇪 88.214.25.121