JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 221.6.164.175

221.6.164.175 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 43%: ?

43%

ISP	China Unicom Jiangsu province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Yangzhou, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 221.6.164.175

Whois 221.6.164.175

IP Abuse Reports for 221.6.164.175:

This IP address has been reported a total of 45 times from 13 distinct sources. 221.6.164.175 was first reported on June 14th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 SX Communications	2026-10-18 20:59:18 (4 days ago)	HTTP application-layer DoS / botnet traffic from 221.6.164.175: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 221.6.164.175: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Sklurk	2026-10-18 08:28:31 (5 days ago)	Web App Attack	Web App Attack
🇩🇪 Inamin	2026-10-14 14:46:34 (1 week ago)	221.6.164.175 - - [14/Oct/2026:22:46:22 +0800] "GET /index.php?title=%E7%89%B9%E6%AE%8A:%E9%80%A3%E5 ... show more 221.6.164.175 - - [14/Oct/2026:22:46:22 +0800] "GET /index.php?title=%E7%89%B9%E6%AE%8A:%E9%80%A3%E5%85%A5%E9%A0%81%E9%9D%A2/%E6%84%9B%E3%81%97%E3%81%A6%E3%82%8B%E3%81%B0%E3%82%93%E3%81%96%E3%83%BC%E3%81%84%EF%BC%81&limit=100 HTTP/2.0" 200 77797 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 221.6.164.175 - - [14/Oct/2026:22:46:33 +0800] "GET /index.php?title=%E7%89%B9%E6%AE%8A:%E9%80%A3%E5%85%A5%E9%A0%81%E9%9D%A2/%E6%84%9B%E3%81%97%E3%81%A6%E3%82%8B%E3%81%B0%E3%82%93%E3%81%96%E3%83%BC%E3%81%84%EF%BC%81&limit=100 HTTP/2.0" 200 77797 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" ... show less	DDoS Attack Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-10-14 02:11:57 (1 week ago)	HTTP application-layer DoS / botnet traffic from 221.6.164.175: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 221.6.164.175: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Sklurk	2026-10-13 01:53:30 (1 week ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-10-11 07:59:30 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 221.6.164.175 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 221.6.164.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 03:59:22.841533 2026] [security2:error] [pid 2958:tid 2958] [client 221.6.164.175:47670] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.john-bell-associates.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.john-bell-associates.com"] [uri "/reddit.com"] [unique_id "astB2rS7-jtC-_GWnRc4FwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-10-10 03:33:47 (1 week ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-10-09 08:58:57 (1 week ago)	HTTP application-layer DoS / botnet traffic from 221.6.164.175: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 221.6.164.175: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Sklurk	2026-10-09 01:16:04 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-10-08 01:11:15 (2 weeks ago)	Web App Attack	Web App Attack
🇺🇸 SX Communications	2026-10-07 09:38:32 (2 weeks ago)	HTTP application-layer DoS / botnet traffic from 221.6.164.175: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 221.6.164.175: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Sklurk	2026-10-07 00:03:17 (2 weeks ago)	Web App Attack	Web App Attack
🇨🇦 trainiax	2026-10-06 08:24:38 (2 weeks ago)	Excessive crawling / scraping	Bad Web Bot
🇫🇷 Sklurk	2026-10-06 00:02:23 (2 weeks ago)	Web App Attack	Web App Attack
🇨🇦 trainiax	2026-10-03 08:00:15 (2 weeks ago)	Excessive crawling / scraping	Bad Web Bot

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 157.245.99.141

🇺🇸 129.121.103.53

🇨🇳 111.6.251.11

🇺🇸 103.143.239.201

🇺🇸 40.124.117.12

🇺🇸 40.119.31.162

🇨🇳 39.104.63.170

🇯🇵 218.219.193.151

🇭🇰 210.209.70.188

🇺🇸 207.90.244.18

🇧🇪 198.235.24.180

🇨🇳 183.136.205.137

🇨🇳 171.15.189.104

🇮🇶 169.224.121.15

🇿🇦 165.16.187.22

🇺🇸 135.119.92.127

🇯🇴 91.186.251.88

🇺🇸 4.249.18.26

🇷🇺 2a02:6b8::511

🇨🇳 221.233.80.129