220.197.85.166
Classification: Malicious
220.197.85.166 is a malicious IP address. Reported by 3 threat sources, last seen 2026-09-02. Network: AS4837 China Unicom.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious Host | CIArmy | 2026-06-20 20:03:22 | 2026-09-02 20:04:11 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-06-19 11:27:51 | 2026-09-02 09:17:41 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-06-19 11:27:45 | 2026-09-02 09:17:39 | attacker malicious-activity | |
| Malicious Host | HoneyDB | 2026-08-08 00:00:00 | 2026-08-08 00:00:00 | attacker malicious-activity |
Whois information
- AS name
- AS4837 China Unicom
- Registrant
- China Unicom
- City
- Beijing
- Postal code
- 100010
- Country
- CN — China 🇨🇳
- First indexed
- 2026-06-19 11:27:45
- Last updated
- 2026-09-02 20:04:11