Substantial Risk
Threat level 8/10 for 220.248.173.137 based on 111 documented incidents.
Consistent suspicious behavior patterns. 76% confidence rating.
More threatening than 90% of monitored IPs
IP Address
220.248.173.137
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
CN
Location
CHINA UNICOM China169 Bac...
ASN 4837
111
Reports
Honeypot
Data Source
Threat Categories
Port Scan
23
Hacking
23
Exploited Host
7
Technical Details
Port scanning identifies open services and potential attack vectors on target systems as reconnaissance for attacks.
Recommended Mitigations
Minimize exposed services, implement firewall rules, and monitor for scanning patterns.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
7. September 2026
Last Activity
4. October 2026
Recent (7 days)
3 incidents
Reputable Network
This IP is hosted on a network (ASN 4837) with generally good reputation. The ISP CHINA UNICOM China169 Backbone maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
76%
Verified
Confidence History
7. Aug 2026 - 4. Oct 2026
76%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Port Scan Hacking | Honeypot x2 | 75% |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 220.248.173.137
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
CN
- ASN
- AS4837
- ISP
- CHINA UNICOM China169 Backbone
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 111
- First Reported
- 13 Dec 2025
- Last Reported
- 4 Oct 2026, 06:07
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS4837
CHINA UNICOM China169 Backbone
CN
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
7,390
Total IPs Monitored
17,531
Total Reports
2.4
Reports per IP
Network Context
This IP address belongs to CHINA UNICOM China169 Backbone (AS4837), which manages 7,390 IP addresses in our monitoring system. Out of these, 17,531 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 819,196 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
111
avg: 9
++
Network Comparison
Compared against 15,536 IPs in ASN 4837
Threat Level
8/10
network avg: 7.2
=
Total Reports
111
network avg: 2
++
Network CHINA UNICOM China169 Backbone has overall threat level 2/10
Geographic Comparison
Compared against 45,459 IPs in CN
Threat Level
8/10
country avg: 7.4
=
Total Reports
111
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
21 Sep 2026
2 reports
Daily Average
0.5
reports/day
Most Active
Friday
20 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
83
Port Scan
76
Exploited Host
27
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 18:00 with 10 reports
Weekly Activity
Geographic Threat Distribution
744,610 threat incidents tracked globally • Last 24h: 28,013 Logs
FEED
Top Threat Sources
-
01
United States145,697 19.6% -
02
Brazil111,307 14.9%
-
03
India84,352 11.3%
-
04
China45,459 6.1%
-
05
SC29,246 3.9%
-
06
Germany17,895 2.4%
-
07
Netherlands17,665 2.4%
-
08
Pakistan17,205 2.3%
-
09
Argentina16,230 2.2%
-
10
Colombia15,155 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
88%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
112.123.228.180
10/10
Confidence
100%
Reports
17
Location
CN
CN
220.250.52.101
8/10
Confidence
100%
Reports
14
Location
CN
CN
122.114.69.235
8/10
Confidence
99%
Reports
16
Location
CN
CN
221.7.147.194
10/10
Confidence
94%
Reports
30
Location
CN
CN
58.144.223.66
10/10
Confidence
94%
Reports
26
Location
CN
CN
111.160.133.62
8/10
Confidence
92%
Reports
94
Location
CN
CN
36.33.167.165
10/10
Confidence
90%
Reports
399
Location
CN
CN
122.114.113.177
8/10
Confidence
90%
Reports
41
Location
CN
CN
58.242.118.12
8/10
Confidence
90%
Reports
12
Location
CN
CN
58.242.64.246
10/10
Confidence
90%
Reports
10
Location
CN
CN
123.6.229.172
8/10
Confidence
89%
Reports
12
Location
CN
CN
122.191.115.237
10/10
Confidence
86%
Reports
67
Location
CN
CN
116.153.81.58
10/10
Confidence
85%
Reports
24
Location
CN
CN
110.53.0.118
10/10
Confidence
84%
Reports
68
Location
CN
CN
58.20.201.4
8/10
Confidence
84%
Reports
28
Location
CN
CN
121.31.210.125
10/10
Confidence
83%
Reports
47
Location
CN
CN
125.39.179.192
10/10
Confidence
81%
Reports
28
Location
CN
CN
218.59.175.217
10/10
Confidence
80%
Reports
55
Location
CN
CN
101.206.108.14
8/10
Confidence
79%
Reports
75
Location
CN
CN
153.99.92.11
8/10
Confidence
77%
Reports
14
Location
CN
CN
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
0%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
42.51.42.209
10/10
Confidence
100%
Reports
24
ISP
Zhengzhou Fasti...
202.101.144.44
10/10
Confidence
100%
Reports
19
ISP
Chinanet
118.121.202.149
10/10
Confidence
100%
Reports
17
ISP
CHINANET SiChua...
112.123.228.180
10/10
Confidence
100%
Reports
17
ISP
CHINA UNICOM Ch...
27.155.120.131
10/10
Confidence
100%
Reports
17
ISP
Fuzhou
36.134.208.91
10/10
Confidence
100%
Reports
16
ISP
China Mobile Co...
125.94.109.237
10/10
Confidence
100%
Reports
15
ISP
Chinanet
61.129.41.146
10/10
Confidence
100%
Reports
15
ISP
China Telecom (...
115.191.27.238
10/10
Confidence
100%
Reports
15
ISP
Beijing Volcano...
220.250.52.101
8/10
Confidence
100%
Reports
14
ISP
CHINA UNICOM Ch...
182.44.26.211
10/10
Confidence
100%
Reports
13
ISP
Cloud Computing...
117.50.70.169
8/10
Confidence
100%
Reports
12
ISP
China Unicom Be...
122.114.69.235
8/10
Confidence
99%
Reports
16
ISP
CHINA UNICOM Ch...
106.120.205.138
10/10
Confidence
99%
Reports
12
ISP
China Networks ...
115.190.151.242
10/10
Confidence
98%
Reports
19
ISP
Beijing Volcano...
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
76%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.149.224
10/10
Confidence
76%
Reports
7,726
Location
NL
NL
176.65.149.230
10/10
Confidence
76%
Reports
7,622
Location
NL
NL
176.65.149.220
10/10
Confidence
76%
Reports
7,191
Location
NL
NL
176.65.149.55
10/10
Confidence
76%
Reports
6,884
Location
NL
NL
2.57.121.112
10/10
Confidence
76%
Reports
5,544
Location
RO
RO
80.66.83.43
10/10
Confidence
76%
Reports
4,376
Location
RU
RU
160.119.71.92
10/10
Confidence
76%
Reports
1,907
Location
SC
SC
180.153.91.15
10/10
Confidence
76%
Reports
1,436
Location
CN
CN
45.82.78.105
10/10
Confidence
76%
Reports
1,338
Location
DE
DE
78.153.140.149
8/10
Confidence
76%
Reports
1,178
Location
GB
GB
65.49.1.172
8/10
Confidence
76%
Reports
981
Location
US
US
45.82.78.104
8/10
Confidence
76%
Reports
944
Location
DE
DE
65.49.1.52
8/10
Confidence
76%
Reports
913
Location
US
US
80.94.92.65
8/10
Confidence
76%
Reports
913
Location
RO
RO
65.49.1.202
8/10
Confidence
76%
Reports
893
Location
US
US