Notable Threat
IP 221.130.29.85 rated 8/10 from 126 verified reports.
Multiple security incidents attributed to this IP. Confidence: 84%.
More threatening than 80% of monitored IPs
IP Address
221.130.29.85
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
CN
Location
China Mobile communicatio...
ASN 56046
126
Reports
Honeypot
Data Source
Threat Categories
Hacking
19
Port Scan
18
Exploited Host
5
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
11. May 2026
Last Activity
6. June 2026
Recent (7 days)
4 incidents
Moderate Network Risk
The network hosting this IP (ASN 56046, operated by China Mobile communications corporation) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
7/10
High
Confidence Score
83%
Verified
Confidence History
2. May 2026 - 6. Jun 2026
84%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Port Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Port Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Port Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Port Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Port Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Port Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 221.130.29.85
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
CN
- ASN
- AS56046
- ISP
- China Mobile communications corporation
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 126
- First Reported
- 17 Aug 2025
- Last Reported
- 6 Jun 2026, 21:39
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS56046
China Mobile communications corporation
CN
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
146
Total IPs Monitored
2,132
Total Reports
14.6
Reports per IP
Network Context
This IP address belongs to China Mobile communications corporation (AS56046), which manages 146 IP addresses in our monitoring system. Out of these, 2,132 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
80
%
Global Threat Ranking
This IP is more threatening than 80% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 200,055 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
126
avg: 23
++
Network Comparison
Compared against 164 IPs in ASN 56046
Threat Level
8/10
network avg: 5.8
+
Total Reports
126
network avg: 14
++
Network China Mobile communications corporation has overall threat level 5/10
Geographic Comparison
Compared against 26,047 IPs in CN
Threat Level
8/10
country avg: 3.7
++
Total Reports
126
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
27 May 2026
4 reports
Daily Average
0.8
reports/day
Most Active
Friday
32 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
60
Hacking
51
Port Scan
42
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 15 reports
Weekly Activity
Geographic Threat Distribution
187,719 threat incidents tracked globally • Last 24h: 18,896 Logs
FEED
Top Threat Sources
-
01
United States38,493 20.5% -
02
India29,262 15.6% -
03
China26,047 13.9%
-
04
Brazil10,264 5.5% -
05
Germany7,151 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,560 3% -
08
Russia4,712 2.5% -
09
Pakistan4,710 2.5% -
10
Netherlands4,363 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.8/10
Avg Threat
92%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
112.4.79.138
10/10
Confidence
100%
Reports
31
Location
CN
CN
183.207.186.22
10/10
Confidence
99%
Reports
28
Location
CN
CN
223.65.84.146
10/10
Confidence
98%
Reports
28
Location
CN
CN
112.2.64.196
10/10
Confidence
98%
Reports
26
Location
CN
CN
183.206.17.91
10/10
Confidence
98%
Reports
24
Location
CN
CN
36.151.144.184
10/10
Confidence
98%
Reports
12
Location
CN
CN
111.55.74.133
10/10
Confidence
94%
Reports
382
Location
CN
CN
111.55.74.73
10/10
Confidence
94%
Reports
87
Location
CN
CN
36.151.148.227
10/10
Confidence
94%
Reports
86
Location
CN
CN
36.156.22.2
10/10
Confidence
94%
Reports
39
Location
CN
CN
221.130.15.237
10/10
Confidence
94%
Reports
38
Location
CN
CN
223.108.24.234
10/10
Confidence
94%
Reports
22
Location
CN
CN
36.150.168.40
10/10
Confidence
94%
Reports
22
Location
CN
CN
36.154.220.37
10/10
Confidence
87%
Reports
14
Location
CN
CN
183.206.17.194
8/10
Confidence
86%
Reports
8
Location
CN
CN
183.206.14.140
10/10
Confidence
83%
Reports
30
Location
CN
CN
223.108.219.132
10/10
Confidence
83%
Reports
25
Location
CN
CN
183.206.17.121
10/10
Confidence
83%
Reports
19
Location
CN
CN
223.113.9.99
10/10
Confidence
82%
Reports
17
Location
CN
CN
183.213.128.144
8/10
Confidence
78%
Reports
15
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
117.157.77.71
10/10
Confidence
100%
Reports
113
ISP
China Mobile Co...
112.11.230.160
10/10
Confidence
100%
Reports
104
ISP
China Mobile co...
110.191.179.174
10/10
Confidence
100%
Reports
103
ISP
Chinanet
110.82.42.202
10/10
Confidence
100%
Reports
102
ISP
Chinanet
111.23.144.224
10/10
Confidence
100%
Reports
86
ISP
China Mobile co...
111.22.70.208
10/10
Confidence
100%
Reports
77
ISP
China Mobile co...
112.27.109.94
10/10
Confidence
100%
Reports
76
ISP
China Mobile Co...
218.17.239.204
10/10
Confidence
100%
Reports
67
ISP
Chinanet
220.180.76.50
10/10
Confidence
100%
Reports
65
ISP
Chinanet
27.18.114.8
10/10
Confidence
100%
Reports
61
ISP
Chinanet
111.160.139.4
10/10
Confidence
100%
Reports
59
ISP
CHINA UNICOM Ch...
218.92.102.178
10/10
Confidence
100%
Reports
59
ISP
Chinanet
112.91.253.202
10/10
Confidence
100%
Reports
46
ISP
China Unicom IP...
180.164.45.181
10/10
Confidence
100%
Reports
43
ISP
China Telecom G...
14.29.214.161
10/10
Confidence
100%
Reports
42
ISP
Chinanet
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
84%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
193.46.255.99
10/10
Confidence
84%
Reports
715
Location
RO
RO
184.105.247.195
10/10
Confidence
84%
Reports
599
Location
US
US
65.49.1.172
8/10
Confidence
84%
Reports
594
Location
US
US
167.94.146.60
8/10
Confidence
84%
Reports
564
Location
US
US
167.94.146.49
8/10
Confidence
84%
Reports
554
Location
US
US
65.49.1.10
8/10
Confidence
84%
Reports
544
Location
US
US
64.62.156.94
10/10
Confidence
84%
Reports
531
Location
US
US
62.60.130.210
10/10
Confidence
84%
Reports
361
Location
IR
IR
5.182.83.231
10/10
Confidence
84%
Reports
318
Location
ES
ES
195.178.110.199
8/10
Confidence
84%
Reports
304
Location
BG
BG
89.47.53.19
10/10
Confidence
84%
Reports
222
Location
RO
RO
109.172.8.83
10/10
Confidence
84%
Reports
207
Location
EE
EE
91.231.89.247
10/10
Confidence
84%
Reports
207
Location
FR
FR
124.198.131.61
10/10
Confidence
84%
Reports
187
Location
US
US
91.196.152.106
10/10
Confidence
84%
Reports
174
Location
FR
FR
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203