Check an IP Address, Domain Name, Subnet, or ASN

220.197.78.189 was found in our database!

$ whois 220.197.78.189

country·🇨🇳 China

city·Guiyang

isp·CHINA UNICOM China169 Backbone

asn·AS4837

network·Standard

$ sikker risk 220.197.78.189scoring →

confidence

30%Low

first_seen·Jan 23, 2026

last_seen·1h ago

sessions·6

events·8

$ sikker protocols 220.197.78.189

WINRM

1 / 2

MONGODB

1 / 2

FTP

1 / 1

RDP

1 / 1

HTTPS

1 / 1

ELASTICSEARCH

1 / 1

$ sikker summary 220.197.78.189

220.197.78.189 has a threat confidence score of 30%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 6 honeypot sessions targeting WINRM, MONGODB, FTP, RDP, HTTPS and 1 other protocols. First observed on January 23, 2026, most recently active April 18, 2026.

$ sikker primitives 220.197.78.189

ftp_user_probe1 elastic_http_get_request1 elastic_http_favicon_path_probe1

$ sikker related 220.197.78.189

🇨🇳·More threats fromChina→AS·More threats fromCHINA UNICOM China169 Backbone→WINR·More threats targetingWINRM→MONG·More threats targetingMONGODB→FTP·More threats targetingFTP→RDP·More threats targetingRDP→HTTP·More threats targetingHTTPS→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
1.30.20.238	45%	356
119.36.178.14	45%	365
175.42.32.205	96%	9,161
60.23.201.177	100%	27
123.188.239.222	96%	7,188

IP Address	Confidence	Events
39.107.244.123	81%	29,107
106.12.59.79	92%	84
180.184.30.130	96%	706
121.43.55.201	47%	32
175.42.32.205	96%	9,164