Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Taipei

Region: Taipei

Country: Taiwan, China

Internet Service Provider: Chunghwa

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
220.135.48.143 attackbots
Automatic report - Banned IP Access
2020-07-30 00:38:19
220.135.48.40 attack
Dec  5 16:59:56 sd-53420 sshd\[11950\]: Invalid user guest from 220.135.48.40
Dec  5 16:59:56 sd-53420 sshd\[11950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.48.40
Dec  5 16:59:58 sd-53420 sshd\[11950\]: Failed password for invalid user guest from 220.135.48.40 port 57954 ssh2
Dec  5 17:07:28 sd-53420 sshd\[13469\]: User root from 220.135.48.40 not allowed because none of user's groups are listed in AllowGroups
Dec  5 17:07:28 sd-53420 sshd\[13469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.48.40  user=root
...
2019-12-06 01:06:24
220.135.48.40 attackspam
Dec  2 05:12:48 web8 sshd\[15187\]: Invalid user operator from 220.135.48.40
Dec  2 05:12:48 web8 sshd\[15187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.48.40
Dec  2 05:12:50 web8 sshd\[15187\]: Failed password for invalid user operator from 220.135.48.40 port 41388 ssh2
Dec  2 05:20:10 web8 sshd\[18801\]: Invalid user ghazali from 220.135.48.40
Dec  2 05:20:10 web8 sshd\[18801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.48.40
2019-12-02 13:24:56
220.135.48.40 attack
Aug 28 03:57:26 game-panel sshd[3311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.48.40
Aug 28 03:57:28 game-panel sshd[3311]: Failed password for invalid user kravi from 220.135.48.40 port 39462 ssh2
Aug 28 04:02:34 game-panel sshd[3494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.48.40
2019-08-28 12:12:08
220.135.48.40 attack
Fail2Ban Ban Triggered
2019-08-17 11:36:59
220.135.48.40 attackspam
Jul 14 22:21:20 MK-Soft-VM6 sshd\[6065\]: Invalid user czarek from 220.135.48.40 port 56386
Jul 14 22:21:20 MK-Soft-VM6 sshd\[6065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.48.40
Jul 14 22:21:22 MK-Soft-VM6 sshd\[6065\]: Failed password for invalid user czarek from 220.135.48.40 port 56386 ssh2
...
2019-07-15 06:26:26
220.135.48.40 attackbotsspam
Jul  6 23:12:16 ip-172-31-1-72 sshd\[1774\]: Invalid user ftptest from 220.135.48.40
Jul  6 23:12:16 ip-172-31-1-72 sshd\[1774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.48.40
Jul  6 23:12:18 ip-172-31-1-72 sshd\[1774\]: Failed password for invalid user ftptest from 220.135.48.40 port 60808 ssh2
Jul  6 23:15:29 ip-172-31-1-72 sshd\[1828\]: Invalid user username from 220.135.48.40
Jul  6 23:15:29 ip-172-31-1-72 sshd\[1828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.48.40
2019-07-07 07:23:48
220.135.48.40 attackspam
$f2bV_matches
2019-06-30 20:06:51
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 220.135.48.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62537
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;220.135.48.140.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025042502 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 26 08:09:41 CST 2025
;; MSG SIZE  rcvd: 107
Host info
140.48.135.220.in-addr.arpa domain name pointer 220-135-48-140.hinet-ip.hinet.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
140.48.135.220.in-addr.arpa	name = 220-135-48-140.hinet-ip.hinet.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
222.186.173.215 attackspam
Jun  8 23:05:41 santamaria sshd\[9912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215  user=root
Jun  8 23:05:42 santamaria sshd\[9912\]: Failed password for root from 222.186.173.215 port 4510 ssh2
Jun  8 23:06:11 santamaria sshd\[9923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215  user=root
...
2020-06-09 05:11:20
223.241.247.214 attackspambots
Jun  8 21:28:23 jumpserver sshd[5954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.241.247.214  user=root
Jun  8 21:28:24 jumpserver sshd[5954]: Failed password for root from 223.241.247.214 port 41940 ssh2
Jun  8 21:30:42 jumpserver sshd[5984]: Invalid user manu from 223.241.247.214 port 59831
...
2020-06-09 05:41:51
123.51.152.52 attackspambots
Jun  8 23:25:30 debian kernel: [550488.012075] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=123.51.152.52 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=59256 PROTO=TCP SPT=56929 DPT=24878 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-09 05:40:58
218.75.156.186 attackbots
IP 218.75.156.186 attacked honeypot on port: 139 at 6/8/2020 9:25:30 PM
2020-06-09 05:23:42
117.50.20.11 attack
Jun  8 22:57:17 OPSO sshd\[8551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.20.11  user=mysql
Jun  8 22:57:19 OPSO sshd\[8551\]: Failed password for mysql from 117.50.20.11 port 34442 ssh2
Jun  8 23:00:29 OPSO sshd\[8896\]: Invalid user lakim from 117.50.20.11 port 58402
Jun  8 23:00:29 OPSO sshd\[8896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.20.11
Jun  8 23:00:31 OPSO sshd\[8896\]: Failed password for invalid user lakim from 117.50.20.11 port 58402 ssh2
2020-06-09 05:15:33
157.245.2.229 attackspam
Automatic report - XMLRPC Attack
2020-06-09 05:14:10
213.6.130.133 attackbots
$f2bV_matches
2020-06-09 05:34:35
79.247.134.170 attackspam
Jun  8 22:26:20 h2022099 sshd[18229]: Invalid user liuliu from 79.247.134.170
Jun  8 22:26:22 h2022099 sshd[18229]: Failed password for invalid user liuliu from 79.247.134.170 port 33152 ssh2
Jun  8 22:26:23 h2022099 sshd[18229]: Received disconnect from 79.247.134.170: 11: Bye Bye [preauth]
Jun  8 22:31:09 h2022099 sshd[19201]: Invalid user miagroup from 79.247.134.170


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=79.247.134.170
2020-06-09 05:17:11
201.231.115.87 attack
Jun  8 22:21:54 vpn01 sshd[15403]: Failed password for root from 201.231.115.87 port 39777 ssh2
Jun  8 22:25:55 vpn01 sshd[15422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.231.115.87
...
2020-06-09 05:08:51
222.186.30.112 attackbots
2020-06-08T21:03:29.872808randservbullet-proofcloud-66.localdomain sshd[22083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112  user=root
2020-06-08T21:03:31.989968randservbullet-proofcloud-66.localdomain sshd[22083]: Failed password for root from 222.186.30.112 port 64094 ssh2
2020-06-08T21:03:34.049280randservbullet-proofcloud-66.localdomain sshd[22083]: Failed password for root from 222.186.30.112 port 64094 ssh2
2020-06-08T21:03:29.872808randservbullet-proofcloud-66.localdomain sshd[22083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112  user=root
2020-06-08T21:03:31.989968randservbullet-proofcloud-66.localdomain sshd[22083]: Failed password for root from 222.186.30.112 port 64094 ssh2
2020-06-08T21:03:34.049280randservbullet-proofcloud-66.localdomain sshd[22083]: Failed password for root from 222.186.30.112 port 64094 ssh2
...
2020-06-09 05:11:57
194.26.29.53 attackspam
Jun  8 23:13:06 debian-2gb-nbg1-2 kernel: \[13909524.260367\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.53 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=11872 PROTO=TCP SPT=48650 DPT=3349 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-09 05:18:30
212.166.68.146 attack
DATE:2020-06-08 23:10:19, IP:212.166.68.146, PORT:ssh SSH brute force auth (docker-dc)
2020-06-09 05:31:19
40.120.54.164 attackspambots
Fail2Ban
2020-06-09 05:16:27
45.84.196.212 attackbotsspam
2020-06-08T22:38:30.398199vfs-server-01 sshd\[27710\]: Invalid user admin from 45.84.196.212 port 60918
2020-06-08T22:38:30.709560vfs-server-01 sshd\[27712\]: Invalid user admin from 45.84.196.212 port 33286
2020-06-08T22:38:31.334250vfs-server-01 sshd\[27714\]: Invalid user user from 45.84.196.212 port 34030
2020-06-09 05:21:30
118.24.36.247 attackbots
k+ssh-bruteforce
2020-06-09 05:10:18

Recently Reported IPs

139.224.48.191 220.135.48.71 83.77.175.94 125.25.1.101
187.74.199.66 65.49.1.137 147.185.132.111 206.131.184.170
120.51.32.185 77.3.187.247 43.153.36.110 201.193.173.132
67.245.206.143 131.100.77.240 14.155.209.6 103.151.172.86
30.53.253.94 254.220.224.71 99.9.41.206 193.0.199.153