AbuseIPDB » 111.248.207.222

111.248.207.222 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 78%: ?

78%

ISP	Chunghwa Telecom Co.,Ltd.
Usage Type	Fixed Line ISP
ASN	AS3462
Hostname(s)	111-248-207-222.dynamic-ip.hinet.net
Domain Name	cht.com.tw
Country	Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 111.248.207.222

Whois 111.248.207.222

IP Abuse Reports for 111.248.207.222:

This IP address has been reported a total of 66 times from 31 distinct sources. 111.248.207.222 was first reported on March 26th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2025-03-31 01:58:54 (3 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/111.248.207.222	SSH
sid3windr	2025-03-30 13:36:06 (3 weeks ago)	SSH port scan (Tarpitted for 1m50s, wasted 144B)	Port Scan SSH
Ha1fdan	2025-03-30 08:36:27 (3 weeks ago)	Mar 30 10:16:56 main1 sshd[3479559]: Invalid user database from 111.248.207.222 port 39334 Mar ... show moreMar 30 10:16:56 main1 sshd[3479559]: Invalid user database from 111.248.207.222 port 39334 Mar 30 10:28:11 main1 sshd[3482457]: Invalid user user1 from 111.248.207.222 port 49728 Mar 30 10:36:26 main1 sshd[3484618]: Invalid user aaron from 111.248.207.222 port 59802 ... show less	Brute-Force SSH
valnoxy	2025-03-30 05:01:59 (3 weeks ago)	Invalid user test from 111.248.207.222 port 52134	Brute-Force SSH
Chriss Har	2025-03-30 00:35:26 (3 weeks ago)	[Sun Mar 30 00:35:11.498975 2025] [authz_core:error] [pid 1960570] [client 111.248.207.222:39470] AH ... show more[Sun Mar 30 00:35:11.498975 2025] [authz_core:error] [pid 1960570] [client 111.248.207.222:39470] AH01630: client denied by server configuration: /var/www/dokuwiki/vendor/phpunit [Sun Mar 30 00:35:13.156505 2025] [authz_core:error] [pid 1960570] [client 111.248.207.222:39470] AH01630: client denied by server configuration: /var/www/dokuwiki/vendor/phpunit [Sun Mar 30 00:35:15.336591 2025] [authz_core:error] [pid 1960570] [client 111.248.207.222:39470] AH01630: client denied by server configuration: /var/www/dokuwiki/vendor/phpunit ... show less	Brute-Force
urnilxfgbez	2025-03-29 23:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
rtbh.com.tr	2025-03-29 20:48:28 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Arnold Wright	2025-03-29 19:53:30 (3 weeks ago)	Mar 29 13:53:27 phoenix sshd[913919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show moreMar 29 13:53:27 phoenix sshd[913919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.248.207.222 user=root Mar 29 13:53:29 phoenix sshd[913919]: Failed password for root from 111.248.207.222 port 34618 ssh2 ... show less	SSH
mgarofano80	2025-03-29 19:04:00 (3 weeks ago)		Brute-Force Web App Attack
ErdbeerbaerLP	2025-03-29 16:57:38 (3 weeks ago)	2025-03-29T16:45:45.866417+00:00 erdbeerbaerlp.de sshd[4102060]: Invalid user mailman from 111.248.2 ... show more2025-03-29T16:45:45.866417+00:00 erdbeerbaerlp.de sshd[4102060]: Invalid user mailman from 111.248.207.222 port 45870 2025-03-29T16:51:38.068327+00:00 erdbeerbaerlp.de sshd[71714]: Invalid user natalia from 111.248.207.222 port 33184 2025-03-29T16:57:37.598984+00:00 erdbeerbaerlp.de sshd[238020]: Invalid user oracle from 111.248.207.222 port 49962 ... show less	Brute-Force
Bruno	2025-03-29 14:15:41 (3 weeks ago)	Port Scanner: 111.248.207.222	Port Scan
chronos	2025-03-29 13:50:09 (3 weeks ago)	[AUTORAVALT][[29/03/2025 - 10:50:08 -03:00 UTC] Attack from [HINET Network-Adm] [111.248 ... show more[AUTORAVALT][[29/03/2025 - 10:50:08 -03:00 UTC] Attack from [HINET Network-Adm] [111.248.207.222]-[RANGE:111.240.0.0 - 111.255.255.255] [111-248-207-222.dynamic-ip.hinet.net] Action: BLocKed Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing. ] ... show less	Bad Web Bot
lukascomer	2025-03-29 08:54:34 (3 weeks ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "xsw" at 2025-03-29T08:54:34Z	Brute-Force SSH
lukascomer	2025-03-29 07:52:08 (3 weeks ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "uucp" at 2025-03-29T07:52:08Z	Brute-Force SSH
SOC-BR	2025-03-29 07:02:22 (3 weeks ago)	Attack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2025-03-28 00:21:0 ... show moreAttack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2025-03-28 00:21:08 - Source Port 56396 show less	Port Scan Hacking

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩