AbuseIPDB » 220.133.219.201

Check an IP Address, Domain Name, or Subnet

e.g. 3.239.233.139, microsoft.com, or 5.188.10.0/24

220.133.219.201 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 23%: ?

23%

ISP	Chunghwa Telecom Co. Ltd.
Usage Type	Unknown
Hostname(s)	220-133-219-201.HINET-IP.hinet.net
Domain Name	cht.com.tw
Country	Taiwan
City	Taipei, Taipei

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 220.133.219.201

Whois 220.133.219.201

IP Abuse Reports for 220.133.219.201:

This IP address has been reported a total of 40 times from 10 distinct sources. 220.133.219.201 was first reported on November 22nd 2020, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
IgorS.zg.hr	03 Dec 2020	Telnetd brute force attack detected by fail2ban	Hacking Brute-Force
Parth Maniar	03 Dec 2020	SSH login attempts.	Brute-Force SSH
gbetsis	02 Dec 2020	Telnet Server BruteForce Attack	Brute-Force
Joe-Mark	02 Dec 2020	Found on Github Combined on 3 lists / proto=6 . srcport=32446 . dstport=23 Telnet . (2 ... show moreFound on Github Combined on 3 lists / proto=6 . srcport=32446 . dstport=23 Telnet . (2619) show less	Hacking Brute-Force
Unveil Technology	01 Dec 2020	Wed 02 02:32:03 [ServerName] WebAppAttack from 220.133.219.201 port 80 http	Web App Attack
Unveil Technology	01 Dec 2020	Wed 02 00:00:10 [ServerName] WebAppAttack from 220.133.219.201 port 80 http	Web App Attack
Anonymous	01 Dec 2020	Port Scan detected! ...	Port Scan Hacking
SaferWeb	30 Nov 2020	srvr2: (mod_security) mod_security (id:920350) triggered by 220.133.219.201 (TW/-/220-133-219-201.HI ... show moresrvr2: (mod_security) mod_security (id:920350) triggered by 220.133.219.201 (TW/-/220-133-219-201.HINET-IP.hinet.net): 1 in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/11/30 17:26:55 [error] 278901#0: 342218 [client 220.133.219.201] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "160675361524.427006"] [ref "o0,9v21,9"], client: 220.133.219.201, [redacted] request: "GET / HTTP/1.1" [redacted] show less	Hacking Web App Attack
Unveil Technology	30 Nov 2020	Mon 30 10:38:05 [ServerName] WebAppAttack from 220.133.219.201 port 80 http	Web App Attack
Unveil Technology	29 Nov 2020	Mon 30 05:28:02 [ServerName] WebAppAttack from 220.133.219.201 port 80 http	Web App Attack
Unveil Technology	29 Nov 2020	Mon 30 03:15:07 [ServerName] WebAppAttack from 220.133.219.201 port 80 http	Web App Attack
Unveil Technology	29 Nov 2020	Sun 29 23:52:04 [ServerName] WebAppAttack from 220.133.219.201 port 80 http	Web App Attack
Unveil Technology	29 Nov 2020	Sun 29 20:11:04 [ServerName] WebAppAttack from 220.133.219.201 port 80 http	Web App Attack
Unveil Technology	29 Nov 2020	Sun 29 18:48:02 [ServerName] WebAppAttack from 220.133.219.201 port 80 http	Web App Attack
SaferWeb	29 Nov 2020	srvr2: (mod_security) mod_security (id:920350) triggered by 220.133.219.201 (TW/-/220-133-219-201.HI ... show moresrvr2: (mod_security) mod_security (id:920350) triggered by 220.133.219.201 (TW/-/220-133-219-201.HINET-IP.hinet.net): 1 in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/11/29 14:48:08 [error] 97927#0: 167910 [client 220.133.219.201] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "160665768813.195291"] [ref "o0,9v21,9"], client: 220.133.219.201, [redacted] request: "GET / HTTP/1.1" [redacted] show less	Hacking Web App Attack