JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.135.152.198

220.135.152.198 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 100%: ?

100%

ISP	Chunghwa Telecom Data Communication Business Group
Usage Type	Fixed Line ISP
ASN	AS3462
Hostname(s)	220-135-152-198.hinet-ip.hinet.net
Domain Name	cht.com.tw
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.135.152.198

Whois 220.135.152.198

IP Abuse Reports for 220.135.152.198:

This IP address has been reported a total of 59 times from 41 distinct sources. 220.135.152.198 was first reported on July 23rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 paulshipley.com.au	2026-07-25 11:00:50 (1 hour ago)	[Sat Jul 25 21:00:49.756810 2026] [security2:error] [pid 727322] [client 220.135.152.198:58994] [cli ... show more [Sat Jul 25 21:00:49.756810 2026] [security2:error] [pid 727322] [client 220.135.152.198:58994] [client 220.135.152.198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "angleseaarthouse.com.au"] [uri "/"] [unique_id "amSXYV0EGA8inw2GbznzUQAAACc"] ... show less	Web App Attack
🇺🇸 ipblock.com	2026-07-25 10:21:00 (2 hours ago)	IPBlock protected site ID [3192-af][s=02]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-25 08:06:30 (4 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇿 ddw	2026-07-25 07:55:05 (4 hours ago)	ModSecurity detection - Rules: 920420(Request content type is not allowed by policy)	Web App Attack
🇧🇪 voormedia	2026-07-25 07:22:11 (5 hours ago)	Accessed trap at '/phpinfo.php'	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-25 06:48:05 (5 hours ago)	220.135.152.198 - - [25/Jul/2026:09:48:04 +0300] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=g ... show more 220.135.152.198 - - [25/Jul/2026:09:48:04 +0300] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 404 4682 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0" ... show less	Web App Attack
🇮🇳 evicky2002	2026-07-25 06:00:00 (6 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 Apache	2026-07-25 05:04:04 (7 hours ago)	(mod_security) mod_security (id:920420) triggered by 220.135.152.198 (TW/Taiwan/220-135-152-198.hine ... show more (mod_security) mod_security (id:920420) triggered by 220.135.152.198 (TW/Taiwan/220-135-152-198.hinet-ip.hinet.net): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇲🇽 octageeks.com	2026-07-25 04:23:30 (8 hours ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇦🇺 paulshipley.com.au	2026-07-25 02:59:55 (9 hours ago)	[Sat Jul 25 12:59:54.906142 2026] [security2:error] [pid 732440] [client 220.135.152.198:59686] [cli ... show more [Sat Jul 25 12:59:54.906142 2026] [security2:error] [pid 732440] [client 220.135.152.198:59686] [client 220.135.152.198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/"] [unique_id "amQmqnmgJ3qCz2erDjo25QAAAAs"] ... show less	Web App Attack
🇬🇧 WebNiraj	2026-07-25 01:49:57 (10 hours ago)	(mod_security) mod_security (id:949110) triggered by 220.135.152.198 (TW/Taiwan/220-135-152-198.hine ... show more (mod_security) mod_security (id:949110) triggered by 220.135.152.198 (TW/Taiwan/220-135-152-198.hinet-ip.hinet.net): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
Anonymous	2026-07-25 01:01:19 (11 hours ago)	Banned by Fail2Ban on server	Web App Attack
🇳🇱 DrLex0	2026-07-25 00:39:22 (12 hours ago)	WordPress poking 220.135.152.198 443 - [25/Jul/2026:00:39:16 +0000] "GET /test.php HTTP/1.1" 404 74 ... show more WordPress poking 220.135.152.198 443 - [25/Jul/2026:00:39:16 +0000] "GET /test.php HTTP/1.1" 404 7476 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0" 220.135.152.198 443 - [25/Jul/2026:00:39:18 +0000] "GET /t.php?action=phpinfo HTTP/1.1" 404 7476 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0" 220.135.152.198 443 - [25/Jul/2026:00:39:19 +0000] "GET /phpinfo.php HTTP/1.1" 404 7476 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0" 220.135.152.198 443 - [25/Jul/2026:00:39:20 +0000] "GET /phpinfo HTTP/1.1" 404 7476 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0" 220.135.152.198 443 - [25/Jul/2026:00:39:22 +0000] "GET /info.php HTTP/1.1" 404 7476 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0" show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-25 00:06:31 (12 hours ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇺🇸 ipblock.com	2026-07-25 00:01:00 (12 hours ago)	IPBlock protected site ID [4055-d][s=03]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 112.221.163.219

🇳🇱 45.148.10.151

🇺🇦 194.12.80.36

🇳🇱 192.253.248.62

🇨🇳 122.232.6.146

🇨🇳 121.227.152.171

🇳🇱 91.92.47.123

🇺🇸 66.132.224.16

🇭🇰 42.200.73.3

🇧🇷 20.195.181.10

🇦🇺 16.176.139.50

🇸🇬 13.229.95.168

🇨🇳 220.202.112.74

🇷🇺 178.205.55.121

🇺🇸 172.67.163.37

🇯🇵 140.83.85.172

🇨🇳 118.145.234.151

🇮🇳 110.225.99.238

🇩🇪 51.116.233.22

🇺🇸 213.108.3.171