JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 220.135.172.34

220.135.172.34 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 62%: ?

62%

ISP	Chunghwa Telecom Data Communication Business Group
Usage Type	Fixed Line ISP
ASN	AS3462
Hostname(s)	220-135-172-34.hinet-ip.hinet.net
Domain Name	cht.com.tw
Country	🇹🇼 Taiwan
City	Chang-hua, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 220.135.172.34

Whois 220.135.172.34

IP Abuse Reports for 220.135.172.34:

This IP address has been reported a total of 73 times from 25 distinct sources. 220.135.172.34 was first reported on August 28th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 CTK	2026-07-07 04:34:38 (2 days ago)	Customer Site (Grieskirchen FP)	Brute-Force
🇺🇸 drewf.ink	2026-07-05 12:31:04 (4 days ago)	[12:31] Port scanning. Port(s) scanned: TCP/5985	Port Scan
🇵🇱 sefinek.net	2026-07-04 20:02:58 (4 days ago)	Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Acce ... show more Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 withfallback.com	2026-07-04 19:42:12 (4 days ago)	Attempted WinRM call from non-Windows client	Port Scan
Anonymous	2026-07-03 15:33:51 (5 days ago)	Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Acce ... show more Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [3] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇦🇺 LiftUp Hosting	2026-07-03 12:52:00 (6 days ago)	Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Acce ... show more Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [1] TCP show less	Hacking Bad Web Bot
🇸🇬 drewf.ink	2026-06-30 06:25:25 (1 week ago)	[06:25] Port scanning. Port(s) scanned: TCP/5985	Port Scan
🇺🇸 withfallback.com	2026-06-23 12:18:46 (2 weeks ago)	Attempted WinRM call from non-Windows client	Port Scan
🇫🇷 ✨	2026-06-22 01:01:22 (2 weeks ago)	Rule : Security Rule: Security Event: Security UserAccount: Administrator S-1-0-0 - - 0x0 S-1-0-0 ... show more Rule : Security Rule: Security Event: Security UserAccount: Administrator S-1-0-0 - - 0x0 S-1-0-0 Administrator WORKGROUP 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM SERVER - - 0 0x0 - 220.135.172.34 50571 show less	Port Scan Hacking Brute-Force
🇩🇪 Justin F. \| AS204464	2026-06-21 10:46:43 (2 weeks ago)	Honeypot [nx-infrastructure]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client ... show more Honeypot [nx-infrastructure]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [1] TCP Reported by: Justin F. show less	Hacking Bad Web Bot
🇫🇷 TheHoneyPotter	2026-06-19 17:04:59 (2 weeks ago)	Honeypot [fc-honeypot]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept ... show more Honeypot [fc-honeypot]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇭🇺 Lacika555	2026-06-15 06:12:54 (3 weeks ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
Anonymous	2026-06-15 01:49:28 (3 weeks ago)	Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Acce ... show more Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [3] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-06-12 22:45:52 (3 weeks ago)	Honeypot [uk-production01]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Ac ... show more Honeypot [uk-production01]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [1] TCP show less	Hacking Bad Web Bot
🇨🇦 smick	2026-06-07 00:33:34 (1 month ago)	Brute-force attack.	Brute-Force

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.52.217.25

🇹🇭 150.95.80.21

🇻🇳 116.99.171.127

🇫🇷 85.217.140.11

🇮🇱 79.177.139.238

🇯🇵 8.216.1.47

🇬🇧 198.244.148.71

🇮🇳 182.95.182.138

🇻🇳 171.244.141.86

🇺🇸 154.7.233.133

🇻🇳 103.48.192.48

🇱🇹 45.227.254.170

🇹🇿 41.59.34.54

🇩🇪 2a00:11c0:5f:2d1::72

🇹🇳 197.5.145.114

🇲🇽 187.190.176.46

🇺🇸 165.22.177.137

🇹🇼 128.14.230.227

🇯🇵 107.155.15.8

🇧🇩 103.154.17.145