JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

220.177.133.134

Recent Activity

Abuse Confidence Score

100% Critical

44 reports

41 reporters · latest 9 hours ago

ISP: CHINANET jiangxi province network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Nanchang, Jiangxi

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

44 from 41 distinct reporters

First reported

October 26th 2026

Most recent report

9 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 14 🇺🇸 United States of America 9 🇳🇱 Netherlands 4

Most common categories Brute-Force 35 SSH 31 Port Scan 9 Hacking 4 Exploited Host 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 GoForceX	2026-11-13 16:27:56 UTC · (9 hours ago)	2026-11-14T00:27:41.755037+08:00 C20241211186402 sshd-session[1725854]: Failed password for root from 220.177.133.134 port 45770 ssh2 2026-11-14T00:27:44.355036+08:00 C20241211186402 sshd-session[1725854]: Failed password for root from 220.177.133.13 ... show more 2026-11-14T00:27:41.755037+08:00 C20241211186402 sshd-session[1725854]: Failed password for root from 220.177.133.134 port 45770 ssh2 2026-11-14T00:27:44.355036+08:00 C20241211186402 sshd-session[1725854]: Failed password for root from 220.177.133.134 port 45770 ssh2 2026-11-14T00:27:46.757760+08:00 C20241211186402 sshd-session[1725854]: Failed password for root from 220.177.133.134 port 45770 ssh2 2026-11-14T00:27:50.255086+08:00 C20241211186402 sshd-session[1725854]: Failed password for root from 220.177.133.134 port 45770 ssh2 2026-11-14T00:27:54.855064+08:00 C20241211186402 sshd-session[1725854]: Failed password for root from 220.177.133.134 port 45770 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-11-13 13:26:01 UTC · (12 hours ago)	...	Brute-Force SSH
🇯🇵 wuyangfan	2026-11-13 03:08:28 UTC · (22 hours ago)	SSH brute force attack detected by fail2ban	Brute-Force SSH
🇺🇸 wk5h	2026-11-12 15:05:18 UTC · (1 day ago)	Honeypot (T-Pot), last 24h: 28 hits. Services: Redishoneypot.	Hacking
🇩🇪 WinterGateIC	2026-11-12 06:12:50 UTC · (1 day ago)	brute-force authentication attack \| Stage 4 (Exploitation) \| ATT&CK:T1110 \| via auth ssh:// \| raw=SSH auth session closed (user=root) \| src_port=22 sev=critical conf=60% usage=Fixed_Line_ISP domain=chinatelecom.cn geo=CN sensor=ssh_monitor active=11- ... show more brute-force authentication attack \| Stage 4 (Exploitation) \| ATT&CK:T1110 \| via auth ssh:// \| raw=SSH auth session closed (user=root) \| src_port=22 sev=critical conf=60% usage=Fixed_Line_ISP domain=chinatelecom.cn geo=CN sensor=ssh_monitor active=11-12 06:12..06:12Z \| campaign=camp_000f cohort=31ips NOVEL_PAYLOAD fp=276aec07046a \| 2026-11-12 06:12:50 UTC report#2 [community: convicted=100%] [origin=elevated-risk] [zero-day candidate, correlated with prior observed variants] show less	Brute-Force SSH Hacking
🇩🇪 NetWatch	2026-11-12 00:12:29 UTC · (2 days ago)	NetWatch sensor network: The IP 220.177.133.134 executed unauthorized SSH login attempts.	Brute-Force SSH
🇩🇪 Robbie	2026-11-11 04:18:58 UTC · (2 days ago)	Nov 11 04:18:57 Ubuntu-2204-jammy-amd64-base sshd[3398476]: User root from 220.177.133.134 not allowed because not listed in AllowUsers ...	Brute-Force SSH
🇬🇧 paradoxnetworks	2026-11-10 16:43:32 UTC · (3 days ago)	2026-11-10T16:42:01.766856+00:00 garage-vel-wlv01 sshd-session[3400613]: Failed password for root from 220.177.133.134 port 56860 ssh2 2026-11-10T16:42:05.575766+00:00 garage-vel-wlv01 sshd-session[3400613]: Failed password for root from 220.177.133. ... show more 2026-11-10T16:42:01.766856+00:00 garage-vel-wlv01 sshd-session[3400613]: Failed password for root from 220.177.133.134 port 56860 ssh2 2026-11-10T16:42:05.575766+00:00 garage-vel-wlv01 sshd-session[3400613]: Failed password for root from 220.177.133.134 port 56860 ssh2 2026-11-10T16:42:09.670297+00:00 garage-vel-wlv01 sshd-session[3400613]: Failed password for root from 220.177.133.134 port 56860 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-11-10 16:43:30 UTC · (3 days ago)	2026-11-10T17:43:23.546549+01:00 v1 sshd-session[416273]: Failed password for root from 220.177.133.134 port 57904 ssh2 2026-11-10T17:43:25.932303+01:00 v1 sshd-session[416273]: Failed password for root from 220.177.133.134 port 57904 ssh2 2026-11-10 ... show more 2026-11-10T17:43:23.546549+01:00 v1 sshd-session[416273]: Failed password for root from 220.177.133.134 port 57904 ssh2 2026-11-10T17:43:25.932303+01:00 v1 sshd-session[416273]: Failed password for root from 220.177.133.134 port 57904 ssh2 2026-11-10T17:43:30.158529+01:00 v1 sshd-session[416273]: Failed password for root from 220.177.133.134 port 57904 ssh2 ... show less	Brute-Force SSH
🇳🇿 TazzNZ	2026-11-08 09:38:50 UTC · (5 days ago)	2026-11-08T22:38:24.747358+13:00 eragon sshd-session[1228831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.177.133.134 user=root 2026-11-08T22:38:26.880522+13:00 eragon sshd-session[1228831]: Failed pa ... show more 2026-11-08T22:38:24.747358+13:00 eragon sshd-session[1228831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.177.133.134 user=root 2026-11-08T22:38:26.880522+13:00 eragon sshd-session[1228831]: Failed password for root from 220.177.133.134 port 48866 ssh2 2026-11-08T22:38:31.014381+13:00 eragon sshd-session[1228831]: Failed password for root from 220.177.133.134 port 48866 ssh2 2026-11-08T22:38:35.072482+13:00 eragon sshd-session[1228831]: Failed password for root from 220.177.133.134 port 48866 ssh2 ... show less	Brute-Force SSH
🇵🇷 HRCOM	2026-11-08 08:56:21 UTC · (5 days ago)	Brute force against network services: at least 3 login attempts on TCP 6379 between 2026-11-08 08:56:21 and 2026-11-08 08:56:23 UTC. Full TCP handshake completed; no real service was exposed.	Brute-Force
🇺🇸 scharsey	2026-11-08 05:53:14 UTC · (5 days ago)	Honeypot: 4 REDIS events	Port Scan
🇺🇸 Phil Schuyler	2026-11-07 00:00:00 UTC · (1 week ago)	Repeated probing against public honeypot services: 28 observed events targeting REDISHONEYPOT/6379.	Port Scan
🇺🇸 thefuzz4	2026-11-06 21:17:40 UTC · (1 week ago)	SSH tarpit (endlessh): 8 unsolicited connection(s) to port 22, held 2 minute(s). Automated report.	Brute-Force SSH
🇺🇸 HamSammich	2026-11-06 20:45:27 UTC · (1 week ago)	Automated sensor: 16 SSH brute-force attempts over the last 24h (latest 2026-11-06T20:45Z).	Brute-Force SSH

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 192.119.169.119

🇵🇱 172.69.155.59

🇻🇬 103.47.145.84

🇩🇪 69.5.169.125

🇨🇿 195.113.133.220

🇧🇷 177.174.89.99

🇵🇱 172.69.155.6

🇵🇭 154.18.197.35

🇯🇵 152.32.201.80

🇸🇮 102.220.160.47

🇿🇦 102.64.35.156

🇪🇪 83.166.50.15

🇺🇸 66.132.172.40

🇩🇪 23.132.164.184

🇺🇸 216.218.206.84

🇺🇦 212.3.100.186

🇺🇸 199.165.159.20

🇲🇽 189.142.212.96

🇨🇳 115.190.52.2

🇨🇳 106.117.104.91