AbuseIPDB » 220.197.15.1

220.197.15.1 was found in our database!

This IP was reported 1,087 times. Confidence of Abuse is 0%: ?

0%

ISP	China Unicom
Usage Type	Unknown
Domain Name	chinaunicom.com
Country	China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 220.197.15.1

Whois 220.197.15.1

IP Abuse Reports for 220.197.15.1:

This IP address has been reported a total of 1,087 times from 294 distinct sources. 220.197.15.1 was first reported on November 21st 2022, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
ghostwarriors	21 Nov 2022	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
IrisFlower	21 Nov 2022	Unauthorized connection attempt detected from IP address 220.197.15.1 to port 22 [J]	Port Scan Hacking
Anonymous	21 Nov 2022	(sshd) Failed SSH login from 220.197.15.1 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction ... show more(sshd) Failed SSH login from 220.197.15.1 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 21 23:18:37 server5 sshd[31990]: Did not receive identification string from 220.197.15.1 Nov 21 23:18:43 server5 sshd[32006]: Invalid user web from 220.197.15.1 Nov 21 23:18:43 server5 sshd[32000]: Invalid user pi from 220.197.15.1 Nov 21 23:18:43 server5 sshd[32006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.197.15.1 Nov 21 23:18:43 server5 sshd[32000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.197.15.1 show less	Brute-Force
inpec.fr	21 Nov 2022	$f2bV_matches	Brute-Force
IrisFlower	21 Nov 2022	Unauthorized connection attempt detected from IP address 220.197.15.1 to port 22 [J]	Port Scan Hacking
www.blocklist.de	21 Nov 2022	Lines containing failures of 220.197.15.1 (max 1000) Nov 22 04:47:08 asvd sshd[4071233]: AD us ... show moreLines containing failures of 220.197.15.1 (max 1000) Nov 22 04:47:08 asvd sshd[4071233]: AD user postgres from 220.197.15.1 port 5339 Nov 22 04:47:09 asvd sshd[4071216]: AD user dev from 220.197.15.1 port 5389 Nov 22 04:47:09 asvd sshd[4071224]: AD user halo from 220.197.15.1 port 5321 Nov 22 04:47:09 asvd sshd[4071221]: AD user ubnt from 220.197.15.1 port 5325 Nov 22 04:47:09 asvd sshd[4071218]: AD user user from 220.197.15.1 port 5353 Nov 22 04:47:09 asvd sshd[4071217]: AD user ubnt from 220.197.15.1 port 5375 Nov 22 04:47:09 asvd sshd[4071232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.197.15.1 user=r.r Nov 22 04:47:09 asvd sshd[4071224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.197.15.1 Nov 22 04:47:09 asvd sshd[4071242]: AD user admin from 220.197.15.1 port 5365 Nov 22 04:47:09 asvd sshd[4071234]: AD user ubuntu from 220.197.15.1 port 5315 Nov 22 04:47:09 asvd sshd........ ------------------------------ show less	FTP Brute-Force Hacking
Boxis.net NOC	21 Nov 2022	(sshd) Failed SSH login from 220.197.15.1 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction ... show more(sshd) Failed SSH login from 220.197.15.1 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 22 04:54:52 da057 sshd[352209]: Did not receive identification string from 220.197.15.1 port 3889 Nov 22 04:54:57 da057 sshd[352279]: Invalid user postgres from 220.197.15.1 port 6309 Nov 22 04:54:57 da057 sshd[352232]: Invalid user test from 220.197.15.1 port 5175 Nov 22 04:54:57 da057 sshd[352225]: Invalid user user from 220.197.15.1 port 5217 Nov 22 04:54:57 da057 sshd[352230]: Invalid user ubnt from 220.197.15.1 port 5235 show less	Port Scan

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩