221.231.140.137

221.231.140.137 is a threat-intelligence indicator (IPv4 address) classified as Suspicious, corroborated across 5 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.

Indicator facts

Type

IPv4 address

Indicator

221.231.140.137

Classification

Suspicious

Confidence

90 / 100

Corroboration

5 independent sources

First seen

2026-06-23

Last seen

2026-08-15

Network (ASN)

AS137702 — CHINATELECOM-JIANGSU-NANJING-IDC Nanjing, Jiangsu Province, P.R.China.

Country

CN

Tags

• brute-force
• sshpwauth
• scanner
• ssh
• attacker
• web

Related CVEs (725)

• CVE-2026-60002
• CVE-2026-60001
• CVE-2026-60000
• CVE-2026-59999
• CVE-2026-59998
• CVE-2026-59997
• CVE-2026-59996
• CVE-2026-59995
• CVE-2026-35414
• CVE-2026-35388
• CVE-2026-35387
• CVE-2026-35385
• CVE-2026-34319
• CVE-2026-34318
• CVE-2026-34317
• CVE-2026-21964
• CVE-2025-50104
• CVE-2025-50102
• CVE-2025-50101
• CVE-2025-50100
• CVE-2025-50099
• CVE-2025-50098
• CVE-2025-50097
• CVE-2025-50096
• CVE-2025-50093
• CVE-2025-50092
• CVE-2025-50091
• CVE-2025-50088
• CVE-2025-50087
• CVE-2025-50086
• CVE-2025-50085
• CVE-2025-50084
• CVE-2025-50083
• CVE-2025-50082
• CVE-2025-50081
• CVE-2025-50080
• CVE-2025-50079
• CVE-2025-50078
• CVE-2025-50077
• CVE-2025-50076
• CVE-2025-32728
• CVE-2025-26465
• CVE-2024-21247
• CVE-2024-21241
• CVE-2024-21239
• CVE-2024-21238
• CVE-2024-21237
• CVE-2024-21236
• CVE-2024-21231
• CVE-2024-21230

← Threat intelligence command center · Explore the indicator corpus