1.206.52.91
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- CHINANET GUIZHOU PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Guiyang, Guizhou
No reports in the last 60 days
1.206.52.91 has been reported 20 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
20 from
18 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-06-16 22:10:56 | LAST=2026-06-16 22:10:57. Last seen 2026-06-16 22:10:57.
|
Port Scan | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
|
Hacking Port Scan | |
| Anonymous |
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Hacking Port Scan | |
| 🇺🇸 RAP |
2026-06-16 06:54:35 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 RAP |
2026-06-15 18:27:38 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇳🇵 radheykrishna.com.np |
Jun 15 21:15:44 kernel: [5027278.236467] [UFW BLOCK] IN=ens160 OUT= SRC=1.206.52.91 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=36010 DF PROTO=TCP SPT=36881 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇺🇸 LotPhantom |
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 48903
TTL: 51
Packet length: 60
TOS: 0x08
This report (for 1.206.52.91) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇧🇾 stroytrest |
2026-06-14T19:02:58.761478+03:00 gate kernel: [1767577.928320] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=1.206.52.91 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=65379 DF PROTO=TCP SPT=59176 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: Telnet (114 total hits)
|
Brute-Force | |
| 🇺🇸 MPL |
tcp/23 (6 or more attempts)
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 39228
TTL: 53
Packet length: 60
TOS: 0x00
This report (for 1.206.52.91) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇩🇪 Lazentis |
Unauthorized access attempt to port 23 (tcp)
|
Brute-Force SSH | |
| Anonymous |
Unauthorized connection to Telnet port 23
|
Port Scan | |
| 🇯🇵 S.O.B.A. Dev. |
Repeated SSH login failures
|
SSH Port Scan Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown