116.138.131.123
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- China United Network Communications Corporation Limited
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Shenyang, Liaoning
Abuse Reports
Total reports
19 from
14 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 jpheerlyn |
SSH tarpit: 1 unsolicited SSH connections; last seen 2026-10-28T14:08:04Z
|
Brute-Force SSH | |
| 🇧🇾 stroytrest |
|
Port Scan | |
| 🇧🇾 sashan |
2026-10-28T19:04:43.526688+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=116.138.131.123 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=1270 DF PROTO=TCP SPT=50211 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇧🇾 StatsMe |
Date: 2026-10-28T16:04:29.000+00:00 | Action: deny | Port: 23 | Log: Connection Failed
|
Brute-Force SSH Port Scan | |
| 🇺🇸 k3rn3l109 |
Sentinel honeypot: cowrie-persistent hit on fake TELNET service (server-01-CA) UA=cowrie/telnet
|
Brute-Force SSH Hacking | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-10-28 12:33:16 | LAST=2026-10-28 12:33:17. Last seen 2026-10-28 12:33:17.
|
Port Scan | |
| Anonymous |
IP & Port Scan.
|
SSH Port Scan Brute-Force | |
| Anonymous |
Unauthorized access (23/tcp/telnet) Targeted IoT device:Unknown (Probability:High)
|
Port Scan IoT Targeted | |
| 🇺🇸 Andreas76 |
Port scan: connection attempt to an unused trap port. Reported by bantower.
|
Port Scan | |
| 🇳🇱 ByeByte API |
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:58425 dst:23
|
Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-10-27 13:43:59 | LAST=2026-10-27 13:44:00. Last seen 2026-10-27 13:44:00.
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-27 09:55:22 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇷 Entalpi.net |
Tried to hit sensible closed port commonly used in attacks
|
Port Scan Hacking | |
| 🇨🇳 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port - njng
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown