AbuseIPDB » 123.131.17.131

123.131.17.131 was found in our database!

This IP was reported 2,958 times. Confidence of Abuse is 100%: ?

100%

ISP	China Unicom Shandong Province Network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	China
City	Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 123.131.17.131

Whois 123.131.17.131

IP Abuse Reports for 123.131.17.131:

This IP address has been reported a total of 2,958 times from 752 distinct sources. 123.131.17.131 was first reported on November 16th 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-07-11 00:04:55 (1 hour ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
urnilxfgbez	2025-07-10 22:45:00 (3 hours ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
rtbh.com.tr	2025-07-10 20:07:37 (5 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
zwh	2025-07-10 17:58:15 (8 hours ago)	SSH Brute-Force	Brute-Force SSH
mythicalkitten	2025-07-10 16:22:55 (9 hours ago)	Jul 10 16:22:46 mk-bgp sshd[3472305]: Invalid user user from 123.131.17.131 port 50003 Jul 10 ... show moreJul 10 16:22:46 mk-bgp sshd[3472305]: Invalid user user from 123.131.17.131 port 50003 Jul 10 16:22:48 mk-bgp sshd[3472321]: Invalid user user from 123.131.17.131 port 50004 Jul 10 16:22:51 mk-bgp sshd[3472353]: Invalid user user from 123.131.17.131 port 59176 Jul 10 16:22:53 mk-bgp sshd[3472376]: Invalid user user from 123.131.17.131 port 50005 Jul 10 16:22:55 mk-bgp sshd[3472396]: Invalid user user from 123.131.17.131 port 38048 ... show less	Hacking Brute-Force
sh97	2025-07-10 14:21:47 (11 hours ago)	US901-VM-NYC: SSH Brute Force from 123.131.17.131 at 2025-07-10 10:21:47 EDT	Brute-Force SSH
Jordan	2025-07-10 11:56:17 (14 hours ago)	2025-07-10T12:56:11.645907instance-20240913-2123 sshd[1458183]: Invalid user user from 123.131.17.13 ... show more2025-07-10T12:56:11.645907instance-20240913-2123 sshd[1458183]: Invalid user user from 123.131.17.131 port 50010 2025-07-10T12:56:12.872330instance-20240913-2123 sshd[1458185]: Invalid user user from 123.131.17.131 port 54582 2025-07-10T12:56:14.049217instance-20240913-2123 sshd[1458360]: Invalid user user from 123.131.17.131 port 55608 2025-07-10T12:56:15.180621instance-20240913-2123 sshd[1458362]: Invalid user user from 123.131.17.131 port 37956 2025-07-10T12:56:16.470152instance-20240913-2123 sshd[1458364]: Invalid user user from 123.131.17.131 port 53252 ... show less	Brute-Force SSH
Woodie	2025-07-10 11:43:32 (14 hours ago)	2025-07-10T07:43:14.770417-04:00 debian sshd[1636431]: Failed password for root from 123.131.17.131 ... show more2025-07-10T07:43:14.770417-04:00 debian sshd[1636431]: Failed password for root from 123.131.17.131 port 50002 ssh2 2025-07-10T07:43:22.401237-04:00 debian sshd[1636519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.131.17.131 user=root 2025-07-10T07:43:24.368249-04:00 debian sshd[1636519]: Failed password for root from 123.131.17.131 port 36042 ssh2 2025-07-10T07:43:29.201932-04:00 debian sshd[1636564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.131.17.131 user=root 2025-07-10T07:43:31.794568-04:00 debian sshd[1636564]: Failed password for root from 123.131.17.131 port 50003 ssh2 ... show less	Brute-Force SSH
trivox.sh	2025-07-10 04:43:56 (21 hours ago)	Jul 10 04:43:49 lg sshd[446582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show moreJul 10 04:43:49 lg sshd[446582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.131.17.131 user=root Jul 10 04:43:51 lg sshd[446582]: Failed password for root from 123.131.17.131 port 50002 ssh2 Jul 10 04:43:53 lg sshd[446582]: Connection closed by authenticating user root 123.131.17.131 port 50002 [preauth] Jul 10 04:43:55 lg sshd[446586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.131.17.131 user=root Jul 10 04:43:56 lg sshd[446586]: Failed password for root from 123.131.17.131 port 56602 ssh2 ... show less	Brute-Force SSH
Indexyz	2025-07-10 00:47:57 (1 day ago)	2025-07-10T08:47:50.885620+08:00 *hostname* sshd-session[81361]: pam_unix(sshd:auth): authentication ... show more2025-07-10T08:47:50.885620+08:00 *hostname* sshd-session[81361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.131.17.131 user=root 2025-07-10T08:47:52.778295+08:00 *hostname* sshd-session[81361]: Failed password for root from 123.131.17.131 port 35460 ssh2 2025-07-10T08:47:53.155845+08:00 *hostname* sshd-session[81370]: Connection from 123.131.17.131 port 59260 on 211.99.116.196 port 22 rdomain "" 2025-07-10T08:47:53.437571+08:00 *hostname* sshd-session[81370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.131.17.131 user=root 2025-07-10T08:47:55.769307+08:00 *hostname* sshd-session[81370]: Failed password for root from 123.131.17.131 port 59260 ssh2 show less	Brute-Force SSH
Anonymous	2025-07-10 00:03:54 (1 day ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
rtbh.com.tr	2025-07-09 20:07:36 (1 day ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-07-09 16:07:36 (1 day ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
Nazgul	2025-07-09 15:13:07 (1 day ago)	SSH brute force attempt (f4)	Brute-Force SSH
MPL	2025-07-09 12:30:12 (1 day ago)	tcp/22 (8 or more attempts)	Port Scan

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩