JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.158.253.240

123.158.253.240 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 100%: ?

100%

ISP	China Unicom Zhejiang province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.158.253.240

Whois 123.158.253.240

IP Abuse Reports for 123.158.253.240:

This IP address has been reported a total of 62 times from 50 distinct sources. 123.158.253.240 was first reported on May 27th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 2MP	2026-06-04 18:13:15 (3 hours ago)	2026-06-04T18:13:07.261383+00:00 ubuntu sshd[631191]: Failed password for root from 123.158.253.240 ... show more 2026-06-04T18:13:07.261383+00:00 ubuntu sshd[631191]: Failed password for root from 123.158.253.240 port 48722 ssh2 2026-06-04T18:13:09.260614+00:00 ubuntu sshd[631198]: Failed password for root from 123.158.253.240 port 48736 ssh2 2026-06-04T18:13:11.283107+00:00 ubuntu sshd[631200]: Failed password for root from 123.158.253.240 port 48750 ssh2 2026-06-04T18:13:13.206029+00:00 ubuntu sshd[631203]: Failed password for root from 123.158.253.240 port 48764 ssh2 2026-06-04T18:13:15.006202+00:00 ubuntu sshd[631205]: Failed password for root from 123.158.253.240 port 48782 ssh2 ... show less	Brute-Force SSH
🇺🇸 Veslys	2026-06-04 11:59:04 (9 hours ago)	2026-06-04T17:28:59.710738+05:30 ittifakordusu sshd-session[2240166]: Failed password for root from ... show more 2026-06-04T17:28:59.710738+05:30 ittifakordusu sshd-session[2240166]: Failed password for root from 123.158.253.240 port 59460 ssh2 2026-06-04T17:29:01.629725+05:30 ittifakordusu sshd-session[2240194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.158.253.240 user=root 2026-06-04T17:29:03.684818+05:30 ittifakordusu sshd-session[2240194]: Failed password for root from 123.158.253.240 port 59466 ssh2 ... show less	Brute-Force SSH
🇳🇱 donarev419	2026-06-04 01:27:06 (20 hours ago)	Port scan detected on port 4022 (connection without data transfer)	Port Scan
🇩🇪 kexol	2026-06-03 13:22:58 (1 day ago)	22 port scanned	Port Scan
🇺🇸 rjdefrancisco	2026-06-03 07:08:15 (1 day ago)	Unwanted traffic detected by honeypot on June 02, 2026: port scans (1 port 22 scan), and brute force ... show more Unwanted traffic detected by honeypot on June 02, 2026: port scans (1 port 22 scan), and brute force and hacking attacks (1 over ssh). show less	Port Scan Brute-Force SSH
Anonymous	2026-06-03 06:13:10 (1 day ago)	SSH login attempts with user root	Brute-Force
🇩🇪 dnsguard.pub	2026-06-03 02:52:41 (1 day ago)	2026-06-03T04:52:30.479140+02:00 dnsguard-vps sshd[3946240]: Failed password for root from 123.158.2 ... show more 2026-06-03T04:52:30.479140+02:00 dnsguard-vps sshd[3946240]: Failed password for root from 123.158.253.240 port 45456 ssh2 2026-06-03T04:52:32.524726+02:00 dnsguard-vps sshd[3946290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.158.253.240 user=root 2026-06-03T04:52:34.957498+02:00 dnsguard-vps sshd[3946290]: Failed password for root from 123.158.253.240 port 45476 ssh2 2026-06-03T04:52:38.215306+02:00 dnsguard-vps sshd[3946410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.158.253.240 user=root 2026-06-03T04:52:40.471982+02:00 dnsguard-vps sshd[3946410]: Failed password for root from 123.158.253.240 port 45498 ssh2 ... show less	Brute-Force SSH
🇺🇸 donarev419	2026-06-03 02:33:14 (1 day ago)	Port scan detected on port 2222 (connection without data transfer)	Port Scan
🇬🇧 andypiper	2026-06-03 01:01:24 (1 day ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 LSPCCU	2026-06-03 00:14:05 (1 day ago)	TSEC Honeypot Network report. Threat score: 100/100. Categories: Port Scan, Hacking, Brute-Force, We ... show more TSEC Honeypot Network report. Threat score: 100/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 123. show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇫🇷 MisterXBest	2026-06-02 19:53:05 (2 days ago)	[BloumeGen Security] IP Access: 123.158.253.240. SSH brute-force login attempt. Target: Unknown. Pat ... show more [BloumeGen Security] IP Access: 123.158.253.240. SSH brute-force login attempt. Target: Unknown. Paths: Multiple probes. Hits: 5 show less	Brute-Force SSH
🇺🇸 vertali	2026-06-02 17:51:33 (2 days ago)	CSF/LFD blocked 123.158.253.240 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SS ... show more CSF/LFD blocked 123.158.253.240 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 123.158.253.240 (CN/China/-): 5 in the last 3600 secs. Evidence: Jun 2 12:49:50 paladin sshd[715649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.158.253.240 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-02 14:57:37 (2 days ago)	123.158.253.240 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Po ... show more 123.158.253.240 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 2 09:56:50 13465 sshd[16017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.241.88.244 user=root Jun 2 09:55:31 13465 sshd[15406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.241.88.244 user=root Jun 2 09:55:33 13465 sshd[15406]: Failed password for root from 150.241.88.244 port 35510 ssh2 Jun 2 09:57:30 13465 sshd[16444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.158.253.240 user=root Jun 2 09:48:39 13465 sshd[11875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.241.88.244 user=root Jun 2 09:48:41 13465 sshd[11875]: Failed password for root from 150.241.88.244 port 53204 ssh2 IP Addresses Blocked: 150.241.88.244 (FI/Finland/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-02 05:47:06 (2 days ago)	(sshd) Failed SSH login from 123.158.253.240 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direct ... show more (sshd) Failed SSH login from 123.158.253.240 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jun 2 00:46:04 17538 sshd[31698]: Did not receive identification string from 123.158.253.240 port 43848 Jun 2 00:46:51 17538 sshd[31699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.158.253.240 user=root Jun 2 00:46:53 17538 sshd[31699]: Failed password for root from 123.158.253.240 port 43856 ssh2 Jun 2 00:46:55 17538 sshd[31989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.158.253.240 user=root Jun 2 00:46:57 17538 sshd[31989]: Failed password for root from 123.158.253.240 port 44200 ssh2 show less	Brute-Force SSH
🇺🇸 donarev419	2026-06-02 05:16:31 (2 days ago)	Port scan detected on port 10001 (connection without data transfer)	Port Scan

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 150.5.141.198

🇺🇸 147.185.132.200

🇺🇸 107.173.41.67

🇷🇺 79.104.0.82

🇷🇴 2.57.121.112

🇷🇴 2.57.121.25

🇺🇸 167.172.133.85

🇮🇩 163.7.9.84

🇺🇸 162.216.150.55

🇭🇰 103.158.29.100

🇻🇳 14.225.46.21

🇺🇸 172.217.107.155

🇺🇸 172.202.118.45

🇺🇸 147.185.132.212

🇳🇱 129.121.88.64

🇨🇳 106.40.121.148

🇮🇹 93.92.77.217

🇺🇸 64.95.9.247

🇸🇬 47.128.122.12

🇨🇳 211.149.131.113