AbuseIPDB » 139.170.141.195

139.170.141.195 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 78%: ?

78%

ISP	China Unicom Qinghai Province Network
Usage Type	Unknown
Domain Name	chinaunicom.com
Country	China
City	Xining, Qinghai

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 139.170.141.195

Whois 139.170.141.195

IP Abuse Reports for 139.170.141.195:

This IP address has been reported a total of 43 times from 20 distinct sources. 139.170.141.195 was first reported on July 27th 2024, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Admins@FBN	2024-09-07 08:49:14 (22 hours ago)	FW-PortScan: Traffic Blocked srcport=28280 dstport=23	Port Scan
Hirte	2024-09-06 07:35:37 (1 day ago)	C2-W: TCP-Scanner. Port: 23	Port Scan
cybsecaoccol	2024-09-04 13:04:01 (3 days ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
rtbh.com.tr	2024-09-02 20:55:03 (5 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Countryman	2024-09-02 14:23:09 (5 days ago)	repeated unauthorized connection attempts, host sweep, port 23	Hacking Brute-Force
shaunc	2024-09-02 13:59:20 (5 days ago)	Sep 2 08:57:23 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC= ... show moreSep 2 08:57:23 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=139.170.141.195 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=22684 PROTO=TCP SPT=57852 DPT=23 WINDOW=35225 RES=0x00 SYN URGP=0 Sep 2 08:58:37 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=139.170.141.195 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=22684 PROTO=TCP SPT=57852 DPT=23 WINDOW=35225 RES=0x00 SYN URGP=0 Sep 2 08:59:17 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=139.170.141.195 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=22684 PROTO=TCP SPT=57852 DPT=23 WINDOW=35225 RES=0x00 SYN URGP=0 show less	Port Scan
RAP	2024-09-02 06:07:08 (6 days ago)	2024-09-02 06:07:08 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2024-08-31 09:03:29 (1 week ago)	IP & Port Scan.	Port Scan Brute-Force SSH
security.rdmc.fr	2024-08-30 03:21:51 (1 week ago)	Port Scan Attack proto:TCP src:18979 dst:23	Port Scan
ThreatBook.io	2024-08-28 22:21:52 (1 week ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/139.170.141.195	SSH
MPL	2024-08-28 14:55:34 (1 week ago)	tcp/23 (11 or more attempts)	Port Scan
MPL	2024-08-28 14:55:34 (1 week ago)	tcp/23 (11 or more attempts)	Port Scan
MPL	2024-08-28 12:10:01 (1 week ago)	tcp/23 (8 or more attempts)	Port Scan
rtbh.com.tr	2024-08-23 08:55:23 (2 weeks ago)	list.rtbh.com.tr report: tcp/23, tcp/0	Brute-Force
rtbh.com.tr	2024-08-19 08:55:29 (2 weeks ago)	list.rtbh.com.tr report: tcp/23	Brute-Force