JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.170.73.123

139.170.73.123 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 67%: ?

67%

ISP	China Unicom Qinghai province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Xining, Qinghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.170.73.123

Whois 139.170.73.123

IP Abuse Reports for 139.170.73.123:

This IP address has been reported a total of 20 times from 13 distinct sources. 139.170.73.123 was first reported on June 3rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 centurion	2026-07-01 00:44:00 (1 day ago)	Blocked by UFW on ns03 [30006/tcp] Source port: 64555 TTL: 231 Packet length: 44 TOS: 0x00 This rep ... show more Blocked by UFW on ns03 [30006/tcp] Source port: 64555 TTL: 231 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-30 19:33:24 (1 day ago)	tcp/1443	Port Scan
🇬🇧 PeravixGroup	2026-06-30 04:23:57 (2 days ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇮 sonot	2026-06-26 02:32:48 (6 days ago)	Blocked by UFW on mail [99/tcp] \| SPT: 49552 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on mail [99/tcp] \| SPT: 49552 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 gbzret4d	2026-06-25 00:58:59 (1 week ago)	Honeypot [uk-production01]: Unauthorized traffic (16 bytes of payload); 20547 [1] TCP	Port Scan
🇩🇪 sandra361	2026-06-24 08:16:02 (1 week ago)	Port scan detected: 9 attempts across 1 ports (49668). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=139.17 ... show more Port scan detected: 9 attempts across 1 ports (49668). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=139.170.73.123 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=52237 DF PROTO=TCP SPT=64539 DPT=49668 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 MPL	2026-06-23 03:53:24 (1 week ago)	tcp/5000	Port Scan
🇵🇱 sefinek.net	2026-06-22 18:05:10 (1 week ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 19080 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (16 bytes of payload); 19080 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 sandra361	2026-06-21 11:03:44 (1 week ago)	Port scan detected: 7 attempts across 1 ports (9000). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=139.1 ... show more Port scan detected: 7 attempts across 1 ports (9000). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=139.170.73.123 LEN=60 TOS=0x00 PREC=0x00 TTL=36 ID=31290 DF PROTO=TCP SPT=58151 DPT=9000 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-06-18 20:18:33 (1 week ago)	Honeypot hit: HTTP/1.1 request on 8085 GET / Accept: /; 8085 [1] TCP Reported by: https://github. ... show more Honeypot hit: HTTP/1.1 request on 8085 GET / Accept: /; 8085 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇯🇵 jay hung	2026-06-16 12:02:27 (2 weeks ago)	2026-06-16T12:02:26.599335+00:00 quarktech kernel: [255998.757492] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-06-16T12:02:26.599335+00:00 quarktech kernel: [255998.757492] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=139.170.73.123 DST=172.237.20.248 LEN=41 TOS=0x00 PREC=0x00 TTL=232 ID=64010 PROTO=UDP SPT=19767 DPT=5050 LEN=21 ... show less	Port Scan
🇨🇭 Peter-Johann Sarbach	2026-06-15 02:40:04 (2 weeks ago)	Jun 14 19:56:35 pop3-login: Info: Disconnected: Connection closed: read(size=679) failed: Connection ... show more Jun 14 19:56:35 pop3-login: Info: Disconnected: Connection closed: read(size=679) failed: Connection reset by peer (no auth attempts in 1 secs): user=<>, rip=139.170.73.123, lip=x.x.x.x, TLS handshaking: read(size=679) failed: Connection reset by peer show less	Hacking
🇺🇸 xmission.com	2026-06-13 06:14:46 (2 weeks ago)	Blocked by UFW (TCP on 3389) Source port: 54580 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 3389) Source port: 54580 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 139.170.73.123) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-06-12 19:05:23 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 donarev419	2026-06-11 04:55:07 (3 weeks ago)	Connection to port 12167 with data transfer. Data preview: USER anonymous	Port Scan Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.167.37.113

🇺🇸 104.243.42.167

🇺🇸 104.243.35.45

🇳🇱 89.21.67.177

🇫🇷 62.210.142.165

🇧🇷 205.210.31.251

🇧🇷 205.210.31.161

🇺🇸 199.30.231.6

🇧🇪 198.235.24.224

🇰🇷 121.167.147.112

🇨🇳 27.20.120.93

🇨🇳 14.103.122.182

🇸🇬 2400:8901::f03c:93ff:fef8:5fbc

🇧🇷 186.225.144.106

🇻🇳 180.93.32.181

🇫🇷 178.33.138.134

🇺🇸 165.227.55.4

🇹🇷 95.3.76.162

🇷🇴 92.118.39.14

🇺🇸 72.167.48.122