JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.231.253.130

203.231.253.130 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 100%: ?

100%

ISP	SEJONG NETWORKS
Usage Type	Fixed Line ISP
ASN	AS9848
Domain Name	sejongnetworks.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.231.253.130

Whois 203.231.253.130

IP Abuse Reports for 203.231.253.130:

This IP address has been reported a total of 20 times from 18 distinct sources. 203.231.253.130 was first reported on July 20th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-23 12:33:15 (1 day ago)	Detected by router-side syslog over 72h. 61 inbound firewall DROPs (61 TCP) across 61 distinct desti ... show more Detected by router-side syslog over 72h. 61 inbound firewall DROPs (61 TCP) across 61 distinct destination port(s). Top targets: TCP/5903=1, TCP/5904=1, TCP/5905=1. First seen 2026-07-21T08:16Z, last seen 2026-07-21T10:32Z. Categories: Port Scan. show less	Port Scan
🇳🇱 ByeByte API	2026-07-23 03:29:20 (1 day ago)	byebyte.space auth: TCP packet to port 5986 (high-risk service) at 2026-07-23T03:29:19Z. Source port ... show more byebyte.space auth: TCP packet to port 5986 (high-risk service) at 2026-07-23T03:29:19Z. Source port 61000. TCP flags: SYN. Packet: 44B, TTL 243, window 1025, IP id 56812. Single packet, dropped at firewall. p0f: OS Linux 2.2.x-3.x (barebone) (generic match), 12 hops, link Ethernet or modem. show less	Port Scan
🇧🇷 diego	2026-07-23 03:24:29 (1 day ago)	[rede-164-29] Port Scan detected from 203.231.253.130 (KR/South Korea/-). 11 hits in the last 265 ... show more [rede-164-29] Port Scan detected from 203.231.253.130 (KR/South Korea/-). 11 hits in the last 265 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jul 23 00:20:19 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=203.231.253.130 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=53809 PROTO=TCP SPT=61000 DPT=5923 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 23 00:20:42 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=203.231.253.130 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=49151 PROTO=TCP SPT=61000 DPT=5961 WINDOW=1025 RES=0x00 SYN URGP show less	Port Scan
🇳🇱 VMHeaven.io	2026-07-23 02:51:04 (2 days ago)	Blocked by UFW [5903/tcp] Source port: 61000 TTL: 243 Packet length: 44	Port Scan
🇳🇱 COMPLEX	2026-07-23 02:50:41 (2 days ago)	Unsolicited TCP traffic \| Action: DROP \| Port 5923	Brute-Force
🇫🇷 EDSL	2026-07-23 02:50:34 (2 days ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇺🇸 Antairus	2026-07-23 00:35:24 (2 days ago)	Port scan detected. Scanned ports: 5984, 5901, 5900. Detected by firewall.	Port Scan
🇺🇸 LotPhantom	2026-07-22 16:13:09 (2 days ago)	2026-07-22T16:12:29.473135+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-07-22T16:12:29.473135+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=203.231.253.130 DST=157.230.217.55 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=37000 PROTO=TCP SPT=61000 DPT=5935 WINDOW=1025 RES=0x00 SYN URGP=0 2026-07-22T16:13:09.370186+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=203.231.253.130 DST=157.230.217.55 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=23160 PROTO=TCP SPT=61000 DPT=5954 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
Anonymous	2026-07-22 12:21:31 (2 days ago)	Detected by router-side syslog over 72h. 61 inbound firewall DROPs (61 TCP) across 61 distinct desti ... show more Detected by router-side syslog over 72h. 61 inbound firewall DROPs (61 TCP) across 61 distinct destination port(s). Top targets: TCP/5903=1, TCP/5904=1, TCP/5905=1. First seen 2026-07-21T08:16Z, last seen 2026-07-21T10:32Z. Categories: Port Scan. show less	Port Scan
🇹🇭 Sawasdee	2026-07-22 10:48:07 (2 days ago)	Port Scan ...	Port Scan
🇨🇭 Elysium Security	2026-07-22 10:46:30 (2 days ago)	Mass port scanning on a whole network	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-22 10:46:07 (2 days ago)	Honeypot hit: Empty payload (likely service probe); 5977 [1], 5941 [1], 5940 [1], 5920 [1], 5939 [1] ... show more Honeypot hit: Empty payload (likely service probe); 5977 [1], 5941 [1], 5940 [1], 5920 [1], 5939 [1] TCP show less	Port Scan
🇨🇿 Countryman	2026-07-22 10:18:01 (2 days ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇨🇿 kronos	2026-07-22 09:32:45 (2 days ago)	IDS: FlowIntel scan-like source \| SID:9900001 \| session_sigs:1394 \| alerts5m:3295	Port Scan
🇺🇸 azminawwar	2026-07-22 09:06:05 (2 days ago)	[203.231.253.130] triggered by honeypot on port [5900], Timestamp [2026-07-22T09:06:05Z](no payload)	Port Scan Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.249.175.20

🇮🇩 202.51.214.99

🇹🇼 198.235.24.88

🇩🇪 194.88.98.105

🇩🇪 185.220.101.12

🇺🇸 172.71.254.140

🇧🇷 143.202.228.50

🇫🇷 91.231.89.112

🇺🇸 45.194.67.29

🇳🇱 45.156.128.77

🇷🇺 45.91.64.7

🇬🇧 35.203.211.178

🇵🇪 2800:200:ebc0:d1:3df1:cb61:68ad:4139

🇹🇼 198.235.24.119

🇺🇸 198.98.56.227

🇹🇭 182.52.243.246

🇩🇪 167.94.146.47

🇧🇳 119.160.163.217

🇨🇳 116.181.10.234

🇿🇦 102.66.149.162