Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 223.113.203.138:
This IP address has been reported a total of
52
times from
18 distinct
sources.
223.113.203.138 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Korea (the Republic of)
with 2
reports;
Brazil
with 1
report;
Germany
with 1
report.
The most common categories in these recent reports were:
SSH
4
times;
Brute-Force
4
times;
IoT Targeted
2
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-08T00:24:30.480554+02:00 thelists sshd[537495]: Unable to negotiate with 223.113.203.138 por ...
show more2026-09-08T00:24:30.480554+02:00 thelists sshd[537495]: Unable to negotiate with 223.113.203.138 port 54177: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
2026-09-08T00:24:30.558282+02:00 thelists sshd[537497]: Unable to negotiate with 223.113.203.138 port 31588: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
2026-09-08T00:24:30.577341+02:00 thelists sshd[537503]: Unable to negotiate with 223.113.203.138 port 63994: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
2026-09-08T00:24:30.606802+02:00 thelists sshd[537498]: Unable to negotiate with 223.113.203.138 port 15452: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchang
...
show less
2026-09-07T12:41:50.680758-03:00 salada-de-fruta sshd[3166998]: Unable to negotiate with 223.113.203 ...
show more2026-09-07T12:41:50.680758-03:00 salada-de-fruta sshd[3166998]: Unable to negotiate with 223.113.203.138 port 13071: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
...
show less
SSH credential brute-force observed by honeypot.
Source IP: 223.113.203.138
Targeted device: NAS
Fir ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 223.113.203.138
Targeted device: NAS
First seen: 27 Jul 2026 00:14:31 UTC
Last seen: 27 Jul 2026 06:22:17 UTC
Attempts: 6398
Client: SSH-2.0-libssh2_1.4.3
Sample credentials: root:abc, root:Zou@123, root:Abc@zou, root:123@zou, root:zou@123456, root:xiong@abc, root:zou@abc, root:zou@123, root:zou123, root:zou
show less
SSH credential brute-force observed by honeypot.
Source IP: 223.113.203.138
Targeted device: NAS
Fir ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 223.113.203.138
Targeted device: NAS
First seen: 26 Jul 2026 23:46:40 UTC
Last seen: 26 Jul 2026 23:47:43 UTC
Attempts: 484
Client: SSH-2.0-libssh2_1.4.3
Sample credentials: root:Aa123456, root:Abc@root, root:ABCabc123, root:Ab123456, root:Ab.123456, root:A.!123456, root:wang123, root:654321abc, root:wang, root:Wang@123
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-01-10T07:49:13Z and 2026-01-1 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-01-10T07:49:13Z and 2026-01-10T07:49:15Z
show less
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.21 is noted in report tim ...
show moreAttempted brute force login to web vpn 2 time(s); last attempt for 2025.12.21 is noted in report timestamp
show less
223.113.203.138 (CN/China/-), 12 distributed imapd attacks on account [redacted]
Brute-Force
Anonymous
Attempted brute force login to web vpn 4 time(s); last attempt for 2025.11.02 is noted in report tim ...
show moreAttempted brute force login to web vpn 4 time(s); last attempt for 2025.11.02 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 4 time(s); last attempt for 2025.10.26 is noted in report tim ...
show moreAttempted brute force login to web vpn 4 time(s); last attempt for 2025.10.26 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.21 is noted in report tim ...
show moreAttempted brute force login to web vpn 1 time(s); last attempt for 2025.10.21 is noted in report timestamp
show less
