JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.117.111.0

106.117.111.0 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 27%: ?

27%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.117.111.0

Whois 106.117.111.0

IP Abuse Reports for 106.117.111.0:

This IP address has been reported a total of 20 times from 14 distinct sources. 106.117.111.0 was first reported on September 23rd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-22 02:43:52 (1 day ago)	Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MED ... show more Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇺🇸 Axel	2026-06-21 09:21:25 (1 day ago)	Blocked by UFW on LAXHH [4200/tcp] \| SPT: 34264 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [4200/tcp] \| SPT: 34264 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-15 12:17:39 (1 week ago)	Blocked by UFW on LAXHH [7047/tcp] \| SPT: 25172 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [7047/tcp] \| SPT: 25172 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-15 01:20:23 (1 week ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 Axel	2026-06-14 07:23:54 (1 week ago)	Blocked by UFW on LAXHH [12165/tcp] \| SPT: 23681 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [12165/tcp] \| SPT: 23681 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-13 21:34:35 (1 week ago)	Hit honeypot r.	Port Scan Hacking Exploited Host
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-21 09:36:18 (1 month ago)	Honeypot hit: HTTP/1.1 request on 9877 GET / Accept: /; 9877 [1] TCP	Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-20 20:15:27 (1 month ago)	Honeypot hit: Empty payload (likely service probe); 7625 [1] TCP	Port Scan
🇬🇧 pinguin	2026-04-18 11:49:35 (2 months ago)	Triggered Cloudflare WAF (linkMaze) from CN. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from CN. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 drewf.ink	2026-04-15 13:55:07 (2 months ago)	[13:55] Port scanning. Port(s) scanned: TCP/9092	Port Scan
🇷🇸 Scan	2026-03-04 00:44:11 (3 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 dispaisyenterprises	2026-02-22 02:20:16 (4 months ago)	Honeypot hit: HTTP/1.1 request on 8540 GET / Accept: /; 8540 [1] TCP Reported by: https://github. ... show more Honeypot hit: HTTP/1.1 request on 8540 GET / Accept: /; 8540 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
Anonymous	2026-01-20 23:33:05 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇹🇼 090410-1830	2025-12-31 05:12:34 (5 months ago)	Honeypot hit: Unauthorized traffic (243 bytes of payload); 14147 [1] TCP	Port Scan
🇩🇪 Skyrider	2025-12-31 04:26:44 (5 months ago)	106.117.111.0 - - [31/Dec/2025:05:26:36 +0100] "GET /images/log1.png HTTP/2.0" 404 175 "-" "Mozilla/ ... show more 106.117.111.0 - - [31/Dec/2025:05:26:36 +0100] "GET /images/log1.png HTTP/2.0" 404 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 106.117.111.0 - - [31/Dec/2025:05:26:38 +0100] "GET /details/images/favicon.ico HTTP/2.0" 404 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 106.117.111.0 - - [31/Dec/2025:05:26:40 +0100] "GET /images/favicon.png HTTP/2.0" 404 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 106.117.111.0 - - [31/Dec/2025:05:26:42 +0100] "GET /txpro/img/html_icon.ico HTTP/2.0" 404 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 106.117.111.0 - - [31/Dec/2025:05:26:43 +0100] "GET /assets/fire_admin/images/logo.png HTTP/2.0" 404 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.210.73.33

🇮🇶 185.166.25.150

🇺🇸 74.50.87.39

🇺🇸 54.219.85.81

🇰🇷 222.120.176.6

🇧🇪 198.235.24.232

🇬🇧 185.216.145.186

🇬🇧 167.99.80.152

🇰🇷 118.37.214.187

🇺🇸 108.181.2.217

🇳🇱 91.92.40.10

🇨🇦 85.217.149.8

🇮🇳 223.181.30.179

🇨🇳 220.250.52.111

🇧🇷 172.217.35.22

🇳🇵 157.10.100.12

🇫🇷 72.61.97.129

🇺🇸 52.180.146.167

🇸🇬 45.78.230.231

🇬🇧 35.203.210.11