106.117.111.107

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
20% Elevated
41 reports
16 reporters · latest 1 day ago
ISP
CHINANET hebei province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Shijiazhuang, Hebei
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
41 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇹🇷 Turkey 1 🇺🇸 United States of America 1
Most common categories Port Scan 4 FTP Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: FTP Probe (10004/tcp) [non-standard port]
FTP Brute-Force Port Scan
Anonymous
denied traffic to a non-approved destination port. destination port 6001.
Port Scan
🇩🇪 KPS
PortscanT
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 2681) Source port: 39708 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 106.117.111.107) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
denied traffic to a non-approved destination port. destination port 9090.
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 2092 [1] TCP
Port Scan
Anonymous
denied traffic to a non-approved destination port. destination port 1957.
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=17370 dstport=2989
Port Scan
Anonymous
denied traffic to a non-approved destination port. destination port 1443.
Port Scan
🇺🇸 Axel
Blocked by UFW on LAXHH [5236/tcp] | SPT: 51289 | TTL: 236 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud
Brute-Force Hacking
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 12239 [1] TCP
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 1344) Source port: 30423 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 106.117.111.107) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇷 217.218.48.54
🇮🇳 182.77.59.222
🇦🇷 181.191.143.239
🇺🇸 147.185.132.221
🇰🇷 112.186.102.33
🇬🇧 109.204.12.211
🇫🇷 91.196.152.204
🇳🇱 77.67.26.102
🇺🇸 57.154.208.109
🇺🇸 52.248.43.142
🇰🇿 195.82.9.146
🇺🇸 185.77.223.124
🇺🇸 52.248.42.71
🇳🇱 45.148.10.151
🇧🇪 35.210.110.209
🇧🇪 35.206.164.87
🇵🇰 206.135.180.197
🇳🇱 192.253.248.226
🇲🇾 183.171.242.93
🇧🇷 177.100.169.155
feedback