AbuseIPDB » 106.124.93.238

106.124.93.238
Recent Activity This IP has received recent abuse reports, which causes the score to increase.
81 reports found in our database
46% Elevated
Abuse confidence score ?
ISP
CHINANET Guangdong province network
Usage Type
Fixed Line ISP
ASN
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Urumqi, Xinjiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 106.124.93.238:

This IP address has been reported a total of 81 times from 7 distinct sources. 106.124.93.238 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 32 reports; Spain with 23 reports; Singapore with 19 reports. The most common categories in these recent reports were: Hacking 74 times; Brute-Force 50 times; Port Scan 10 times.

Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 mist x
Honeypot Sensor: Unauthorized probe on port 5900
Port Scan
🇮🇪 Coolnagour
funnypot VNC honeypot, port 5900: connect VNC connection from 106.124.93.238:43780
Port Scan Hacking
🇪🇸 el-brujo
09/06/2026-16:56:53.122378 106.124.93.238 Protocol: 6 ET SCAN Potential VNC Scan 5900-5920
Port Scan
🇪🇸 el-brujo
09/06/2026-14:16:43.871975 106.124.93.238 Protocol: 6 ET SCAN Potential VNC Scan 5900-5920
Port Scan
🇺🇸 sargetun
Honeypot: VNC probe on port 5900 at 2026-09-06 11:40:11.318935. Automated report from VPS honeypot.
Port Scan
🇪🇸 el-brujo
09/06/2026-10:38:16.066611 106.124.93.238 Protocol: 6 SURICATA STREAM spurious retransmission
Hacking
🇪🇸 el-brujo
09/06/2026-09:50:37.589697 106.124.93.238 Protocol: 6 GPL INFO VNC server response
Hacking
🇪🇸 el-brujo
09/06/2026-07:43:04.503880 106.124.93.238 Protocol: 6 GPL INFO VNC server response
Hacking
🇸🇬 drewf.ink
[05:32] Attempted VNC authentication (DES challenge-response)
Hacking Brute-Force
🇸🇬 drewf.ink
[05:16] Attempted VNC authentication (DES challenge-response)
Hacking Brute-Force
🇸🇬 drewf.ink
[05:00] Attempted VNC authentication (DES challenge-response)
Hacking Brute-Force
🇸🇬 drewf.ink
[04:44] Attempted VNC authentication (DES challenge-response)
Hacking Brute-Force
🇸🇬 drewf.ink
[04:29] Attempted VNC authentication (DES challenge-response)
Hacking Brute-Force
🇸🇬 drewf.ink
[04:13] Attempted VNC authentication (DES challenge-response)
Hacking Brute-Force
🇺🇸 drewf.ink
[03:58] Attempted VNC authentication (DES challenge-response)
Hacking Brute-Force

Showing 1 to 15 of 81 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69
🇩🇪 176.9.105.121
🇸🇬 162.158.189.136
🇺🇸 138.197.213.121
🇻🇳 124.158.13.4
🇧🇬 109.160.32.66
🇳🇱 77.239.124.130
🇩🇪 69.5.169.38
🇸🇬 34.126.189.90
🇻🇳 27.75.134.18
🇨🇳 219.147.14.98
🇲🇽 177.226.110.99
🇺🇸 173.244.43.174
🇺🇸 172.208.48.177
🇺🇸 170.106.178.252
🇮🇳 103.173.18.131
🇷🇴 92.118.39.49
🇺🇸 66.132.186.249
🇺🇸 66.132.186.247
🇺🇸 20.127.197.149