JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 114.97.191.135

114.97.191.135 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 17%: ?

17%

ISP	CHINANET Anhui PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Hefei, Anhui

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 114.97.191.135

Whois 114.97.191.135

IP Abuse Reports for 114.97.191.135:

This IP address has been reported a total of 59 times from 32 distinct sources. 114.97.191.135 was first reported on December 4th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-28 10:00:36 (3 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-27 11:12:48 (4 weeks ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-08 01:40:22 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/114.97.191.135 2 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/114.97.191.135 2026-05-07 07:48:48 http://www.wujieliulan.com/ show less	Web App Attack
🇺🇸 Cyber Crusader	2026-04-29 15:32:39 (1 month ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-04-27 08:40:07 (1 month ago)	Blocked by UFW (TCP on 27964) Source port: 55035 TTL: 237 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 27964) Source port: 55035 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 114.97.191.135) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇪 donarev419	2026-04-25 06:43:23 (1 month ago)	Connection to port 6379 with data transfer. Data preview: USER anonymous	Port Scan Hacking
🇬🇧 PeravixGroup	2026-04-22 12:15:28 (2 months ago)	HoneyPot hit - Aaran.cloud - Connection probe / port scan	SQL Injection Brute-Force
🇺🇸 MPL	2026-04-14 09:37:05 (2 months ago)	tcp/8893 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-04-10 20:38:15 (2 months ago)	tcp/90 (2 or more attempts)	Port Scan
🇺🇸 LSPCCU	2026-04-09 17:17:34 (2 months ago)	TSEC Honeypot Network report. Threat score: 75/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 75/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 114. show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇳🇵 radheykrishna.com.np	2026-04-08 23:08:37 (2 months ago)	Apr 9 04:53:36 kernel: [849473.985262] [UFW BLOCK] IN=ens160 OUT= SRC=114.97.191.135 LEN=258 TOS=0x ... show more Apr 9 04:53:36 kernel: [849473.985262] [UFW BLOCK] IN=ens160 OUT= SRC=114.97.191.135 LEN=258 TOS=0x00 PREC=0x00 TTL=235 ID=28879 PROTO=UDP SPT=7199 DPT=5060 LEN=238 ... show less	Port Scan
🇩🇪 Skyrider	2026-04-07 03:50:30 (2 months ago)	114.97.191.135 - - [07/Apr/2026:05:50:22 +0200] "GET /aaabbbccc HTTP/2.0" 404 11237 "-" "Mozilla/5.0 ... show more 114.97.191.135 - - [07/Apr/2026:05:50:22 +0200] "GET /aaabbbccc HTTP/2.0" 404 11237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 114.97.191.135 - - [07/Apr/2026:05:50:26 +0200] "GET /fb HTTP/2.0" 404 11233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 114.97.191.135 - - [07/Apr/2026:05:50:29 +0200] "GET /fwc HTTP/2.0" 404 11236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 114.97.191.135 - - [07/Apr/2026:05:50:29 +0200] "GET /fzh HTTP/2.0" 404 11236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 114.97.191.135 - - [07/Apr/2026:05:50:30 +0200] "GET /res/favicon.ico HTTP/2.0" 404 175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" show less	Bad Web Bot Web App Attack
🇮🇹 Fusty	2026-04-04 07:21:10 (2 months ago)	Unauthorized attempt on (TCP on port 7687). Source port: 54150 TTL: 232 Packet length: 44 Timestamp: ... show more Unauthorized attempt on (TCP on port 7687). Source port: 54150 TTL: 232 Packet length: 44 Timestamp: 2026-04-04 09:21:10 show less	Port Scan
🇸🇪 KIDOS	2026-04-02 18:54:35 (2 months ago)	Apache monitor: ssrf_log_spoofing	Brute-Force SSH
🇺🇸 MPL	2026-03-17 21:06:54 (3 months ago)	tcp/9306	Port Scan

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.89

🇨🇴 190.60.48.187

🇷🇴 2.57.122.150

🇷🇺 2a09:bac1:61c0:3380::57:226

🇨🇱 179.57.170.71

🇩🇪 95.169.191.176

🇩🇪 69.5.169.59

🇰🇷 59.24.133.197

🇹🇭 203.150.107.244

🇺🇸 104.154.206.21

🇧🇬 79.124.40.138

🇫🇷 62.210.207.172

🇻🇳 58.186.20.101

🇳🇱 45.148.10.152

🇻🇳 45.118.146.219

🇩🇪 31.77.129.177

🇷🇴 2.57.122.173

🇨🇳 222.88.189.183

🇺🇸 216.73.160.50

🇮🇷 212.80.9.235