JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 114.97.191.248

114.97.191.248 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 32%: ?

32%

ISP	CHINANET Anhui PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Hefei, Anhui

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 114.97.191.248

Whois 114.97.191.248

IP Abuse Reports for 114.97.191.248:

This IP address has been reported a total of 53 times from 26 distinct sources. 114.97.191.248 was first reported on December 4th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 BIV	2026-05-30 15:28:35 (3 weeks ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 9003. Automated ti ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 9003. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇬🇧 PeravixGroup	2026-05-28 04:36:26 (3 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-28 00:04:13 (3 weeks ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇦🇺 PetePK	2026-05-27 23:59:02 (3 weeks ago)	Probed 1 time(s): TCP/7779	Port Scan
🇬🇧 PeravixGroup	2026-05-27 15:59:58 (3 weeks ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-25 02:39:42 (3 weeks ago)	Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. A ... show more Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud show less	DDoS Attack Hacking
🇺🇸 xmission.com	2026-05-22 19:09:21 (4 weeks ago)	Blocked by UFW (TCP on 16000) Source port: 35898 TTL: 237 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 16000) Source port: 35898 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 114.97.191.248) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-21 04:53:40 (1 month ago)	Blocked by UFW (TCP on 2121) Source port: 62969 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2121) Source port: 62969 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 114.97.191.248) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 trentwiles.com	2026-05-20 01:54:08 (1 month ago)	Unauthorized connection attempt detected from IP address 114.97.191.248 to port 2276 [SYD]	Port Scan
🇺🇸 MPL	2026-05-17 19:02:38 (1 month ago)	tcp/7032	Port Scan
🇺🇸 xmission.com	2026-05-16 09:14:35 (1 month ago)	Blocked by UFW (TCP on 5984) Source port: 12433 TTL: 239 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 5984) Source port: 12433 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 114.97.191.248) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 gbzret4d	2026-05-12 06:40:40 (1 month ago)	Honeypot [uk-production01]: Unauthorized traffic (243 bytes of payload); 8089 [1] TCP	Port Scan
🇨🇳 ThreatBook.io	2026-05-08 00:44:58 (1 month ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/114.97.191.248 2026 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/114.97.191.248 2026-05-07 04:49:03 //cn.bing.com:443 2026-05-07 04:49:04 http://www.soso.com/ 2026-05-07 04:49:05 http://dongtaiwang.com/ 2026-05-07 04:49:05 http://www.minghui.org/ 2026-05-07 04:49:03 http://www.rfa.org/english/ 2026-05-07 04:49:03 //www.voanews.com:443 2026-05-07 04:49:03 http://www.wujieliulan.com/ 2026-05-07 04:49:03 //www.so.com:443 2026-05-07 04:49:03 //www.baidu.com:443 2026-05-07 04:49:03 http://www.epochtimes.com/ show less	Web App Attack
🇩🇪 Soncraft	2026-05-07 14:02:13 (1 month ago)	Blocked by UFW on Jellyfin [2001/tcp] Source port: 13652 TTL: 237 Packet length: 44 TOS: 0x00 This ... show more Blocked by UFW on Jellyfin [2001/tcp] Source port: 13652 TTL: 237 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇾 StatsMe	2026-05-05 23:12:08 (1 month ago)	2026-05-05T23:27:25.289987+0300 ET SCAN NMAP -sS window 1024	Port Scan

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.199.164.246

🇰🇷 175.207.209.8

🇺🇸 143.198.239.107

🇶🇦 135.136.47.185

🇨🇳 106.13.120.65

🇺🇸 100.50.17.159

🇳🇱 91.92.40.5

🇺🇸 72.167.49.132

🇬🇧 35.203.211.216

🇻🇳 14.224.213.222

🇨🇳 223.243.24.178

🇧🇷 200.175.61.207

🇬🇧 185.247.137.84

🇺🇸 172.172.180.124

🇮🇳 135.235.197.113

🇶🇦 135.136.47.153

🇨🇳 117.81.212.152

🇮🇩 103.122.34.142

🇺🇸 52.22.64.232

🇬🇧 51.195.190.208