JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 114.97.191.249

114.97.191.249 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 34%: ?

34%

ISP	CHINANET Anhui PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Hefei, Anhui

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 114.97.191.249

Whois 114.97.191.249

IP Abuse Reports for 114.97.191.249:

This IP address has been reported a total of 67 times from 26 distinct sources. 114.97.191.249 was first reported on December 5th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-02 18:00:21 (1 week ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-02 10:14:58 (1 week ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-29 20:28:38 (2 weeks ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: CRITICAL. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-27 07:36:25 (2 weeks ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇫🇷 Petre 21_ip	2026-05-20 09:17:42 (3 weeks ago)	2026-05-20T11:17:41.891820+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-05-20T11:17:41.891820+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=114.97.191.249 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=32288 PROTO=TCP SPT=20006 DPT=4002 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇺 trentwiles.com	2026-05-20 05:25:32 (3 weeks ago)	Unauthorized connection attempt detected from IP address 114.97.191.249 to port 30011 [SYD]	Port Scan
🇺🇸 xmission.com	2026-05-19 10:45:27 (3 weeks ago)	Blocked by UFW (TCP on 990) Source port: 28847 TTL: 237 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 990) Source port: 28847 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 114.97.191.249) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-05-18 05:04:46 (3 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇵🇱 sefinek.net	2026-05-11 11:44:32 (1 month ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 5009 [1] TCP Reported by: https://github.c ... show more Honeypot hit: Unauthorized traffic (16 bytes of payload); 5009 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 xmission.com	2026-05-08 10:27:22 (1 month ago)	Blocked by UFW (TCP on 2376) Source port: 51223 TTL: 239 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 2376) Source port: 51223 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 114.97.191.249) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-07 20:47:57 (1 month ago)	Blocked by UFW (TCP on 2960) Source port: 51724 TTL: 239 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 2960) Source port: 51724 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 114.97.191.249) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 trentwiles.com	2026-05-05 22:27:29 (1 month ago)	Unauthorized connection attempt detected from IP address 114.97.191.249 to port 1801 [SYD]	Port Scan
🇺🇸 Cyber Crusader	2026-05-04 01:27:45 (1 month ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-05-02 06:07:09 (1 month ago)	tcp/1080	Port Scan
🇵🇱 sefinek.net	2026-04-30 01:40:36 (1 month ago)	Honeypot hit: HTTP/1.1 request on 1443 GET / Accept: /; 1443 [1] TCP Reported by: https://github. ... show more Honeypot hit: HTTP/1.1 request on 1443 GET / Accept: /; 1443 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.23.51.79

🇮🇳 182.76.86.130

🇵🇭 61.9.2.57

🇰🇷 59.24.133.197

🇳🇱 45.156.87.253

🇮🇳 20.235.157.149

🇨🇳 8.131.224.192

🇺🇸 2607:f8b0:4001:c22::12d

🇬🇧 213.166.84.52

🇫🇷 194.163.174.214

🇧🇷 177.132.185.141

🇷🇺 176.118.22.128

🇹🇭 152.32.245.27

🇮🇳 128.185.219.38

🇱🇹 81.30.98.158

🇳🇱 45.198.224.188

🇳🇱 45.148.10.151

🇳🇱 45.142.193.161

🇫🇮 34.88.42.1

🇦🇺 34.40.212.146