JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.140.107.124

117.140.107.124 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 5%: ?

ISP	China Mobile Communications Corporation
Usage Type	Mobile ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.140.107.124

Whois 117.140.107.124

IP Abuse Reports for 117.140.107.124:

This IP address has been reported a total of 7 times from 4 distinct sources. 117.140.107.124 was first reported on April 21st 2022, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-26 22:28:26 (22 hours ago)	(mod_security) mod_security (id:210831) triggered by 117.140.107.124 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 117.140.107.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 18:28:20.231922 2026] [security2:error] [pid 9159:tid 9159] [client 117.140.107.124:10311] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|edscontracting.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "edscontracting.com"] [uri "/403.html"] [unique_id "aj79BK_Rxe_fSsoRvBM2jwAAACY"], referer: http://edscontracting.com/403.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 21:00:57 (23 hours ago)	(mod_security) mod_security (id:210831) triggered by 117.140.107.124 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 117.140.107.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 17:00:50.787778 2026] [security2:error] [pid 31085:tid 31085] [client 117.140.107.124:10411] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.fancyspider.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.fancyspider.net"] [uri "/"] [unique_id "aj7ogmaMW6cK8ieu5WW68QAAAAA"], referer: http://www.fancyspider.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 23:56:34 (2 days ago)	(mod_security) mod_security (id:210831) triggered by 117.140.107.124 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 117.140.107.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 19:56:29.224478 2026] [security2:error] [pid 1155:tid 1249] [client 117.140.107.124:10567] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.kandooo.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.kandooo.com"] [uri "/"] [unique_id "ajxurVa-ZTxis9E9C_vk6gAAAQs"], referer: http://www.kandooo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 services.org.pl	2025-05-27 04:11:12 (1 year ago)	open() "/var/www/html/api/u/package/android/version/current" failed (2: No such file or directory), ... show more open() "/var/www/html/api/u/package/android/version/current" failed (2: No such file or directory), client: 117.140.107.124, server: api.services.org.pl, request: "GET /api/u/package/android/version/current?local=2.5.1&channel=0&id=a000efdd-ab59-1f8f-febf-f49fdbf7d9a4 HTTP/1.1", host: "46.102.157.176" show less	Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-05-01 01:34:20 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/117.140.107.124 2025-04-30 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/117.140.107.124 2025-04-30 23:58:54 /guard.html show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-28 01:19:32 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/117.140.107.124 2025-04-27 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/117.140.107.124 2025-04-27 01:02:57 /robots.txt show less	Web App Attack
🇿🇦 IrisFlower	2022-04-21 09:12:18 (4 years ago)	Unauthorized connection attempt detected from IP address 117.140.107.124 to port 443 [J]	Port Scan Hacking

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇯🇵 103.151.173.203

🇺🇸 70.63.67.162

🇺🇸 66.132.172.100

🇬🇧 5.226.140.117

🇬🇧 5.226.140.2

🇳🇱 195.178.110.217

🇫🇮 147.185.133.15

🇨🇳 116.179.37.160

🇸🇬 103.189.235.176

🇺🇸 52.255.111.55

🇳🇱 45.198.224.18

🇳🇱 45.148.10.141

🇺🇸 24.144.83.228

🇬🇧 5.226.140.10

🇯🇵 3.113.213.133

🇺🇸 194.187.179.16

🇫🇮 147.185.133.242

🇨🇳 120.48.29.51

🇵🇹 89.114.10.247