JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.31.217.23

117.31.217.23 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Fujian province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	23.217.31.117.broad.zz.fj.dynamic.163data.com.cn
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Zhangzhou, Fujian

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.31.217.23

Whois 117.31.217.23

IP Abuse Reports for 117.31.217.23:

This IP address has been reported a total of 79 times from 53 distinct sources. 117.31.217.23 was first reported on June 11th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 solution.it	2026-06-17 05:15:38 (2 hours ago)	Jun 17 07:15:24 vps789997 smtpd[4173321]: 63c3b3fe9044df27 smtp connected address=117.31.217.23 host ... show more Jun 17 07:15:24 vps789997 smtpd[4173321]: 63c3b3fe9044df27 smtp connected address=117.31.217.23 host=23.217.31.117.broad.zz.fj.dynamic.163data.com.cn Jun 17 07:15:37 vps789997 smtpd[4173321]: 63c3b3fe9044df27 smtp failed-command command="AUTH LOGIN (password)" result="535 Authentication failed" show less	Brute-Force
🇩🇪 kreativstrecke	2026-06-17 04:09:24 (3 hours ago)	2026-06-17T06:09:22.066475+02:00 srv02 postfix/smtps/smtpd[2233046]: warning: unknown[117.31.217.23] ... show more 2026-06-17T06:09:22.066475+02:00 srv02 postfix/smtps/smtpd[2233046]: warning: unknown[117.31.217.23]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-06-17T06:09:23.722796+02:00 srv02 postfix/smtps/smtpd[2233046]: lost connection after AUTH from unknown[117.31.217.23] 2026-06-17T06:09:23.722908+02:00 srv02 postfix/smtps/smtpd[2233046]: disconnect from unknown[117.31.217.23] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇩🇪 singertc	2026-06-17 00:54:46 (6 hours ago)	2026-06-17 02:54:46 login_server authenticator failed for ([142.54.231.33]) [117.31.217.23]: 535 Inc ... show more 2026-06-17 02:54:46 login_server authenticator failed for ([142.54.231.33]) [117.31.217.23]: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force Hacking
🇹🇼 tye	2026-06-17 00:20:28 (7 hours ago)	Wazuh Alert Evidence: Jun 17 00:20:26 pico-gw1 postfix/smtpd[1048500]: warning: hostname 23.217.31.1 ... show more Wazuh Alert Evidence: Jun 17 00:20:26 pico-gw1 postfix/smtpd[1048500]: warning: hostname 23.217.31.117.broad.zz.fj.dynamic.163data.com.cn does not resolve to address 117.31.217.23 show less	Hacking
🇹🇷 ferique	2026-06-16 20:04:14 (11 hours ago)	Real-time Intercept: SMTP attack. Reference: 2026-06-16 23:04:08.1144 Login failure: 117.31.217.23 ... show more Real-time Intercept: SMTP attack. Reference: 2026-06-16 23:04:08.1144 Login failure: 117.31.217.23 SMTP show less	Brute-Force Email Spam
🇩🇪 FeG Deutschland	2026-06-16 17:06:03 (14 hours ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇫🇷 basing	2026-06-16 13:28:42 (18 hours ago)	2026-06-16 14:28:42 pzb SASL PLAIN auth failed: rhost=117.31.217.23...	Brute-Force
🇩🇪 Paul Smith	2026-06-16 12:51:29 (18 hours ago)	Email Auth Brute force attack 4/4 in last day	Brute-Force
🇩🇪 singertc	2026-06-16 12:29:49 (19 hours ago)	2026-06-16 10:43:47 login_server authenticator failed for (116.8.234.85.chtts.ru) [117.31.217.23]: 5 ... show more 2026-06-16 10:43:47 login_server authenticator failed for (116.8.234.85.chtts.ru) [117.31.217.23]: 535 Incorrect authentication data ([email protected]) 2026-06-16 14:29:48 login_server authenticator failed for ([119.207.83.89]) [117.31.217.23]: 535 Incorrect authentication data ... show less	Brute-Force Hacking
Anonymous	2026-06-16 11:01:02 (20 hours ago)	...	Brute-Force
🇺🇸 Brian Minton	2026-06-16 06:25:27 (1 day ago)	2026-06-12 22:12:20 login_saslauthd_server authenticator failed for ([74.196.34.137]) [117.31.217.23 ... show more 2026-06-12 22:12:20 login_saslauthd_server authenticator failed for ([74.196.34.137]) [117.31.217.23]: 535 Incorrect authentication data (set_id=mail) 2026-06-14 03:44:35 login_saslauthd_server authenticator failed for ([41.214.10.178]) [117.31.217.23]: 535 Incorrect authentication data (set_id=mailer-daemon) 2026-06-16 01:25:27 login_saslauthd_server authenticator failed for (nsg-corporate-110.116.187.122.airtel.in) [117.31.217.23]: 535 Incorrect authentication data (set_id=sys) ... show less	Brute-Force
🇭🇺 dd3589	2026-06-16 04:20:01 (1 day ago)	2026-06-16T06:19:34+02:00 <masked> exim[157947]: fixed_login authenticator failed for ([218.25.233.2 ... show more 2026-06-16T06:19:34+02:00 <masked> exim[157947]: fixed_login authenticator failed for ([218.25.233.2]) [117.31.217.23]: 535 Incorrect authentication data ([email protected]) show less	Brute-Force
🇹🇷 ferique	2026-06-16 04:06:24 (1 day ago)	Real-time Intercept: SMTP attack. Reference: 2026-06-16 07:06:18.5332 Login failure: 117.31.217.23 ... show more Real-time Intercept: SMTP attack. Reference: 2026-06-16 07:06:18.5332 Login failure: 117.31.217.23 SMTP show less	Brute-Force Email Spam
🇩🇪 kreativstrecke	2026-06-16 01:34:13 (1 day ago)	2026-06-16T03:34:12.049567+02:00 srv02 postfix/smtps/smtpd[1294219]: warning: unknown[117.31.217.23] ... show more 2026-06-16T03:34:12.049567+02:00 srv02 postfix/smtps/smtpd[1294219]: warning: unknown[117.31.217.23]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=wilfried.jacobs 2026-06-16T03:34:12.779490+02:00 srv02 postfix/smtps/smtpd[1294219]: lost connection after AUTH from unknown[117.31.217.23] 2026-06-16T03:34:12.780493+02:00 srv02 postfix/smtps/smtpd[1294219]: disconnect from unknown[117.31.217.23] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇬🇧 andypiper	2026-06-16 01:02:06 (1 day ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.199.175.157

🇰🇷 222.239.251.12

🇭🇰 221.124.250.119

🇧🇪 198.235.24.222

🇳🇱 185.242.226.95

🇳🇱 45.148.10.240

🇺🇸 18.222.214.61

🇮🇳 2001:4490:4429:ef94:cf:eafb:8e77:47d1

🇬🇧 195.140.214.20

🇩🇪 156.236.31.85

🇫🇮 147.185.133.219

🇹🇭 147.50.231.135

🇮🇳 122.186.202.54

🇭🇰 121.202.138.181

🇮🇷 91.251.11.36

🇮🇳 49.43.133.123

🇳🇱 45.148.10.151

🇫🇷 37.187.104.215

🇬🇧 35.203.210.169

🇺🇸 20.163.2.35