JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.40.114.154

117.40.114.154 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 41%: ?

41%

ISP	CHINANET Jiangxi province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	online.jx.cn
Country	🇨🇳 China
City	Nanchang, Jiangxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.40.114.154

Whois 117.40.114.154

IP Abuse Reports for 117.40.114.154:

This IP address has been reported a total of 44 times from 16 distinct sources. 117.40.114.154 was first reported on December 19th 2020, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-22 08:38:51 (18 hours ago)	Blocked by UFW (TCP on 8010) Source port: 11186 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8010) Source port: 11186 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 117.40.114.154) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-21 19:18:08 (1 day ago)	tcp/8089 (2 or more attempts)	Port Scan
🇺🇸 itsnixk	2026-06-21 04:56:31 (1 day ago)	(mod_security) mod_security (id:920350) triggered by 117.40.114.154 (CN/China/-): 1 in the last 3600 ... show more (mod_security) mod_security (id:920350) triggered by 117.40.114.154 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 21 00:56:24.895943 2026] [security2:error] [pid 657986:tid 658442] [client 117.40.114.154:21019] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "ajdu-EK6ZM9S9a57paoWLAAAATw"] show less	Port Scan
🇺🇸 Axel	2026-06-21 04:15:05 (1 day ago)	Blocked by UFW on LAXHH [9051/tcp] \| SPT: 15679 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [9051/tcp] \| SPT: 15679 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-20 18:13:19 (2 days ago)	Blocked by UFW (TCP on 60002) Source port: 30684 TTL: 239 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 60002) Source port: 30684 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 117.40.114.154) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 femboy.cat	2026-06-18 03:55:13 (4 days ago)	Port scan to tcp/10020 from 117.40.114.154	Brute-Force
🇺🇸 Axel	2026-06-15 23:08:52 (1 week ago)	Blocked by UFW on LAXHH [7065/tcp] \| SPT: 46555 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [7065/tcp] \| SPT: 46555 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-04 06:25:52 (2 weeks ago)	Blocked by UFW (TCP on 28017) Source port: 25851 TTL: 239 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 28017) Source port: 25851 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 117.40.114.154) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-31 23:52:53 (3 weeks ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-04-03 05:12:06 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇹 HoneyPotEu-AT	2026-03-17 11:52:36 (3 months ago)	1773748356 - 03/17/2026 12:52:36 Host: 117.40.114.154/117.40.114.154 Port: 10011 TCP Blocked ...	Port Scan
Anonymous	2026-03-05 10:48:27 (3 months ago)	...	Bad Web Bot
Anonymous	2026-03-05 07:16:11 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-02-09 22:49:50 (4 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/117.40.114.154	SSH
🇫🇮 Nullcore07	2026-02-09 00:38:06 (4 months ago)	2026-02-09 00:38:06 UTC Unauthorized activity to TCP port 37443. TCP connection established to port ... show more 2026-02-09 00:38:06 UTC Unauthorized activity to TCP port 37443. TCP connection established to port 37443 (redirect=true). Banner sent; connection dropped. show less	Port Scan

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 121.29.84.153

🇳🇱 80.82.77.48

🇷🇺 46.39.254.221

🇺🇸 35.94.159.187

🇨🇳 183.36.126.68

🇭🇰 103.158.29.100

🇷🇺 85.95.166.40

🇷🇴 80.94.92.182

🇵🇰 72.255.19.66

🇺🇸 66.228.37.167

🇺🇸 18.119.209.50

🇮🇷 2.185.187.25

🇺🇸 184.105.139.102

🇯🇵 152.32.202.250

🇨🇦 148.113.190.153

🇨🇳 121.29.84.222

🇳🇵 118.91.162.146

🇧🇩 103.159.218.102

🇺🇸 64.62.197.170

🇺🇸 2a03:2880:7ff:1b::