JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.117.194.154

124.117.194.154 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 62%: ?

62%

ISP	CHINANET Xinjiang province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Urumqi, Xinjiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.117.194.154

Whois 124.117.194.154

IP Abuse Reports for 124.117.194.154:

This IP address has been reported a total of 35 times from 17 distinct sources. 124.117.194.154 was first reported on May 30th 2022, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Axel	2026-06-30 14:43:10 (17 hours ago)	Blocked by UFW on LAXHH [55555/tcp] \| SPT: 25814 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [55555/tcp] \| SPT: 25814 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-30 04:33:51 (1 day ago)	Honeypot hit: Large payload (1457 bytes); 12182 [1] TCP Reported by: https://github.com/sefinek/T-Po ... show more Honeypot hit: Large payload (1457 bytes); 12182 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 BIV	2026-06-29 00:21:01 (2 days ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 11210. Automated t ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 11210. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇷🇸 Scan	2026-06-24 00:53:47 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Scan	2026-06-21 02:07:11 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇵🇱 sefinek.net	2026-06-20 07:08:38 (1 week ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 10015 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (16 bytes of payload); 10015 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 Axel	2026-06-15 12:05:12 (2 weeks ago)	Blocked by UFW on LAXHH [2332/tcp] \| SPT: 63404 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [2332/tcp] \| SPT: 63404 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 Peter-Johann Sarbach	2026-06-15 02:40:47 (2 weeks ago)	Jun 14 19:56:41 pop3-login: Info: Disconnected: Connection closed: read(size=598) failed: Connection ... show more Jun 14 19:56:41 pop3-login: Info: Disconnected: Connection closed: read(size=598) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=124.117.194.154, lip=x.x.x.x, TLS handshaking: read(size=598) failed: Connection reset by peer show less	Hacking
🇺🇸 xmission.com	2026-06-13 19:01:58 (2 weeks ago)	Blocked by UFW (TCP on 16101) Source port: 18466 TTL: 238 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 16101) Source port: 18466 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 124.117.194.154) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 drewf.ink	2026-06-13 03:09:04 (2 weeks ago)	[03:09] Port scanning. Port(s) scanned: TCP/9092	Port Scan
🇯🇵 jay hung	2026-06-13 03:07:34 (2 weeks ago)	2026-06-13T03:07:33.154303+00:00 quarktech kernel: [1154896.300603] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-06-13T03:07:33.154303+00:00 quarktech kernel: [1154896.300603] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=124.117.194.154 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x00 TTL=229 ID=31373 PROTO=TCP SPT=41198 DPT=5022 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-11 09:58:29 (2 weeks ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-06-10 20:58:44 (2 weeks ago)	unsolicited connect TCP dport 9004 (sport 28686)	Hacking
🇬🇧 PeravixGroup	2026-06-06 22:54:21 (3 weeks ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-05 01:43:26 (3 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 218.161.40.181

🇺🇸 216.180.246.231

🇹🇼 198.235.24.95

🇵🇱 194.180.48.39

🇨🇴 190.254.19.130

🇹🇼 182.235.148.10

🇨🇮 154.0.30.137

🇫🇷 91.231.89.77

🇷🇴 80.94.95.211

🇺🇸 71.6.146.185

🇺🇸 66.132.186.0

🇺🇸 2600:9000:2050:c200:1d:d7f6:39d6:4401

🇺🇸 216.25.89.154

🇧🇷 200.141.47.190

🇺🇸 162.216.150.40

🇺🇸 162.216.149.57

🇩🇪 69.5.169.51

🇺🇸 65.49.20.66

🇧🇬 5.188.206.34

🇺🇸 2600:9000:2050:7e00:1d:d7f6:39d6:4401