JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.117.194.28

124.117.194.28 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 60%: ?

60%

ISP	CHINANET Xinjiang province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Urumqi, Xinjiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.117.194.28

Whois 124.117.194.28

IP Abuse Reports for 124.117.194.28:

This IP address has been reported a total of 45 times from 21 distinct sources. 124.117.194.28 was first reported on May 28th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LSPCCU	2026-06-30 22:22:29 (2 days ago)	TSEC Honeypot Network report. Threat score: 68/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 68/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH, IoT Targeted. Honeypot: ssh-telnet, cowrie. Context: 124. show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH IoT Targeted
🇺🇸 Axel	2026-06-28 18:59:14 (4 days ago)	Blocked by UFW on LAXHH [222/tcp] \| SPT: 15112 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on LAXHH [222/tcp] \| SPT: 15112 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 sefinek.net	2026-06-26 16:15:37 (1 week ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 3003 [1] TCP Reported by: https://github.c ... show more Honeypot hit: Unauthorized traffic (16 bytes of payload); 3003 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇮🇩 David Koswari	2026-06-24 05:48:00 (1 week ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 xmission.com	2026-06-24 03:54:28 (1 week ago)	Blocked by UFW (TCP on 8378) Source port: 27553 TTL: 238 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8378) Source port: 27553 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 124.117.194.28) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-21 22:42:44 (1 week ago)	tcp/543 (2 or more attempts)	Port Scan
🇧🇷 diego	2026-06-21 15:54:14 (1 week ago)	[arem1] 2026-06-21 15:35:49, Client: 124.117.194.28, Protocol: 6, Unauthorized activity to HTTP: GET ... show more [arem1] 2026-06-21 15:35:49, Client: 124.117.194.28, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇺🇸 Axel	2026-06-21 07:46:14 (1 week ago)	Blocked by UFW on LAXHH [8882/tcp] \| SPT: 38016 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8882/tcp] \| SPT: 38016 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 jay hung	2026-06-18 09:42:57 (2 weeks ago)	2026-06-18T09:42:56.700927+00:00 quarktech kernel: [420429.425991] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-06-18T09:42:56.700927+00:00 quarktech kernel: [420429.425991] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=124.117.194.28 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x40 TTL=224 ID=13823 PROTO=TCP SPT=62571 DPT=2078 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 lechat	2026-06-16 06:10:58 (2 weeks ago)	2026-06-16T06:10:58.210561+0000 inbound port scan detected by Suricata. src=124.117.194.28:33147 dst ... show more 2026-06-16T06:10:58.210561+0000 inbound port scan detected by Suricata. src=124.117.194.28:33147 dst=51.255.207.147:3306 proto=TCP. signature="ET SCAN Suspicious inbound to mySQL port 3306" category="Potentially Bad Traffic" sid=2010937 reason=scan_signature. show less	Port Scan
🇺🇸 Axel	2026-06-13 20:39:30 (2 weeks ago)	Blocked by UFW on LAXHH [2049/tcp] \| SPT: 17199 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [2049/tcp] \| SPT: 17199 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-11 03:33:54 (3 weeks ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇷🇸 Scan	2026-06-10 00:59:40 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 RAP	2026-06-09 20:51:38 (3 weeks ago)	2026-06-09 20:51:38 UTC Unauthorized activity to TCP port 8089. Web App	Port Scan Web App Attack
🇬🇧 PeravixGroup	2026-06-08 09:33:00 (3 weeks ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a0b:8bc0:2:807c::1

🇬🇧 2a06:4884:1000::13

🇺🇸 2604:a880:400:d1:0:4:a539:1

🇺🇸 216.73.161.144

🇺🇸 136.107.140.198

🇨🇳 121.196.198.190

🇨🇳 121.196.194.72

🇳🇱 45.153.34.186

🇮🇳 20.219.187.11

🇷🇺 212.3.155.8

🇺🇸 185.194.148.208

🇺🇸 173.91.46.151

🇦🇺 121.127.47.17

🇨🇳 120.244.40.30

🇵🇰 119.73.23.21

🇮🇳 111.92.48.252

🇺🇸 66.132.172.141

🇳🇱 45.148.10.151

🇭🇰 36.255.220.145

🇫🇮 31.134.10.219