JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.117.195.4

124.117.195.4 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 65%: ?

65%

ISP	CHINANET Xinjiang province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Urumqi, Xinjiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.117.195.4

Whois 124.117.195.4

IP Abuse Reports for 124.117.195.4:

This IP address has been reported a total of 28 times from 16 distinct sources. 124.117.195.4 was first reported on April 26th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Axel	2026-06-28 12:50:12 (1 day ago)	Blocked by UFW on LAXHH [8443/tcp] \| SPT: 39853 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8443/tcp] \| SPT: 39853 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇸 Scan	2026-06-27 03:03:40 (2 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 xmission.com	2026-06-27 01:39:06 (2 days ago)	Blocked by UFW (TCP on 9000) Source port: 57535 TTL: 236 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9000) Source port: 57535 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 124.117.195.4) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 dispaisyenterprises	2026-06-24 22:22:52 (4 days ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (16 bytes of payload); 2271 [1] TCP Reported by Dis ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (16 bytes of payload); 2271 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 MPL	2026-06-23 00:10:27 (6 days ago)	tcp/12392 (2 or more attempts)	Port Scan
🇧🇬 MazenHost	2026-06-22 10:30:04 (1 week ago)	1782124204 - 06/22/2026 13:30:04 Host: 124.117.195.4/124.117.195.4 Port: 119 TCP Blocked ...	Port Scan
🇬🇧 PeravixGroup	2026-06-22 03:01:58 (1 week ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 cwytech	2026-06-21 16:06:09 (1 week ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
🇳🇱 BIV	2026-06-20 01:12:03 (1 week ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 8088. Automated tiered ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 8088. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Bad Web Bot
🇺🇸 Axel	2026-06-14 22:25:57 (2 weeks ago)	Blocked by UFW on LAXHH [12000/tcp] \| SPT: 43141 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [12000/tcp] \| SPT: 43141 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-12 15:49:27 (2 weeks ago)	Blocked by UFW on LAXHH [50000/tcp] \| SPT: 12992 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [50000/tcp] \| SPT: 12992 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-09 21:13:53 (2 weeks ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-08 23:31:09 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
Anonymous	2026-06-07 16:28:33 (3 weeks ago)	124.117.195.4 - - [07/Jun/2026:18:28:22 +0200] "GET /theme/Bob-Theme-Argon/favicon.ico HTTP/1.1" 404 ... show more 124.117.195.4 - - [07/Jun/2026:18:28:22 +0200] "GET /theme/Bob-Theme-Argon/favicon.ico HTTP/1.1" 404 3138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" ... show less	Web App Attack
🇭🇰 www.winos.me	2026-06-06 09:42:07 (3 weeks ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 181.114.66.105

🇺🇸 23.94.23.226

🇨🇴 181.55.103.14

🇺🇸 167.99.148.102

🇹🇼 111.70.32.53

🇸🇬 104.28.159.62

🇳🇱 93.123.109.128

🇦🇲 87.241.191.116

🇺🇸 66.132.195.35

🇺🇸 50.78.25.138

🇧🇷 45.164.251.106

🇷🇺 31.130.148.221

🇻🇪 206.62.160.212

🇨🇳 180.106.151.55

🇺🇸 172.253.91.144

🇺🇸 172.237.156.206

🇨🇳 116.171.27.248

🇿🇦 102.223.58.58

🇳🇱 77.91.71.10

🇺🇸 74.115.172.118