JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.31.104.38

124.31.104.38 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 39%: ?

39%

ISP	CHINANET Xizang(Tibet) province network
Usage Type	Mobile ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Chengguan Qu, Tibet

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.31.104.38

Whois 124.31.104.38

IP Abuse Reports for 124.31.104.38:

This IP address has been reported a total of 130 times from 31 distinct sources. 124.31.104.38 was first reported on June 4th 2022, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-10 08:33:51 (8 hours ago)	Blocked by UFW (TCP on 14443) Source port: 17302 TTL: 238 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 14443) Source port: 17302 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 124.31.104.38) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-10 01:10:54 (16 hours ago)	Blocked by UFW (TCP on 6379) Source port: 32097 TTL: 236 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 6379) Source port: 32097 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 124.31.104.38) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Kraften	2026-07-09 20:09:26 (21 hours ago)	Dovecot imap-login 2 ...	DDoS Attack Brute-Force
🇺🇸 chronos	2026-07-09 09:34:50 (1 day ago)	[AUTORAVALT][[09/07/2026 - 06:34:50 -03:00 UTC] Attack from [Chinanet Hostmaster] [124.31.104.38]-[R ... show more [AUTORAVALT][[09/07/2026 - 06:34:50 -03:00 UTC] Attack from [Chinanet Hostmaster] [124.31.104.38]-[RANGE:124.31.104.0 - 124.31.119.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-07-08 23:46:50 (1 day ago)	[AUTORAVALT][[08/07/2026 - 20:46:50 -03:00 UTC] Attack from [Chinanet Hostmaster] [124.31.104.38]-[R ... show more [AUTORAVALT][[08/07/2026 - 20:46:50 -03:00 UTC] Attack from [Chinanet Hostmaster] [124.31.104.38]-[RANGE:124.31.104.0 - 124.31.119.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-07-06 06:19:22 (4 days ago)	[AUTORAVALT][[06/07/2026 - 03:19:22 -03:00 UTC] Attack from [Chinanet Hostmaster] [124.31.104.38]-[R ... show more [AUTORAVALT][[06/07/2026 - 03:19:22 -03:00 UTC] Attack from [Chinanet Hostmaster] [124.31.104.38]-[RANGE:124.31.104.0 - 124.31.119.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-07-03 07:08:44 (1 week ago)	[AUTORAVALT][[03/07/2026 - 04:08:44 -03:00 UTC] Attack from [Chinanet Hostmaster] [124.31.104.38]-[R ... show more [AUTORAVALT][[03/07/2026 - 04:08:44 -03:00 UTC] Attack from [Chinanet Hostmaster] [124.31.104.38]-[RANGE:124.31.104.0 - 124.31.119.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
Anonymous	2026-07-01 08:33:13 (1 week ago)	Port scan on port 1521/TCP to unused IP	Port Scan
🇺🇸 drewf.ink	2026-06-23 19:27:23 (2 weeks ago)	[19:27] Port scanning. Port(s) scanned: TCP/1025	Port Scan
Anonymous	2026-06-21 10:27:17 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 xmission.com	2025-12-03 08:03:28 (7 months ago)	Blocked by UFW (TCP on 7003) Source port: 34535 TTL: 236 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 7003) Source port: 34535 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 124.31.104.38) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-11-02 17:39:12 (8 months ago)	Blocked by UFW (TCP on 7070) Source port: 19381 TTL: 236 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 7070) Source port: 19381 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 124.31.104.38) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Largnet SOC	2025-10-27 01:44:30 (8 months ago)	124.31.104.38 triggered Icarus honeypot on port 111. Check us out on github.	Port Scan Hacking
🇦🇺 PetePK	2025-10-18 14:59:02 (8 months ago)	Probed 1 time(s): TCP/9000	Port Scan
🇺🇸 MPL	2025-10-18 08:30:20 (8 months ago)	tcp/9444 (2 or more attempts)	Port Scan

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 122.187.251.73

🇦🇺 103.11.207.7

🇮🇷 85.198.19.253

🇨🇳 58.42.8.7

🇳🇱 45.148.10.21

🇨🇳 14.103.127.2

🇬🇧 5.252.83.58

🇨🇳 218.13.157.209

🇵🇱 176.53.159.197

🇨🇳 171.41.231.152

🇺🇸 162.216.149.58

🇺🇸 103.153.183.69

🇬🇧 35.203.210.204

🇹🇭 1.20.172.91

🇩🇪 213.244.61.154

🇧🇷 177.43.44.162

🇨🇳 123.191.132.251

🇧🇩 103.163.117.83

🇫🇷 91.231.89.104

🇰🇷 211.178.247.182