124.31.106.128
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET Xizang(Tibet) province network
- Usage Type
- Mobile ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Lhasa, Tibet
Abuse Reports
Total reports
113 from
29 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied traffic to a non-approved destination port. destination port 13246.
|
Port Scan | |
| 🇧🇷 aosafeshield |
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
|
Port Scan Hacking | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 11122.
|
Port Scan Hacking | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (89/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 2139
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 MPL |
tcp/24744 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 12281 with data transfer.
Data preview: USER anonymous
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 7712 [1] TCP
|
Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 2190.
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/6443
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 1115 [1] TCP
|
Port Scan | |
| Anonymous |
1787919706 - 08/28/2026 14:21:46 Host: 124.31.106.128/124.31.106.128 Port: 771 TCP Blocked
...
|
Port Scan | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 2102.
|
Port Scan | |
| 🇺🇸 MPL |
tcp/19222
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown