106.161.65.206

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
12% Caution
291 reports
98 reporters · latest 1 day ago
ISP
KDDI CORPORATION
Usage Type
Fixed Line ISP
ASN
AS2516
Domain Name
kddi.com
Country
🇯🇵 Japan
City
Tokyo, Tokyo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
291 from 98 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇳🇱 Netherlands 1 🇿🇦 South Africa 1
Most common categories Bad Web Bot 1 Port Scan 1 Web App Attack 1 Hacking 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 47 | Len: 60B | Win: 26883(1) | F2B/ufw-honeypot@2026-11-07T00:16:34Z
Port Scan Hacking
🇿🇦 vanderhost
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/2019/03/vander-host-icon.png via rule: /wp-content
Web App Attack Bad Web Bot
🇺🇸 anti-res
Attempt of unauthorized access
Port Scan Bad Web Bot Web App Attack
🇪🇸 librebit
Brute force
Brute-Force
Anonymous
"Packet Flood; Triggered WAF; Multiple attempts to access nonexistent vulnerable php files"
DDoS Attack
🇬🇧 CrystalMaker
Vulnerability scan - GET /fdb29.com/ HTTP/2.0; GET /favicon.ico HTTP/2.0; GET /fdb29.com/ HTTP/2.0
Hacking
🇯🇵 HeliJP
2026-06-02T16:06:00Z - Recognized attacks\bad behavior from IP address 106.161.65.206 on port 443\80 (3 daily hits): client denied by server configuration
Port Scan Hacking SQL Injection Brute-Force Web App Attack
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇨🇿 ptlab
Detected wp_admin attack from WP-host.
Hacking Web App Attack
🇨🇦 polycoda
📄 Probes for tons of inexistent files and/or PHP scripts
Hacking Web App Attack
🇦🇺 MAGIC
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack Bad Web Bot
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/106.161.65.206 2026-04-18 11:00:34 /cc.gif 2026-04-18 11:00:51 /cc.gif 2026-04-18 11:00:58 /cc.gif
Web App Attack
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/106.161.65.206 2026-04-01 02:24:58 /cc.gif 2026-04-01 02:20:19 /cc.gif 2026-04-01 02:25:00 /cc.gif 2026-04-01 02:38:22 /cc.gif 2026-04-01 02:20:19 /cc.gif
Web App Attack
🇳🇱 valryx
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.92
🇨🇳 152.136.15.12
🇺🇸 66.132.195.97
🇫🇮 65.108.227.100
🇳🇱 45.148.10.9
🇦🇷 38.210.59.1
🇬🇧 34.142.73.63
🇺🇸 20.102.110.158
feedback