106.4.161.109
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET JIANGXI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- bta.net.cn
- Country
- 🇨🇳 China
- City
- Nanchang, Jiangxi
Abuse Reports
Total reports
68 from
23 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 sumnone |
Port probing on unauthorized port 27017
|
Port Scan Hacking Exploited Host | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 8983.
|
Port Scan | |
| 🇩🇪 sandra361 |
Port scan detected: 6 attempts across 1 port (2142). | Evidence: REAPER_TARPIT: IN=ens3 SRC=106.4.161.109 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=53870 DF PROTO=TCP SPT=27662 DPT=2142 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇺🇸 donarev419 |
Port scan detected on port 10001 (connection without data transfer)
|
Port Scan | |
| 🇳🇱 ByeByte API |
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 49673. Single burst at 2026-05-25 00:28 UTC.
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: iot_device,Dynamic IP more details on https://threatbook.io/ip/106.4.161.109
2026-04-12 18:48:00 http://www.soso.com/
|
Web App Attack | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 12187)
Source port: 25143
TTL: 237
Packet length: 44
TOS: 0x08
This report (for 106.4.161.109) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Drop from IP address 106.4.161.109 to tcp-port 4040
|
Port Scan | |
| 🇺🇸 MPL |
tcp/7443 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/7443
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,iot_device more details on https://threatbook.io/ip/106.4.161.109
2026-02-14 04:07:30 /
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/50000
|
Port Scan | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| 🇩🇪 ps-center |
CAS-W: TCP-Scanner. Port: 22
|
Port Scan | |
| 🇺🇸 MPL |
tcp/541 (2 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown