106.4.161.11
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- CHINANET JIANGXI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- bta.net.cn
- Country
- 🇨🇳 China
- City
- Nanchang, Jiangxi
Abuse Reports
Total reports
62 from
27 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied RDP access attempt. destination port 3389.
|
Port Scan Brute-Force | |
| Anonymous |
denied traffic to a honeypot network. destination port 49664.
|
Port Scan Hacking | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [3689/tcp] | SPT: 64437 | TTL: 236 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 2970.
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/5007 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/9993 (2 or more attempts)
|
Port Scan | |
| 🇳🇱 i-turnradio.nl |
2026-04-12 00:27:41 (CET) ~ Blocked by abusescan risk assessment
|
Web App Attack | |
| 🇺🇸 donarev419 |
Connection to port 8030 with data transfer.
Data preview:
|
Port Scan Hacking | |
| 🇩🇪 Moritz |
Honeypot hit: HTTP/1.1 request on 6502
GET /
Accept: */*; 6502 [1] TCP
|
Hacking Bad Web Bot | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 2030
GET /
Accept: */*; 2030 [1] TCP
|
Web App Attack | |
| 🇵🇱 sefinek.net |
Honeypot hit: HTTP/1.1 request on 9042
GET /
Accept: */*; 9042 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Hacking Bad Web Bot | |
| 🇺🇸 Hobby Bob |
2026-02-09T11:35:27.655282+00:00 server dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=, rip=106.4.161.11, lip=X.X.X.X session=
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/1029 (2 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown