106.4.161.148
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET JIANGXI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- bta.net.cn
- Country
- 🇨🇳 China
- City
- Nanchang, Jiangxi
Abuse Reports
Total reports
79 from
22 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 www.nomadomia.com |
Hack attack wp-content
|
Port Scan Hacking Bad Web Bot Web App Attack | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 10394.
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 15001.
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 11211)
Source port: 34744
TTL: 239
Packet length: 44
TOS: 0x00
This report (for 106.4.161.148) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 11210.
|
Port Scan Hacking | |
| 🇺🇸 donarev419 |
Connection to port 18000 with data transfer.
Data preview: �
|
Port Scan Hacking | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [9304/tcp] | SPT: 10688 | TTL: 235 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 GoodOldTOS |
Connection to Postgres honeypot
|
Hacking | |
| 🇺🇸 MPL |
tcp/12150 (2 or more attempts)
|
Port Scan | |
| 🇩🇪 phil2k |
Firewall: Within 2026-01-23 08:34:17 - 2026-01-23 08:34:17 CET(+0100) identified: unallowed access from 106.4.161.148 on port 1443(tcp:1443) (1 trial)
|
Port Scan Brute-Force | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 8127 [1] TCP
|
Port Scan | |
| 🇺🇸 MPL |
tcp/12326 (3 or more attempts)
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.4.161.148
2026-02-09 23:22:13 /
|
Web App Attack | |
| 🇯🇵 mkaraki |
1770618093 # Service_probe # SIGNATURE_SEND # source_ip:106.4.161.148 # dst_port:9000
...
|
Port Scan | |
| 🇺🇸 drewf.ink |
[07:52] Port scanning. Port(s) scanned: TCP/9092
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown