106.4.161.170
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET JIANGXI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- bta.net.cn
- Country
- 🇨🇳 China
- City
- Nanchang, Jiangxi
Abuse Reports
Total reports
104 from
36 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| Anonymous |
denied traffic to a honeypot network. destination port 30010.
|
Port Scan Hacking | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=40325 dstport=2760
|
Port Scan | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: HTTP/1.1 request on 47001
GET /
Accept: */*; 47001 [1] TCP
|
Hacking Bad Web Bot | |
| Anonymous |
denied traffic to a honeypot network. destination port 12158.
|
Port Scan Hacking | |
| 🇩🇪 _ArminS_ |
SP-Scan 18270:9010 detected 2026.06.18 07:14:07
blocked until 2026.08.07 00:16:54
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud
|
Port Scan Bad Web Bot | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 MPL |
tcp/1911 (3 or more attempts)
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/106.4.161.170
|
SSH | |
| 🇳🇵 radheykrishna.com.np |
Apr 8 17:18:49 kernel: [807785.547292] [UFW BLOCK] IN=ens160 OUT= SRC=106.4.161.170 LEN=44 TOS=0x00 PREC=0x00 TTL=234 ID=52175 PROTO=TCP SPT=48088 DPT=14430 WINDOW=1024 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇸🇬 drewf.ink |
[12:28] Port scanning. Port(s) scanned: TCP/995
|
Port Scan | |
| 🇺🇸 RAP |
2026-03-23 18:35:05 UTC Unauthorized activity to TCP port 8089. Web App
|
Port Scan Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown