106.4.161.199
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET JIANGXI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- bta.net.cn
- Country
- 🇨🇳 China
- City
- Nanchang, Jiangxi
Abuse Reports
Total reports
63 from
25 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied traffic to a non-approved destination port. destination port 12314.
|
Port Scan | |
| 🇬🇧 sandra361 |
Port scan detected: 5 attempts across 1 port (8355). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=106.4.161.199 LEN=40 TOS=0x00 PREC=0x00 TTL=36 ID=50687 DF PROTO=TCP SPT=64098 DPT=8355 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇺🇸 sudoers |
SSH honeypot (Cowrie) brute force attempt
|
SSH Brute-Force | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| Anonymous |
Try to connect to Port_Scan_80_stealth
|
Port Scan | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 2265.
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 10000
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=53962 dstport=1977
|
Port Scan | |
| 🇺🇸 MPL |
tcp/19101
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:60689 dst:631
|
Port Scan | |
| 🇩🇪 Justin F. | AS204464 |
Honeypot [nx-infrastructure]: Unauthorized traffic (16 bytes of payload); 2995 [1] TCP
Reported by: Justin F.
|
Port Scan | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (243 bytes of payload); 2391 [1] TCP
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown