106.4.161.2
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET JIANGXI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- bta.net.cn
- Country
- 🇨🇳 China
- City
- Nanchang, Jiangxi
Abuse Reports
Total reports
92 from
33 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇮 saamkuu |
DDoS botnet: TCP connection flood, 6 connections to port 443.
|
DDoS Attack | |
| Anonymous |
Drop from IP address 106.4.161.2 to tcp-port 30005
|
Port Scan | |
| 🇺🇸 MPL |
tcp/5269 (2 or more attempts)
|
Port Scan | |
| 🇬🇧 sandra361 |
Port scan detected: 7 attempts across 1 port (2102). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=106.4.161.2 LEN=40 TOS=0x00 PREC=0x00 TTL=39 ID=41680 DF PROTO=TCP SPT=22027 DPT=2102 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇺🇸 MPL |
tcp/16030
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 3080 [1] TCP
|
Port Scan | |
| 🇺🇸 MPL |
tcp/18083
|
Port Scan | |
| 🇩🇪 gurnip |
Vulnerability probe of page /version, not found on the server.
|
Brute-Force Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 2197 [1] TCP
|
Hacking | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 18182.
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 3141 [1] TCP
|
Hacking | |
| 🇭🇰 鹏鹏 |
monitor: on ser162528253480 | port: 54836 | ttl: 236 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=64256 dstport=12249
|
Port Scan | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [49156/tcp] | SPT: 53906 | TTL: 235 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 Aurealize |
firewall port scanning detected. 2 or more observation(s) from 2026-08-24T22:21:37.000Z through 2026-08-24T22:21:37.000Z.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown