106.4.161.23

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
7% Caution
65 reports
18 reporters · latest 1 month ago
ISP
CHINANET JIANGXI PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
bta.net.cn
Country
🇨🇳 China
City
Nanchang, Jiangxi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
65 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 1 🇫🇷 France 1
Most common categories Hacking 2 Port Scan 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 ELYAZ
(y3) Failed access -byebye- from 106.4.161.23 (CN/China/-): (CF_ENABLE)
Hacking
Anonymous
denied traffic to a honeypot network. destination port 1162.
Port Scan Hacking
Anonymous
denied traffic to a non-approved destination port. destination port 16466.
Port Scan
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇺🇸 Axel
Blocked by UFW on LAXHH [5601/tcp] | SPT: 39690 | TTL: 235 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇳🇵 radheykrishna.com.np
Jun 11 22:16:25 kernel: [4685309.517886] [UFW BLOCK] IN=ens160 OUT= SRC=106.4.161.23 LEN=44 TOS=0x00 PREC=0x00 TTL=234 ID=52466 PROTO=TCP SPT=47664 DPT=1443 WINDOW=1024 RES=0x00 SYN URGP=0 ...
Port Scan
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/106.4.161.23 2026-05-04 05:12:25 http://110.242.68.4/
Web App Attack
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇺🇸 MPL
tcp/12226 (2 or more attempts)
Port Scan
Anonymous
Brute force. Port:87
Brute-Force
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/106.4.161.23 2026-03-22 13:47:19 //cn.bing.com:443
Web App Attack
🇩🇪 dispaisyenterprises
Honeypot hit: HTTP/1.1 request on 5443 GET / Accept: */*; 5443 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Hacking Bad Web Bot
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇫🇷 Altai
Blocked by UFW on Jellyfin [1947/tcp] Source port: 22294 TTL: 229 Packet length: 44 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇿 197.158.13.34
🇷🇺 176.215.100.207
🇮🇹 162.158.129.18
🇨🇳 101.91.114.194
🇫🇷 85.217.140.9
🇳🇱 77.239.124.68
🇺🇸 72.212.176.37
🇺🇸 70.183.193.124
🇺🇸 66.132.172.184
🇰🇷 59.11.37.168
🇨🇳 27.16.238.54
🇮🇷 5.237.94.212
🇨🇳 218.94.16.158
🇦🇷 186.0.219.77
🇺🇸 173.46.91.166
🇨🇳 112.80.141.95
🇺🇸 97.211.171.80
🇺🇸 75.49.156.108
🇺🇸 66.45.144.201
🇨🇳 39.172.139.121
feedback