106.4.161.240
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- CHINANET JIANGXI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- bta.net.cn
- Country
- 🇨🇳 China
- City
- Nanchang, Jiangxi
No reports in the last 60 days
106.4.161.240 has been reported 58 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
58 from
21 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied traffic to a honeypot network. destination port 2526.
|
Port Scan Hacking | |
| 🇳🇱 donarev419 |
Connection to port 2376 with data transfer.
Data preview: GET /version HTTP/1.1
Host: 87.229.95.155:2376
Connection: keep-alive
Upgrade-Insecure-Requests:
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 548)
Source port: 35827
TTL: 239
Packet length: 44
TOS: 0x00
This report (for 106.4.161.240) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/7443
|
Port Scan | |
| 🇺🇸 MPL |
tcp/5222 (2 or more attempts)
|
Port Scan | |
| Anonymous |
SSH tarpit (endlessh) connection from 106.4.161.240
|
Brute-Force SSH | |
| 🇺🇸 ras07 |
SSH login attempts with user root.
|
Brute-Force SSH | |
| 🇺🇸 MPL |
tcp/16000
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (243 bytes of payload); 2095 [1] TCP
|
Port Scan | |
| 🇫🇷 oonux.net |
RouterOS: Scanning detected TCP 106.4.161.240:58267 > x.x.x.x:10035
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 20056 [1] TCP
|
Port Scan | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| Anonymous |
PROTO=TCP DPT=21242
|
Port Scan Hacking | |
| 🇺🇸 drewf.ink |
[02:38] Port scanning. Port(s) scanned: TCP/8888
|
Port Scan | |
| 🇰🇷 forgeban |
Honeypot hit: Unauthorized traffic (243 bytes of payload); 2501 [1] TCP
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown