106.4.161.250

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
31% Elevated
77 reports
28 reporters · latest 1 week ago
ISP
CHINANET JIANGXI PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
bta.net.cn
Country
🇨🇳 China
City
Nanchang, Jiangxi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
77 from 28 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇲🇳 Mongolia 2 🇭🇰 Hong Kong 1
Most common categories Port Scan 7 Hacking 1 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
denied traffic to a non-approved destination port. destination port 58058.
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 12406 [1] TCP
Port Scan
🇭🇰 sandra361
Port scan detected: 8 attempts across 1 port (29208). | Evidence: REAPER_TARPIT: IN=eth0 SRC=106.4.161.250 LEN=40 TOS=0x14 PREC=0x00 TTL=47 ID=17697 DF PROTO=TCP SPT=14624 DPT=29208 WINDOW=29200 RES=0x00 ACK FIN URGP=0
Port Scan
🇩🇪 kingjan1999
Blocked by UFW [82/tcp] | SPT: 45791 | TTL: 239 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (2560/tcp) [non-standard port]
Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (16 bytes of payload); 11006 [1] TCP
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 10270.
Port Scan Hacking
Anonymous
denied traffic to a non-approved destination port. destination port 8002.
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇦🇺 trentwiles.com
Unauthorized connection attempt detected from IP address 106.4.161.250 to port 8194 [SYD]
Port Scan
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇺🇸 MPL
tcp/12000 (2 or more attempts)
Port Scan
🇩🇪 dispaisyenterprises
Honeypot [fra-de-honeypot]: HTTP/1.1 request on 2552 GET / Accept: */*; 2552 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Hacking Bad Web Bot
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 175.209.156.146
🇸🇪 104.22.219.110
🇵🇰 101.53.255.255
🇺🇸 70.91.135.181
🇳🇱 45.148.10.141
🇷🇺 94.25.40.30
🇰🇷 218.238.5.110
🇳🇱 172.211.56.214
🇨🇳 140.246.137.102
🇹🇷 78.190.133.81
🇳🇱 77.239.124.46
🇧🇷 69.6.221.18
🇺🇸 66.132.186.242
🇮🇱 34.165.192.12
🇿🇦 197.234.242.92
🇺🇸 195.63.15.179
🇺🇸 195.63.15.116
🇺🇸 195.63.14.239
🇺🇸 195.63.14.233
🇺🇸 195.63.14.202
feedback