106.4.161.27
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET JIANGXI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- bta.net.cn
- Country
- 🇨🇳 China
- City
- Nanchang, Jiangxi
Abuse Reports
Total reports
94 from
30 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇬 MazenHost |
1794641888 - 11/14/2026 08:38:08 Host: 106.4.161.27/106.4.161.27 Port: 12346 TCP Blocked
...
|
Port Scan | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 13228.
|
Port Scan | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 1443.
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 8444.
|
Port Scan Hacking | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [8887/tcp] | SPT: 18275 | TTL: 235 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇧🇾 StatsMe |
2026-06-11T00:48:02.422313+0300
ET SCAN NMAP -sS window 1024
|
Port Scan | |
| 🇺🇸 MPL |
tcp/3531 (2 or more attempts)
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: MEDIUM. Aaran.cloud
|
Port Scan Brute-Force | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
|
Port Scan Bad Web Bot | |
| 🇦🇺 trentwiles.com |
Unauthorized connection attempt detected from IP address 106.4.161.27 to port 20179 [SYD]
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 20145 [1] TCP
|
Hacking | |
| 🇺🇸 LSPCCU |
TSEC Honeypot Network report. Threat score: 66/100. Categories: Port Scan, Hacking, Web App Attack. Honeypot: cowrie, ssh-telnet. Context: 106.
|
Port Scan Hacking Web App Attack | |
| 🇩🇪 Justin F. | AS204464 |
Honeypot [nx-infrastructure]: Empty payload (likely service probe); 8088 [1] TCP
Reported by: Justin F.
|
Port Scan | |
| 🇦🇺 trentwiles.com |
Unauthorized connection attempt detected from IP address 106.4.161.27 to port 10232 [SYD]
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown