106.4.161.40

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
19% Caution
88 reports
33 reporters · latest 4 days ago
ISP
CHINANET JIANGXI PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
bta.net.cn
Country
🇨🇳 China
City
Nanchang, Jiangxi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
88 from 33 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇹🇷 Turkey 1
Most common categories Port Scan 3 Hacking 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (57897/tcp) [non-standard port]
Port Scan Hacking
🇩🇪 _ArminS_
SP-Scan 58748:1201 detected 2026.11.10 01:58:32 blocked until 2026.12.29 19:01:19
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 850.
Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 32772 [1] TCP
Port Scan
🇧🇾 StatsMe
2026-06-20T21:27:42.274496+0300 ET SCAN NMAP -sS window 1024
Port Scan
🇩🇪 Justin F. | AS204464
Honeypot [nx-infrastructure]: Unauthorized traffic (16 bytes of payload); 3567 [1] TCP Reported by: Justin F.
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: HTTP/1.1 request on 9000 GET / Accept: */*; 9000 [1] TCP
Web App Attack
🇺🇸 xmission.com
Blocked by UFW (TCP on 9092) Source port: 42542 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 106.4.161.40) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇦🇺 trentwiles.com
Unauthorized connection attempt detected from IP address 106.4.161.40 to port 8848 [SYD]
Port Scan
🇳🇱 i-turnradio.nl
2026-04-13 19:25:12 (CET) ~ Blocked by abusescan risk assessment
Web App Attack
🇺🇸 MPL
tcp/55555 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/50050 (3 or more attempts)
Port Scan
🇺🇸 MPL
tcp/80 (2 or more attempts)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 4369) Source port: 58091 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 106.4.161.40) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp/11211 (2 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 190.112.176.68
🇵🇾 181.123.136.241
🇺🇸 172.178.122.12
🇩🇪 151.243.113.99
🇺🇸 18.215.156.155
🇺🇸 13.221.110.72
🇬🇧 194.50.235.141
🇵🇾 181.116.188.134
🇳🇱 104.248.95.45
🇵🇰 103.74.21.79
🇺🇸 54.224.60.129
🇳🇱 45.148.10.152
🇺🇸 44.215.219.236
🇺🇸 4.249.18.138
🇺🇸 216.157.40.86
🇺🇦 195.18.19.135
🇨🇳 180.117.224.124
🇰🇪 154.159.252.160
🇫🇮 147.185.133.139
🇦🇪 139.185.55.154
feedback