JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.36.193.42

106.36.193.42 was found in our database!

This IP was reported 1,194 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET HUNAN PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Xi'an, Shaanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.36.193.42

Whois 106.36.193.42

IP Abuse Reports for 106.36.193.42:

This IP address has been reported a total of 1,194 times from 273 distinct sources. 106.36.193.42 was first reported on March 16th 2026, and the most recent report was 56 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Paul Smith	2026-06-23 19:43:20 (56 minutes ago)	Email Auth Brute force attack 7/7 in last day	Brute-Force
🇦🇺 brocococonut	2026-06-23 18:45:49 (1 hour ago)	2026-06-23 17:02:45 dovecot_login authenticator failed for ([170.9.53.196]) [106.36.193.42]: 535 Inc ... show more 2026-06-23 17:02:45 dovecot_login authenticator failed for ([170.9.53.196]) [106.36.193.42]: 535 Incorrect authentication data (set_id=dave) 2026-06-23 17:02:45 dovecot_login authenticator failed for ([170.9.53.196]) [106.36.193.42]: 535 Incorrect authentication data (set_id=dave) 2026-06-23 17:02:45 dovecot_login authenticator failed for ([170.9.53.196]) [106.36.193.42]: 535 Incorrect authentication data (set_id=dave) 2026-06-24 04:45:49 dovecot_login authenticator failed for ([14.51.223.140]) [106.36.193.42]: 535 Incorrect authentication data ([email protected]) 2026-06-24 04:45:49 dovecot_login authenticator failed for ([14.51.223.140]) [106.36.193.42]: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force
🇬🇷 setupgr	2026-06-23 17:33:05 (3 hours ago)	(smtpauth) Failed SMTP AUTH login from 106.36.193.42 (CN/China/Hunan/Qingyuan/-/[AS4134 CHINANET-BAC ... show more (smtpauth) Failed SMTP AUTH login from 106.36.193.42 (CN/China/Hunan/Qingyuan/-/[AS4134 CHINANET-BACKBONE No.31,Jin-rong Street]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-06-23 20:33:02 dovecot_login authenticator failed for H=([175.206.113.91]) [106.36.193.42]:57900: 535 Incorrect authentication data (set_id=arte) show less	Port Scan
🇬🇧 stom	2026-06-23 15:04:15 (5 hours ago)	2026-06-23T15:04:11.806344ls1.tom2.co.uk postfix/smtps/smtpd[4272]: warning: unknown[106.36.193.42]: ... show more 2026-06-23T15:04:11.806344ls1.tom2.co.uk postfix/smtps/smtpd[4272]: warning: unknown[106.36.193.42]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force Email Spam
🇺🇸 shaunc	2026-06-23 14:35:09 (6 hours ago)	Jun 23 09:34:44 mailman postfix/smtpd[20076]: warning: unknown[106.36.193.42]: SASL LOGIN authentica ... show more Jun 23 09:34:44 mailman postfix/smtpd[20076]: warning: unknown[106.36.193.42]: SASL LOGIN authentication failed: authentication failure show less	Brute-Force
🇩🇪 mnpx	2026-06-23 14:17:13 (6 hours ago)	SMTP brute forcing (3× over 4h:31m); first seen here 2026-03-24T05:28Z	Brute-Force
🇫🇷 adlp.org	2026-06-23 10:25:05 (10 hours ago)	Jun 23 10:24:57 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;106.36.193.42;[UNAVAI ... show more Jun 23 10:24:57 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;106.36.193.42;[UNAVAILABLE];[email protected];smtp;plain;1;@e-sayegh.eu$;KILL;2;Licence to kill Jun 23 10:25:00 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;106.36.193.42;[UNAVAILABLE];[email protected];smtp;plain;1;@e-sayegh.eu$;KILL;2;Licence to kill Jun 23 10:25:03 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;106.36.193.42;[UNAVAILABLE];[email protected];smtp;plain;1;@e-sayegh.eu$;KILL;2;Licence to kill ... show less	Brute-Force
🇩🇪 www.fransveldman.world	2026-06-23 10:15:29 (10 hours ago)	Jun 23 10:15:28 mail postfix/submission/smtpd[2440416]: warning: unknown[106.36.193.42]: SASL LOGIN ... show more Jun 23 10:15:28 mail postfix/submission/smtpd[2440416]: warning: unknown[106.36.193.42]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 23 10:15:29 mail postfix/submission/smtpd[2440416]: lost connection after AUTH from unknown[106.36.193.42] ... show less	Brute-Force Email Spam
Anonymous	2026-06-23 08:08:51 (12 hours ago)		Brute-Force Email Spam
Anonymous	2026-06-23 07:51:31 (12 hours ago)	SMTP AUTH 106.36.193.42 (SMTP_LOGIN_ATTEMPT)	Brute-Force
🇩🇪 localhost-admin	2026-06-23 07:51:21 (12 hours ago)	Unauthorized connection attempt detected, SMTP Brute-Force	Brute-Force
🇷🇴 SpamStopper	2026-06-23 06:07:16 (14 hours ago)	Fail2Ban - POSTFIX Dropped in SASL AUTH	Brute-Force Bad Web Bot
🇩🇪 eebh.hu	2026-06-23 04:34:08 (16 hours ago)	Jun 22 03:09:03 mail postfix/smtps/smtpd[1479222]: warning: unknown[106.36.193.42]: SASL LOGIN authe ... show more Jun 22 03:09:03 mail postfix/smtps/smtpd[1479222]: warning: unknown[106.36.193.42]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 22 09:29:46 mail postfix/smtps/smtpd[1571174]: warning: unknown[106.36.193.42]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 23 06:34:06 mail postfix/smtps/smtpd[1879504]: warning: unknown[106.36.193.42]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
🇹🇷 ferique	2026-06-23 02:49:25 (17 hours ago)	Real-time Intercept: SMTP attack. Reference: 2026-06-23 05:49:11.6679 Login failure: 106.36.193.42 ... show more Real-time Intercept: SMTP attack. Reference: 2026-06-23 05:49:11.6679 Login failure: 106.36.193.42 SMTP show less	Brute-Force Email Spam
🇯🇵 ki3	2026-06-23 01:39:29 (19 hours ago)	Fail2Ban: Postfix Attack 106.36.193.42 1782178769.0(JST)	Email Spam Brute-Force

Showing 1 to 15 of 1194 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 203.76.241.18

🇫🇮 147.185.133.121

🇩🇪 128.1.120.201

🇨🇦 54.39.210.6

🇸🇬 47.82.9.49

🇸🇬 47.82.9.48

🇳🇱 45.148.10.141

🇰🇷 43.200.182.174

🇭🇰 20.255.152.91

🇺🇸 2607:f8b0:4864:20::f2a

🇺🇸 216.73.216.237

🇮🇩 202.72.196.75

🇭🇰 199.45.155.76

🇺🇸 195.184.76.205

🇱🇻 195.123.211.81

🇩🇪 168.222.43.3

🇩🇪 148.153.140.64

🇨🇳 139.9.191.197

🇺🇸 91.230.168.138

🇸🇬 47.82.9.47