JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.136.189.6

116.136.189.6 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 100%: ?

100%

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Hohhot, Inner Mongolia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.136.189.6

Whois 116.136.189.6

IP Abuse Reports for 116.136.189.6:

This IP address has been reported a total of 34 times from 28 distinct sources. 116.136.189.6 was first reported on December 7th 2025, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 nfsec.pl	2026-06-24 00:32:58 (22 hours ago)	Detected: TCP scan on port: 8080 with flags: SYN	Port Scan
🇩🇪 banankicks	2026-06-23 21:53:42 (1 day ago)	Unauthorized connection attempt detected from IP address 116.136.189.6 to port 8080 (banankicks-serv ... show more Unauthorized connection attempt detected from IP address 116.136.189.6 to port 8080 (banankicks-server) [L] show less	Brute-Force Exploited Host
🇺🇸 drewf.ink	2026-06-23 20:48:33 (1 day ago)	[20:48] Port scanning. Port(s) scanned: TCP/8080	Port Scan
🇫🇷 geeek	2026-06-23 19:55:55 (1 day ago)	Port scanning: 8080 TCP Blocked	Port Scan
🇹🇷 Threat.live	2026-06-23 19:30:03 (1 day ago)	Threat.live: Web Scan	Web App Attack
🇨🇦 polycoda	2026-06-23 10:03:34 (1 day ago)	📡 Port scan	Hacking Web App Attack
🇺🇸 LotPhantom	2026-06-23 06:03:46 (1 day ago)	2026-06-23T06:03:30.615891+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-06-23T06:03:30.615891+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=116.136.189.6 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=10358 PROTO=TCP SPT=43676 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-23T06:03:45.918884+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=116.136.189.6 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=13151 PROTO=TCP SPT=57459 DPT=4096 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
Anonymous	2026-06-23 05:58:29 (1 day ago)	Jun 23 01:53:29 localhost kernel: [110539284.831816] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 23 01:53:29 localhost kernel: [110539284.831816] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=116.136.189.6 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=4586 PROTO=TCP SPT=57209 DPT=3000 WINDOW=1200 RES=0x00 RST URGP=0 Jun 23 01:53:29 localhost kernel: [110539284.831837] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=116.136.189.6 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=4586 PROTO=TCP SPT=57209 DPT=3000 SEQ=1864202796 ACK=0 WINDOW=1200 RES=0x00 RST URGP=0 Jun 23 01:58:28 localhost kernel: [110539584.441480] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=116.136.189.6 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=9548 PROTO=TCP SPT=3328 DPT=4096 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 23 01:58:28 localhost kernel: [110539584.441503] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=116.136.189.6 DST=[mungedIP2] LEN=40 TOS=0x00 show less	Port Scan
🇺🇸 Axel	2026-06-23 05:56:40 (1 day ago)	Blocked by UFW on MVI [3000/tcp] \| SPT: 2858 \| TTL: 231 \| LEN: 40 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [3000/tcp] \| SPT: 2858 \| TTL: 231 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 sonot	2026-06-23 05:50:31 (1 day ago)	Blocked by UFW on tunneluk01 [8080/tcp] \| SPT: 4864 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [8080/tcp] \| SPT: 4864 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 phil2k	2026-06-23 05:48:26 (1 day ago)	fail2ban:firewall:2026-06-23T07:47:25.805399+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-06-23T07:47:25.805399+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=116.136.189.6 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=231 ID=1262 PROTO=TCP SPT=52562 DPT=4096 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-23T07:48:23.981516+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=116.136.189.6 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=231 ID=48474 PROTO=TCP SPT=32520 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇬🇧 Andrew	2026-06-23 05:44:36 (1 day ago)	Blocked by UFW (TCP on port 8080). Source port: 53423 TTL: 234 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW (TCP on port 8080). Source port: 53423 TTL: 234 Packet length: 40 TOS: 0x00 This report (for 116.136.189.6) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇫🇮 sonot	2026-06-23 05:30:59 (1 day ago)	Blocked by UFW on mail [3000/tcp] \| SPT: 43190 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on mail [3000/tcp] \| SPT: 43190 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-23 05:30:14 (1 day ago)	Try to connect to Port_Scan_8080_stealth	Port Scan
🇫🇮 iamxorum	2026-06-23 05:23:27 (1 day ago)	2026-06-23T05:23:25.441619+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-06-23T05:23:25.441619+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=116.136.189.6 DST=46.62.222.43 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=64589 PROTO=TCP SPT=50364 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.80

🇰🇷 211.253.31.30

🇹🇭 125.27.13.246

🇬🇧 35.203.211.224

🇺🇸 20.65.195.41

🇧🇷 177.198.65.81

🇫🇮 147.185.133.89

🇷🇴 92.118.39.71

🇩🇪 79.133.51.145

🇭🇰 199.45.154.177

🇺🇿 194.107.115.199

🇳🇱 176.65.148.158

🇹🇼 125.228.239.89

🇳🇱 45.148.10.230

🇧🇪 198.235.24.144

🇳🇱 176.65.139.250

🇰🇷 175.125.92.77

🇺🇸 162.216.149.91

🇳🇱 45.148.10.141

🇺🇸 45.146.55.121