171.36.6.109

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
91 reports
31 reporters · latest 3 months ago
ISP
China Unicom GuangXi province network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Nanning, Guangxi
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

171.36.6.109 has been reported 91 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
91 from 31 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=36630 dstport=1027
Port Scan
🇯🇵 jay hung
Port Scan
🇬🇧 gbzret4d
Honeypot [uk-production01]: Unauthorized traffic (16 bytes of payload); 8088 [1] TCP
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
Port Scan Bad Web Bot
🇵🇱 sefinek.net
Honeypot hit: Large payload (1457 bytes); 50000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Bad Web Bot
🇩🇪 ValtonTahiri
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇺🇸 bitblockit
Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 12194/tcp. Observed event time: 2026-05-26 19:43:17 UTC. Report from passive honeypot only; no payload or credentials included.
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5986. Severity: MEDIUM. Aaran.cloud
Brute-Force Hacking
🇵🇱 sefinek.net
Honeypot hit: Unauthorized traffic (243 bytes of payload); 50050 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Port Scan
🇳🇱 donarev419
Connection to port 10078 with data transfer. Data preview: USER anonymous
Port Scan Hacking
🇦🇺 trentwiles.com
Unauthorized connection attempt detected from IP address 171.36.6.109 to port 7229 [SYD]
Port Scan
🇩🇪 _ArminS_
SP-Scan 19719:8080 detected 2026.04.24 04:33:33 blocked until 2026.06.12 21:36:20
Port Scan
🇺🇸 MPL
tcp/11300 (2 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 103.235.74.108
🇬🇭 41.139.5.210
🇷🇴 2.57.121.25
🇺🇸 208.66.111.201
🇧🇷 191.7.159.201
🇺🇸 162.216.150.24
🇩🇪 109.160.32.36
🇺🇸 91.230.168.252
🇫🇷 85.217.140.35
🇨🇿 80.188.75.92
🇷🇴 80.94.95.116
🇳🇱 77.67.26.87
🇻🇳 45.117.76.190
🇺🇸 150.136.99.148
🇸🇬 143.198.90.118
🇹🇼 112.105.16.40
🇷🇴 80.94.95.211
🇳🇱 45.148.10.238
🇨🇳 42.194.200.22
🇭🇰 203.160.72.161
feedback