JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.106.166.117

36.106.166.117 was found in our database!

This IP was reported 395 times. Confidence of Abuse is 85%: ?

85%

ISP	CHINANET TIANJIN PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS17638
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Tianjin, Tianjin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.106.166.117

Whois 36.106.166.117

IP Abuse Reports for 36.106.166.117:

This IP address has been reported a total of 395 times from 88 distinct sources. 36.106.166.117 was first reported on March 22nd 2021, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 geeek	2026-08-17 21:02:35 (1 hour ago)	Port scanning: 27017 TCP Blocked	Port Scan
🇺🇸 ArturShelby	2026-08-17 17:28:41 (5 hours ago)	Suspicious path access: /wp-content/uploads/2023/08/logo-gold.png	Web App Attack
🇺🇸 xmission.com	2026-08-17 12:44:41 (9 hours ago)	Blocked by UFW (TCP on 9527) Source port: 40737 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9527) Source port: 40737 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 36.106.166.117) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Aurealize	2026-08-17 12:36:50 (10 hours ago)	firewall port scanning detected. 2 or more observation(s) from 2026-08-17T12:36:50.000Z through 2026 ... show more firewall port scanning detected. 2 or more observation(s) from 2026-08-17T12:36:50.000Z through 2026-08-17T12:36:50.000Z. show less	Port Scan
🇭🇰 sandra361	2026-08-17 07:46:17 (14 hours ago)	Port scan detected: 6 attempts across 1 port (3337). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=36.106.1 ... show more Port scan detected: 6 attempts across 1 port (3337). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=36.106.166.117 LEN=40 TOS=0x14 PREC=0x00 TTL=47 ID=10491 DF PROTO=TCP SPT=14399 DPT=3337 WINDOW=29200 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇺🇸 xmission.com	2026-08-17 02:51:44 (19 hours ago)	Blocked by UFW (TCP on 5900) Source port: 29397 TTL: 238 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 5900) Source port: 29397 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 36.106.166.117) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 donarev419	2026-08-15 04:13:37 (2 days ago)	Connection to port 2097 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:2097 ... show more Connection to port 2097 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:2097 Accept: / show less	Port Scan Hacking
Anonymous	2026-08-14 04:48:30 (3 days ago)	Blocked by firewall on hugin [6363/tcp] \| Rule: UFW \| SPT: 51670 \| TTL: 239 \| LEN: 44 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [6363/tcp] \| Rule: UFW \| SPT: 51670 \| TTL: 239 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 sefinek.net	2026-08-13 13:46:34 (4 days ago)	Honeypot hit: Empty payload (likely service probe); 10098 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 10098 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇦🇹 centurion	2026-08-11 21:03:07 (6 days ago)	Blocked by UFW on ns03 [2143/tcp] Source port: 65535 TTL: 237 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on ns03 [2143/tcp] Source port: 65535 TTL: 237 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-08-06 13:24:28 (1 week ago)	Blocked by UFW on LAXHH [4000/tcp] \| SPT: 18007 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [4000/tcp] \| SPT: 18007 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-08-05 22:20:23 (1 week ago)	Blocked by UFW on LAXHH [3690/tcp] \| SPT: 60758 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [3690/tcp] \| SPT: 60758 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 LiftUp Hosting	2026-08-05 07:57:59 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 7443 [1] TCP	Port Scan
🇺🇸 Axel	2026-08-04 02:35:07 (1 week ago)	Blocked by UFW on LAXHH [9292/tcp] \| SPT: 44180 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [9292/tcp] \| SPT: 44180 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 sandra361	2026-08-03 07:16:32 (2 weeks ago)	Port scan detected: 6 attempts across 1 port (14534). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=36. ... show more Port scan detected: 6 attempts across 1 port (14534). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=36.106.166.117 LEN=40 TOS=0x00 PREC=0x00 TTL=39 ID=58793 DF PROTO=TCP SPT=19818 DPT=14534 WINDOW=29200 RES=0x00 ACK FIN URGP=0 show less	Port Scan

Showing 1 to 15 of 395 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 185.180.229.105

🇨🇳 171.83.49.242

🇫🇷 51.77.158.34

🇸🇬 47.84.176.81

🇺🇸 23.235.197.206

🇺🇸 173.255.249.14

🇺🇸 136.117.87.189

🇳🇱 94.154.43.219

🇱🇹 91.224.92.17

🇳🇱 45.142.193.239

🇺🇸 44.192.31.3

🇺🇸 35.153.169.42

🇺🇸 13.217.84.69

🇮🇩 210.79.142.230

🇬🇧 193.176.29.7

🇫🇷 176.146.171.182

🇬🇧 217.146.80.106

🇸🇬 213.35.113.47

🇺🇸 104.207.70.204

🇺🇸 66.132.186.207