JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.106.166.16

36.106.166.16 was found in our database!

This IP was reported 379 times. Confidence of Abuse is 89%: ?

89%

ISP	CHINANET TIANJIN PROVINCE NETWORK
Usage Type	Commercial
ASN	AS17638
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Tianjin, Tianjin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.106.166.16

Whois 36.106.166.16

IP Abuse Reports for 36.106.166.16:

This IP address has been reported a total of 379 times from 97 distinct sources. 36.106.166.16 was first reported on April 7th 2021, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Axel	2026-07-11 10:42:53 (7 hours ago)	Blocked by UFW on LAXHH [49666/tcp] \| SPT: 59262 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [49666/tcp] \| SPT: 59262 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-11 10:37:31 (7 hours ago)	2026-07-11T12:37:29.994125+02:00 vps kernel: [137118.822453] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa ... show more 2026-07-11T12:37:29.994125+02:00 vps kernel: [137118.822453] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=36.106.166.16 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=22129 PROTO=TCP SPT=59015 DPT=6007 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
Anonymous	2026-07-10 19:31:39 (22 hours ago)	Honeypot hit: Unauthorized traffic (15 bytes of payload); 10003 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (15 bytes of payload); 10003 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 Axel	2026-07-10 11:02:07 (1 day ago)	Blocked by UFW on LAXHH [14000/tcp] \| SPT: 51847 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [14000/tcp] \| SPT: 51847 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-10 09:27:48 (1 day ago)	Blocked by UFW (TCP on 992) Source port: 53288 TTL: 239 Packet length: 44 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 992) Source port: 53288 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 36.106.166.16) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-09 09:54:17 (2 days ago)	Reported from Nginx log analysis 19. Log: 36.106.166.16 - - [09/Jul/2026:xx:xx:xx 0200] "GET / HTTP ... show more Reported from Nginx log analysis 19. Log: 36.106.166.16 - - [09/Jul/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" "-" "CN China Tianjin" "AS17638" "ASN for TIANJIN Provincial Net of CT" show less	Port Scan Brute-Force SSH
🇺🇸 RAP	2026-07-07 15:23:37 (4 days ago)	2026-07-07 15:23:37 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 xmission.com	2026-07-06 05:13:33 (5 days ago)	Blocked by UFW (TCP on 2107) Source port: 35113 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2107) Source port: 35113 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 36.106.166.16) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-07-05 20:02:19 (5 days ago)	Blocked by UFW on LAXHH [9002/tcp] \| SPT: 62771 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [9002/tcp] \| SPT: 62771 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 ras07	2026-07-02 20:00:05 (1 week ago)	Brute force SSH login attempts.	Brute-Force SSH
🇦🇩 bakunin1848	2026-07-02 04:46:06 (1 week ago)	Firewall IPS Detection on 02-07-2026 at 06:46:06	Port Scan Exploited Host
🇺🇸 Axel	2026-07-01 23:59:54 (1 week ago)	Blocked by UFW on LAXHH [4002/tcp] \| SPT: 29519 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [4002/tcp] \| SPT: 29519 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-07-01 15:29:29 (1 week ago)	tcp/12350 (2 or more attempts)	Port Scan
🇺🇸 Axel	2026-07-01 02:54:25 (1 week ago)	Blocked by UFW on LAXHH [5988/tcp] \| SPT: 13177 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [5988/tcp] \| SPT: 13177 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-30 21:57:40 (1 week ago)	tcp/25282	Port Scan

Showing 1 to 15 of 379 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.247.137.10

🇳🇱 185.242.226.74

🇳🇱 185.135.212.124

🇩🇪 167.94.146.34

🇧🇷 45.205.1.223

🇬🇧 193.46.0.146

🇳🇱 185.242.226.19

🇳🇱 185.242.226.18

🇳🇱 185.226.197.57

🇳🇱 185.226.197.47

🇭🇰 156.225.1.42

🇩🇪 134.209.228.59

🇫🇷 91.196.152.200

🇰🇷 59.21.37.60

🇬🇧 45.82.76.129

🇫🇷 38.242.143.220

🇬🇧 35.203.211.118

🇳🇱 185.224.128.16

🇳🇱 185.223.235.21

🇳🇱 185.223.235.8