36.106.166.199

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
46% Elevated
356 reports
92 reporters · latest 3 hours ago
ISP
CHINANET TIANJIN PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS17638
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Zhongxinqiao, Tianjin
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
356 from 92 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇨🇦 Canada 2 🇺🇸 United States of America 2
Most common categories Port Scan 7 Hacking 3 Brute-Force 2 Exploited Host 1 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇮 6kilowatti
Port Scan
Anonymous
unsolicited connect TCP dport 12370 (sport 57921)
Hacking
🇨🇦 1gz
Bad Web Bot
Anonymous
denied traffic to a non-approved destination port. destination port 61404.
Port Scan
🇺🇸 Aurealize
firewall port scanning detected. 2 or more observation(s) from 2026-10-13T16:02:21.000Z through 2026-10-13T16:02:21.000Z.
Port Scan
🇩🇪 33three
Fail2Ban jail WebAttack triggered
Brute-Force
🇺🇸 donarev419
Connection to port 2118 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:2118 Accept: */*
Port Scan Hacking
Anonymous
denied traffic to a non-approved destination port. destination port 12999.
Port Scan
Anonymous
MikroTik Enterprise Honeypot
Port Scan
Anonymous
1790579736 - 09/28/2026 09:15:36 Host: 36.106.166.199/36.106.166.199 Port: 541 TCP Blocked ...
Port Scan
🇩🇪 Admins@Storch
IPS:drop <match> dstport=13013
Brute-Force Exploited Host
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Large payload (1457 bytes); 8147 [1] TCP
Hacking
🇺🇸 RAP
2026-09-05 02:31:03 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇺🇸 MPL
tcp/8080
Port Scan
🇺🇸 Aurealize
firewall port scanning detected. 2 or more observation(s) from 2026-09-04T19:51:04.000Z through 2026-09-04T19:51:04.000Z.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 45.146.55.101
🇧🇬 78.128.112.74
🇺🇸 72.211.57.167
🇳🇱 45.148.10.157
🇺🇸 3.147.122.184
🇨🇦 216.26.234.213
🇨🇳 203.34.56.12
🇰🇭 175.100.126.138
🇳🇱 193.47.62.96
🇧🇷 177.72.46.83
🇸🇬 146.190.100.168
🇺🇸 129.80.36.130
🇨🇦 85.217.149.58
🇺🇸 67.250.213.58
🇨🇳 61.145.181.7
🇺🇸 40.67.165.176
feedback