JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.106.167.49

36.106.167.49 was found in our database!

This IP was reported 296 times. Confidence of Abuse is 72%: ?

72%

ISP	CHINANET TIANJIN PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS17638
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Zhongxinqiao, Tianjin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.106.167.49

Whois 36.106.167.49

IP Abuse Reports for 36.106.167.49:

This IP address has been reported a total of 296 times from 67 distinct sources. 36.106.167.49 was first reported on April 1st 2021, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-25 16:50:25 (14 hours ago)	Blocked by UFW (TCP on 9304) Source port: 19731 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9304) Source port: 19731 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 36.106.167.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-24 11:20:13 (1 day ago)	denied traffic to a honeypot network. destination port 6003.	Port Scan Hacking
🇭🇰 sandra361	2026-08-24 06:50:17 (2 days ago)	Port scan detected: 5 attempts across 1 port (43080). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=36.106. ... show more Port scan detected: 5 attempts across 1 port (43080). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=36.106.167.49 LEN=40 TOS=0x14 PREC=0x00 TTL=47 ID=55625 DF PROTO=TCP SPT=20743 DPT=43080 WINDOW=29200 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇧🇷 diego	2026-08-24 05:10:20 (2 days ago)	[rede-168-134] 08/24/2026-02:10:19.848085, 36.106.167.49, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-168-134] 08/24/2026-02:10:19.848085, 36.106.167.49, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 42 show less	Hacking
🇷🇸 Smel	2026-08-18 08:18:13 (1 week ago)	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
🇩🇪 centurion	2026-08-18 03:01:12 (1 week ago)	Unauthorized attempt on lab [10430/tcp] Source port: 19483 TTL: 238 Packet length: 44 TOS: 0x00 http ... show more Unauthorized attempt on lab [10430/tcp] Source port: 19483 TTL: 238 Packet length: 44 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-16 00:54:53 (1 week ago)	Blocked by UFW (TCP on 6989) Source port: 35345 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 6989) Source port: 35345 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 36.106.167.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-08-14 20:48:29 (1 week ago)	tcp/1195	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-08-14 14:35:46 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 55412 [1] TCP	Port Scan
🇫🇮 6kilowatti	2026-08-14 01:19:40 (1 week ago)	2026-08-14T04:19:39.316444+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-08-14T04:19:39.316444+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=36.106.167.49 DST=192.168.0.102 LEN=44 TOS=0x18 PREC=0x20 TTL=237 ID=21054 PROTO=TCP SPT=39090 DPT=8890 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-08-12 01:32:05 (2 weeks ago)	Honeypot hit: HTTP/1.1 request on 1370 GET / Accept: /; 1370 [1] TCP	Web App Attack
🇮🇳 evicky2002	2026-07-31 06:00:00 (3 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=4)	Hacking Brute-Force SSH
🇺🇸 Axel	2026-07-29 16:44:46 (3 weeks ago)	Blocked by UFW on LAXHH [8200/tcp] \| SPT: 11366 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8200/tcp] \| SPT: 11366 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-29 09:07:02 (3 weeks ago)	Blocked by UFW (TCP on 8333) Source port: 17923 TTL: 239 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8333) Source port: 17923 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 36.106.167.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-07-29 00:23:14 (4 weeks ago)	Blocked by UFW on LAXHH [16010/tcp] \| SPT: 44790 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [16010/tcp] \| SPT: 44790 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 296 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.44

🇦🇷 192.141.93.42

🇺🇸 147.185.132.222

🇦🇷 138.204.156.1

🇨🇱 138.84.34.80

🇺🇸 71.6.233.163

🇺🇸 18.218.118.203

🇭🇰 218.190.8.165

🇳🇱 195.178.110.227

🇷🇴 193.46.255.86

🇦🇷 190.15.220.14

🇩🇪 167.94.145.27

🇻🇳 160.250.129.45

🇺🇸 147.185.132.210

🇺🇸 147.185.132.203

🇺🇸 147.185.132.168

🇺🇸 142.251.155.1

🇵🇰 137.59.218.191

🇺🇸 134.122.118.164

🇮🇳 122.160.59.87