36.20.56.189
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- CHINANET-ZJ Zhongxin node network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- hz.zj.cn
- Country
- 🇨🇳 China
- City
- Hangzhou, Zhejiang
No reports in the last 60 days
36.20.56.189 has been reported 31 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
31 from
26 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇷 ICS Labs |
ICS Labs identified 36.20.56.189 as a malicious indicator from threat intelligence.
|
DDoS Attack Port Scan Hacking Brute-Force Exploited Host | |
| 🇨🇭 YF |
Pays blacklisté (CN)
|
Brute-Force Web App Attack | |
| 🇮🇱 spd.co.il |
Port scan detected on multiple ports
|
Port Scan | |
| 🇺🇸 MrMac |
TCP/5902,5903,5904,5905,5906,...(90 ports total, 90 packets) over 7.0 days
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:61234 dst:5900
|
Port Scan | |
| 🇵🇱 nfsec.pl |
Detected: TCP scan on port: 5900 with flags: SYN
|
Port Scan | |
| Anonymous |
36.20.56.189 detected on srv01
|
Port Scan | |
| Anonymous |
Hit honeypot r.
|
Port Scan Hacking Exploited Host | |
| 🇫🇷 Hiigara |
connection attempt : 36.20.56.189 on port : tcp/5986 (WinRM HTTPS)
|
Port Scan | |
| Anonymous |
Try to connect to Port_Scan_5900_stealth
|
Port Scan | |
| 🇵🇱 sefinek.net |
Honeypot hit: Empty payload (likely service probe); 5969 [1], 5968 [1], 6000 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇨🇭 Elysium Security |
Mass port scanning on a whole network
|
Port Scan | |
| 🇺🇸 shabi |
UFW Blocked [5985/TCP]
Source: 36.20.56.189:61234
TTL: 240
Lenth: 44
TOS: 0x00
|
Port Scan | |
| 🇵🇱 derester |
Hit MikroTik Honeypot port: 5900 (VNC)
|
Port Scan Brute-Force | |
| 🇩🇪 Mario Silber |
*Port Scan* detected from 36.20.56.189 (CN/China/-).
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown