36.248.115.56

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
289 reports
143 reporters · latest 1 week ago
ISP
Fuzhou city, fujian provincial network of UNICOM
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
wo.com.cn
Country
🇨🇳 China
City
Fuzhou, Fujian
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
289 from 143 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 76 🇺🇸 United States of America 36 🇫🇷 France 21
Most common categories Brute-Force 261 Email Spam 50 Hacking 17 Port Scan 16 Exploited Host 12
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 lintelcorpo
Yesterday, this IP was the source of 7 failed authentications targeting 7 unique usernames on our Mail Server at 216.21.193.119.
Brute-Force
🇺🇸 ipblock.com
IPBlock protected site ID [3190-sm]. Brute force SMTP/POP/IMAP login attempts
Hacking Brute-Force
🇩🇪 digico_mt
Port Scan
🇮🇩 xveil
2026-11-06T13:38:55.734102 mail-honeypot postfix/submission/smtpd[24333]: warning: unknown[36.248.115.56]: SASL LOGIN authentication failed: authentication failure ...
Brute-Force
🇩🇪 Paul Smith
Email Auth Brute force attack 3/3 in last day
Brute-Force
🇺🇸 AEITS
Fail2Ban eMail
Brute-Force
🇩🇰 powerhostingdk
[mailserver] CrowdSec detected mailscanner/high-risk-country-spam-aggregate (9 events). Automated abuse report.
Brute-Force
🇩🇪 Ilop
[mail.il] Nov 6 03:08:16 mailhost postfix/smtps/smtpd[9712]: warning: unknown[36.248.115.56]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...
Email Spam Brute-Force
🇸🇪 triplecode
Reported from hMailServer
Email Spam
Anonymous
Postfix SASL auth attack
Brute-Force Email Spam
🇷🇴 clauss
IP reached maximum auth failures for a one day block
Brute-Force
🇬🇧 andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
🇩🇪 Sparxx
Brute-Force
Anonymous
36.248.115.56 detected on srv01
Brute-Force
🇩🇪 mnpx
SMTP login attempt (2×) over 1h:37m; first seen here 2026-10-29T17:41Z
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇦 45.198.224.31
🇦🇷 216.28.135.243
🇺🇸 205.210.31.47
🇫🇷 185.202.108.167
🇺🇸 143.42.1.71
🇭🇰 118.193.47.223
🇺🇸 100.28.222.253
🇺🇸 47.77.219.25
🇨🇭 209.99.190.186
🇺🇸 195.184.76.185
🇳🇱 193.176.31.205
🇳🇱 193.176.31.200
🇺🇸 147.185.132.139
🇧🇷 177.75.58.134
🇧🇷 167.249.241.183
🇬🇧 165.227.227.105
🇺🇸 162.154.76.186
🇷🇴 92.118.39.64
🇺🇸 64.202.191.109
🇿🇦 40.123.240.128
feedback