AS136188 NINGBO, ZHEJIANG Province, P.R.China.

Abuse reported against IP addresses announced by autonomous system 136188. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 20 IP addresses in AS136188 NINGBO, ZHEJIANG Province, P.R.China. were reported for abuse, in 103 reports altogether. 1 of them (5%) has a confidence score of 75 or more and is on the default blocklist. The most common reasons were Web Spam, Command & Control and Bad Web Bot. Most of them are in China.

20addresses reported, 30 days

1on the default blocklist (75+)

103reports against them

1 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇨🇳114.66.37.74	79	13	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	1 h
🇨🇳110.42.49.242	71	11	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	1 h
🇨🇳114.66.42.81	71	9	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	7 h
🇨🇳114.66.42.35	60	8	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	9 h
🇨🇳122.246.8.150	59	10	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇨🇳114.66.37.36	57	8	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇨🇳183.136.206.215	56	7	DNS Poisoning Phishing Web Spam Email Spam Port Scan SQL Injection Spoofing Bad Web Bot Exploited Host Web App Attack SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	3 h
🇨🇳114.66.54.249	50	7	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	9 h
🇨🇳110.42.102.145	48	8	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇨🇳183.136.133.29	40	3	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	7 h
🇨🇳110.42.51.242	31	3	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	19 h
🇨🇳110.42.51.163	31	3	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	19 h
🇨🇳114.66.37.235	29	6	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	41 h
🇨🇳114.66.34.171	27	1	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	1 h
🇨🇳114.66.12.96	27	1	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	1 h
🇨🇳114.66.29.147	27	1	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	7 h
🇨🇳110.42.101.247	18	1	Brute-Force SSH Malware Distribution	9 h
🇨🇳110.42.51.199	14	1	Web Spam Port Scan Bad Web Bot	13 h
🇨🇳122.246.4.30	14	1	Web Spam Port Scan Bad Web Bot	13 h
🇨🇳114.66.48.203	14	1	Web Spam Port Scan Bad Web Bot	19 h

What they were reported for

Where they are

🇨🇳 China20

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 12 minutes ago.