180.158.104.67
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET SHANGHAI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4812
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Shanghai, Shanghai
Abuse Reports
Total reports
20 from
14 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇸 Smel |
SQL/MH Probe, Scan, Hack -
|
Port Scan Hacking SQL Injection | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 1433
|
Port Scan Hacking Exploited Host | |
| 🇭🇰 mutebot.net |
SRC=180.158.104.67, PROTO=TCP, SPT=49324, DPT=445
|
Port Scan | |
| 🇺🇸 HamSammich |
Automated sensor: 1 MSSQL connection/probe attempts over the last 24h (latest 2026-10-10T09:13Z).
|
Hacking Brute-Force | |
| 🇩🇪 reznekcs |
Blocked by UFW firewall
|
Brute-Force | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇺🇸 RAP |
2026-10-09 03:53:07 UTC Unauthorized activity to TCP port 445. SMB
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-09 00:28:41 UTC Unauthorized activity to TCP port 445. SMB
|
Port Scan | |
| Anonymous |
denied SMB access attempt. destination port 445.
|
Port Scan Hacking | |
| 🇱🇹 NotACaptcha |
Unauthorised access (Oct 8 05:50) SRC=180.158.104.67 LEN=40 TTL=240 ID=21925 TCP DPT=445 WINDOW=1024 SYN
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 RAP |
2026-09-29 00:50:17 UTC Unauthorized activity to TCP port 445. SMB
|
Port Scan | |
| 🇺🇸 MPL |
tcp/445 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 RAP |
2026-09-28 21:36:53 UTC Unauthorized activity to TCP port 445. SMB
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 41195
TTL: 242
Packet length: 40
TOS: 0x08
This report (for 180.158.104.67) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown