JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.95.231.68

180.95.231.68 was found in our database!

This IP was reported 224 times. Confidence of Abuse is 53%: ?

53%

ISP	China Unicom Gansu province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Lanzhou, Gansu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.95.231.68

Whois 180.95.231.68

IP Abuse Reports for 180.95.231.68:

This IP address has been reported a total of 224 times from 60 distinct sources. 180.95.231.68 was first reported on January 4th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-30 13:09:06 (1 day ago)	Blocked by UFW (TCP on 2147) Source port: 62272 TTL: 237 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 2147) Source port: 62272 TTL: 237 Packet length: 44 TOS: 0x00 This report (for 180.95.231.68) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-30 02:10:41 (2 days ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-29 03:34:46 (3 days ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 xmission.com	2026-06-24 23:39:39 (1 week ago)	Blocked by UFW (TCP on 4433) Source port: 34341 TTL: 236 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 4433) Source port: 34341 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 180.95.231.68) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-06-24 05:43:51 (1 week ago)	2026-06-24T08:43:51.610702+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-06-24T08:43:51.610702+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=180.95.231.68 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=228 ID=23304 PROTO=TCP SPT=32351 DPT=27007 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-06-24 05:01:06 (1 week ago)	tcp/12207	Port Scan
🇬🇧 PeravixGroup	2026-06-23 03:35:25 (1 week ago)	Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. A ... show more Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud show less	DDoS Attack Hacking
🇺🇸 MPL	2026-06-17 23:38:04 (2 weeks ago)	tcp/10008	Port Scan
🇵🇱 sefinek.net	2026-06-14 02:33:03 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 PeravixGroup	2026-06-09 22:47:14 (3 weeks ago)	Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MED ... show more Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇺🇸 xmission.com	2026-06-03 15:35:37 (4 weeks ago)	Blocked by UFW (TCP on 3352) Source port: 19620 TTL: 237 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 3352) Source port: 19620 TTL: 237 Packet length: 44 TOS: 0x00 This report (for 180.95.231.68) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇪 SkyDancer	2026-06-01 17:15:33 (1 month ago)	Multiple intrusion attempts via RDP. Attack automatically blocked by SkyDancer Ai(RDP-X).	Hacking Brute-Force
🇬🇧 PeravixGroup	2026-06-01 14:03:56 (1 month ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 MPL	2026-06-01 06:07:13 (1 month ago)	tcp/9092 (2 or more attempts)	Port Scan
🇬🇧 PeravixGroup	2026-05-31 23:53:06 (1 month ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 224 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.113

🇺🇸 192.253.209.20

🇸🇬 103.187.146.72

🇻🇳 103.75.182.108

🇺🇸 102.129.234.177

🇺🇸 66.132.172.126

🇩🇪 43.157.27.183

🇧🇪 34.79.223.43

🇫🇷 2603:1026:1101:2::14

🇺🇸 157.230.228.1

🇺🇸 157.230.180.226

🇳🇱 138.226.239.31

🇺🇸 107.150.105.116

🇨🇳 101.89.141.184

🇨🇦 85.217.149.36

🇫🇮 77.105.161.120

🇺🇸 73.222.233.25

🇺🇸 66.132.186.166

🇨🇿 217.75.222.121

🇭🇰 172.253.6.30