JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.95.231.7

180.95.231.7 was found in our database!

This IP was reported 209 times. Confidence of Abuse is 54%: ?

54%

ISP	China Unicom Gansu province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Lanzhou, Gansu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.95.231.7

Whois 180.95.231.7

IP Abuse Reports for 180.95.231.7:

This IP address has been reported a total of 209 times from 53 distinct sources. 180.95.231.7 was first reported on April 16th 2021, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 iNetWorker	2026-07-13 00:33:49 (15 hours ago)	trying to access non-authorized port	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-11 06:15:53 (2 days ago)	Honeypot hit: HTTP/1.1 request on 10414 GET / Accept: /; 10414 [1] TCP	Web App Attack
🇺🇸 xmission.com	2026-07-07 15:15:26 (6 days ago)	Blocked by UFW (TCP on 3000) Source port: 31087 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 3000) Source port: 31087 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 180.95.231.7) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-03 14:51:55 (1 week ago)	Blocked by UFW (TCP on 1022) Source port: 12548 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1022) Source port: 12548 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 180.95.231.7) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-07-02 01:52:08 (1 week ago)	tcp/9700	Port Scan
🇺🇸 MPL	2026-06-30 02:50:35 (1 week ago)	tcp/555	Port Scan
🇧🇷 ICS Labs	2026-06-23 19:29:24 (2 weeks ago)	ICS Labs identified 180.95.231.7 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇫🇷 Petre 21_ip	2026-06-21 06:57:25 (3 weeks ago)	2026-06-21T08:57:24.455632+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-21T08:57:24.455632+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=180.95.231.7 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=37119 PROTO=TCP SPT=28118 DPT=9151 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 6kilowatti	2026-06-20 07:40:11 (3 weeks ago)	2026-06-20T10:40:10.514905+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-20T10:40:10.514905+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=180.95.231.7 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=228 ID=51310 PROTO=TCP SPT=38704 DPT=7288 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 TheHoneyPotter	2026-06-20 05:51:02 (3 weeks ago)	Honeypot [fc-honeypot]: Unauthorized traffic (16 bytes of payload); 2114 [1] TCP Reported by: https: ... show more Honeypot [fc-honeypot]: Unauthorized traffic (16 bytes of payload); 2114 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-06-17 05:37:31 (3 weeks ago)	Honeypot hit: HTTP/1.1 request on 17077 GET / Accept: /; 17077 [1] TCP Reported by: https://githu ... show more Honeypot hit: HTTP/1.1 request on 17077 GET / Accept: /; 17077 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 xmission.com	2026-06-12 18:28:29 (1 month ago)	Blocked by UFW (TCP on 7547) Source port: 22495 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 7547) Source port: 22495 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 180.95.231.7) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-04 22:34:37 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-06-02 01:48:29 (1 month ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 MPL	2026-05-29 00:42:28 (1 month ago)	tcp/12349 (2 or more attempts)	Port Scan

Showing 1 to 15 of 209 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 58.152.42.174

🇪🇸 47.59.205.56

🇰🇷 1.235.192.214

🇨🇳 220.180.249.165

🇲🇽 187.216.224.85

🇹🇭 182.53.74.117

🇳🇱 176.65.148.38

🇵🇱 176.53.159.198

🇦🇹 159.100.25.156

🇮🇳 112.196.54.182

🇫🇮 77.105.130.18

🇹🇭 49.49.231.5

🇧🇷 45.205.1.240

🇳🇱 45.198.224.244

🇨🇳 39.107.136.130

🇸🇬 13.76.211.167

🇮🇳 202.153.46.43

🇵🇱 194.180.48.31

🇬🇧 193.32.209.247

🇦🇷 186.148.224.183