JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.95.231.99

180.95.231.99 was found in our database!

This IP was reported 223 times. Confidence of Abuse is 55%: ?

55%

ISP	China Unicom Gansu province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Lanzhou, Gansu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.95.231.99

Whois 180.95.231.99

IP Abuse Reports for 180.95.231.99:

This IP address has been reported a total of 223 times from 49 distinct sources. 180.95.231.99 was first reported on April 12th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-16 00:25:35 (1 day ago)	Blocked by UFW (TCP on 8030) Source port: 56968 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8030) Source port: 56968 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 180.95.231.99) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 LiftUp Hosting	2026-07-12 18:21:59 (4 days ago)	Honeypot hit: Large payload (1457 bytes); 5090 [1] TCP	Bad Web Bot
🇧🇬 MazenHost	2026-07-10 18:59:33 (6 days ago)	1783709972 - 07/10/2026 21:59:32 Host: 180.95.231.99/180.95.231.99 Port: 12346 TCP Blocked ...	Port Scan
🇯🇵 jay hung	2026-07-10 14:22:55 (6 days ago)	2026-07-10T14:22:54.416034+00:00 quarktech kernel: [2338033.442684] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-10T14:22:54.416034+00:00 quarktech kernel: [2338033.442684] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=180.95.231.99 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=42608 PROTO=TCP SPT=62695 DPT=10431 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇷🇺 DZBOT	2026-07-10 11:35:35 (6 days ago)	DZBOT. Brute-force users SMTP	Brute-Force
🇫🇮 6kilowatti	2026-07-09 02:59:41 (1 week ago)	2026-07-09T05:59:41.072496+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-07-09T05:59:41.072496+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=180.95.231.99 DST=10.0.0.30 LEN=44 TOS=0x00 PREC=0x00 TTL=226 ID=6339 PROTO=TCP SPT=21224 DPT=7779 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-07-06 07:22:29 (1 week ago)	tcp/10000 (2 or more attempts)	Port Scan
Anonymous	2026-06-30 15:21:48 (2 weeks ago)	Honeypot hit: HTTP/1.1 request on 1088 GET / Accept: /; 1088 [1] TCP Reported by: https://github. ... show more Honeypot hit: HTTP/1.1 request on 1088 GET / Accept: /; 1088 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-06-19 13:15:17 (3 weeks ago)	tcp/52230	Port Scan
🇺🇸 xmission.com	2026-06-18 11:45:10 (4 weeks ago)	Blocked by UFW (TCP on 26002) Source port: 54494 TTL: 237 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 26002) Source port: 54494 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 180.95.231.99) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-18 02:59:29 (4 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 xmission.com	2026-06-15 09:56:41 (1 month ago)	Blocked by UFW (TCP on 2001) Source port: 33166 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2001) Source port: 33166 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 180.95.231.99) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-11 06:38:18 (1 month ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇬🇧 PeravixGroup	2026-06-09 15:47:53 (1 month ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-08 09:41:46 (1 month ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 223 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 165.154.4.92

🇺🇸 139.144.135.236

🇻🇳 123.25.97.130

🇨🇳 59.36.211.132

🇺🇸 5.78.140.151

🇰🇷 220.127.148.6

🇺🇸 195.184.76.190

🇳🇱 195.178.110.227

🇳🇱 193.176.31.237

🇮🇩 180.247.56.78

🇧🇷 177.0.238.190

🇵🇱 176.53.159.198

🇺🇸 162.240.218.183

🇺🇸 162.240.20.137

🇺🇸 162.217.100.196

🇺🇸 162.144.249.8

🇨🇳 116.168.104.161

🇻🇳 103.77.246.187

🇺🇸 91.242.125.131

🇳🇱 89.21.67.179