91.180.30.96
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Proximus NV
- Usage Type
- Fixed Line ISP
- ASN
- AS5432
- Hostname(s)
- 96.30-180-91.adsl-dyn.isp.belgacom.be
- Domain Name
- proximus.com
- Country
- 🇧🇪 Belgium
- City
- Brussels, Brussels Capital
Abuse Reports
Total reports
11 from
11 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target ports and 3 source port(s). Ports: 22/SSH, 23/Telnet. Sensors: Cowrie.
|
Port Scan | |
| 🇳🇱 Nrbrtkls |
SSH honeypot (endlessh tarpit) connection from 91.180.30.96
|
SSH Port Scan | |
| 🇳🇱 376yqrz3a |
Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=22,23
|
Port Scan Hacking | |
| Anonymous |
Blocked by UFW [23/tcp] | SPT: 50782 | TTL: 51 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| 🇩🇪 D3vNu11 |
Level: (LOW): Reputation Unknown via Cowrie IOC Country: Belgium 2x -> Target Country: Finnland SSH
|
Brute-Force SSH | |
| Anonymous |
1793150028 - 10/28/2026 02:13:48 Host: 91.180.30.96/91.180.30.96 Port: 22 TCP Blocked
...
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-10-27 22:57:56 | LAST=2026-10-27 22:57:56. Last seen 2026-10-27 22:57:56.
|
Port Scan | |
| 🇺🇸 avgsmoe |
Connection to a honeypot port. Automated report (firemon).
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:36656 dst:23
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown