180.163.30.85

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
32% Elevated
422 reports
67 reporters ยท latest 1 week ago
ISP
CHINANET SHANGHAI PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4811
Domain Name
chinatelecom.cn
Country
๐Ÿ‡จ๐Ÿ‡ณ China
City
Shanghai, Shanghai
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
422 from 67 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 4 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 3 ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands 2
Most common categories Bad Web Bot 6 Port Scan 3 Hacking 3 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 4 application-level events across 2 source port(s). Sensor(s): Tanner.
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Not following 301 redirects โ€” wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 | 2026-11-03 10:44 UTC
Bad Web Bot
Anonymous
denied traffic to a honeypot network. destination port 80.
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ 1gz
Bad Web Bot
Anonymous
denied traffic to a honeypot network. destination port 80.
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ fortypoundhead
Banned IP Address
Hacking Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ ipoac.nl
dns.ipoac.nl:443 180.163.30.85 - - [10/Oct/2026:16:10:24 +0200] dns.ipoac.nl "GET /dns-query HTTP/1.1" 404 7231 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
Bad Web Bot
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Not following 301 redirects โ€” wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Bad Web Bot
๐Ÿ‡บ๐Ÿ‡ธ 1gz
Bad Web Bot
๐Ÿ‡ณ๐Ÿ‡ฑ tr1n
Bad Web Bot
๐Ÿ‡จ๐Ÿ‡ณ SA19999
Auto-report: cwp:attack_Laravel framework Information | sources=["peer-sync"] | Fox honeypot cluster
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช SA19999
Auto-report: cwp:attack_Laravel framework Information | sources=["cwp"] | Fox honeypot cluster
Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ Zandro
distributed harvester
Bad Web Bot Exploited Host
๐Ÿ‡ฉ๐Ÿ‡ช Reinhard
Unknown activity, but too many attacks with too many users.
Hacking
๐Ÿ‡ฎ๐Ÿ‡ฉ David Koswari
REQ_BLOCKED_ACL
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ท๐Ÿ‡ด 193.32.162.15
๐Ÿ‡ง๐Ÿ‡ท 177.84.11.52
๐Ÿ‡บ๐Ÿ‡ธ 172.86.87.10
๐Ÿ‡บ๐Ÿ‡พ 167.62.1.129
๐Ÿ‡ต๐Ÿ‡ฐ 103.31.93.153
๐Ÿ‡ช๐Ÿ‡ธ 93.93.112.98
๐Ÿ‡ซ๐Ÿ‡ฎ 89.47.55.96
๐Ÿ‡จ๐Ÿ‡ฆ 70.51.153.89
๐Ÿ‡ง๐Ÿ‡ช 35.210.237.62
๐Ÿ‡ฐ๐Ÿ‡ฟ 185.97.59.49
๐Ÿ‡จ๐Ÿ‡ฑ 181.43.149.21
๐Ÿ‡บ๐Ÿ‡ธ 147.185.132.168
๐Ÿ‡จ๐Ÿ‡ณ 117.34.125.173
๐Ÿ‡จ๐Ÿ‡ญ 104.251.180.156
๐Ÿ‡ง๐Ÿ‡ญ 89.148.42.194
๐Ÿ‡บ๐Ÿ‡ฆ 81.162.240.241
๐Ÿ‡บ๐Ÿ‡ธ 71.76.203.71
๐Ÿ‡บ๐Ÿ‡ธ 64.62.197.139
๐Ÿ‡บ๐Ÿ‡ธ 45.42.40.74
๐Ÿ‡ง๐Ÿ‡ช 35.210.132.194
feedback