JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.76.112.91

180.76.112.91 was found in our database!

This IP was reported 2,648 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.76.112.91

Whois 180.76.112.91

IP Abuse Reports for 180.76.112.91:

This IP address has been reported a total of 2,648 times from 854 distinct sources. 180.76.112.91 was first reported on February 9th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 rjdefrancisco	2026-09-16 07:06:33 (4 hours ago)	Unwanted traffic detected by honeypot on September 15, 2026: brute force and hacking attacks (1 over ... show more Unwanted traffic detected by honeypot on September 15, 2026: brute force and hacking attacks (1 over ssh). show less	Port Scan Brute-Force SSH
🇧🇷 noconex	2026-09-16 06:42:04 (4 hours ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 180.76.112 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 180.76.112.91 show less	Port Scan Brute-Force SSH
🇹🇭 Sawasdee	2026-09-16 06:33:15 (4 hours ago)	SSH break in attempt ...	SSH
🇺🇸 uira.live	2026-09-16 03:46:02 (7 hours ago)	Sep 16 04:45:55 mail sshd[1412670]: Failed password for root from 180.76.112.91 port 46932 ssh2 Sep ... show more Sep 16 04:45:55 mail sshd[1412670]: Failed password for root from 180.76.112.91 port 46932 ssh2 Sep 16 04:45:59 mail sshd[1423275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.112.91 user=root Sep 16 04:46:01 mail sshd[1423275]: Failed password for root from 180.76.112.91 port 51124 ssh2 ... show less	Brute-Force SSH
🇪🇸 h3st4k3r	2026-09-16 02:17:45 (8 hours ago)	Malicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: ... show more Malicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: AS38365 Beijing Baidu Netcom Science and Technology Co., Ltd., Region: Beijing, Log: 2026-09-16T04:17:43.847818 02:00 Administracion sshd[3567022]: Failed password for root from 180.76.112.91 port 59994 ssh2, Abuse Score: 100, Total Reports: 1053 show less	SSH
🇬🇧 andypiper	2026-09-16 01:00:21 (10 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 COMPLEX	2026-09-16 00:16:27 (10 hours ago)	Banned by Multi Agent · node …whb4 · attempts=5 · SSH brute-force / scan	Brute-Force SSH
🇮🇩 j3rr7	2026-09-15 23:31:04 (11 hours ago)	2026-09-15T23:28:48.406887+00:00 [SERVER] sshd-session[858084]: Connection closed by authenticating ... show more 2026-09-15T23:28:48.406887+00:00 [SERVER] sshd-session[858084]: Connection closed by authenticating user [USER] 180.76.112.91 port 48074 [preauth] 2026-09-15T23:30:59.524899+00:00 [SERVER] sshd-session[858230]: Connection closed by authenticating user [USER] 180.76.112.91 port 44922 [preauth] 2026-09-15T23:31:03.240023+00:00 [SERVER] sshd-session[858245]: Connection closed by authenticating user [USER] 180.76.112.91 port 53268 [preauth] show less	Brute-Force SSH
🇮🇹 alph44	2026-09-15 23:26:13 (11 hours ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
Anonymous	2026-09-15 22:20:43 (12 hours ago)	Sep 16 00:20:40 fi7 sshd[1415380]: Failed password for root from 180.76.112.91 port 41100 ssh2 Sep 1 ... show more Sep 16 00:20:40 fi7 sshd[1415380]: Failed password for root from 180.76.112.91 port 41100 ssh2 Sep 16 00:20:41 fi7 sshd[1415382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.112.91 user=root Sep 16 00:20:43 fi7 sshd[1415382]: Failed password for root from 180.76.112.91 port 46148 ssh2 ... show less	Brute-Force SSH
🇫🇷 Coco Bongo	2026-09-15 16:47:00 (18 hours ago)	2026-09-15T18:46:57.793168+02:00 [redacted] sshd[42885]: pam_unix(sshd:auth): authentication failure ... show more 2026-09-15T18:46:57.793168+02:00 [redacted] sshd[42885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.112.91 user=root 2026-09-15T18:46:59.660162+02:0 ... show less	Brute-Force SSH
🇩🇪 remo	2026-09-15 16:26:11 (18 hours ago)	Sep 15 18:25:06 dev0-dcde-rnet sshd[10476]: Failed password for root from 180.76.112.91 port 39424 s ... show more Sep 15 18:25:06 dev0-dcde-rnet sshd[10476]: Failed password for root from 180.76.112.91 port 39424 ssh2 Sep 15 18:25:11 dev0-dcde-rnet sshd[10478]: Failed password for root from 180.76.112.91 port 42102 ssh2 show less	Brute-Force SSH
🇹🇷 neron	2026-09-15 16:14:33 (18 hours ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 D3vNu11	2026-09-15 13:51:13 (21 hours ago)	Level: (LOW): Known Attacker via Cowrie IOC Country: China 3x -> Target Country: Germany SSH	Hacking Brute-Force SSH
Anonymous	2026-09-15 12:48:26 (22 hours ago)	180.76.112.91 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more 180.76.112.91 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 15 08:48:21 server5 sshd[9980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.112.91 user=root Sep 15 08:45:10 server5 sshd[9317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.238 user=root Sep 15 08:45:12 server5 sshd[9317]: Failed password for root from 213.209.159.238 port 49984 ssh2 Sep 15 08:42:45 server5 sshd[8428]: Failed password for root from 188.128.63.114 port 54370 ssh2 Sep 15 08:47:23 server5 sshd[9773]: Failed password for root from 177.126.90.235 port 57574 ssh2 IP Addresses Blocked: show less	Brute-Force

Showing 1 to 15 of 2648 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 47.79.201.187

🇫🇮 35.228.106.186

🇦🇺 194.193.175.82

🇦🇷 181.45.135.214

🇹🇼 114.38.14.18

🇱🇹 91.244.197.105

🇺🇦 91.225.162.188

🇲🇻 69.94.84.9

🇮🇳 66.116.224.33

🇧🇷 35.247.208.59

🇬🇧 2a06:4880:2000::36

🇹🇳 196.238.17.100

🇺🇦 194.44.229.213

🇺🇸 104.22.100.180

🇧🇩 103.166.59.157

🇫🇷 92.205.229.83

🇳🇱 77.239.124.215

🇺🇸 74.87.117.150

🇹🇭 34.15.170.245

🇺🇸 24.167.235.86