JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.102.22.96

180.102.22.96 was found in our database!

This IP was reported 617 times. Confidence of Abuse is 1%: ?

ISP	Chinanet Jiangsu Province Network
Usage Type	Commercial
ASN	AS134756
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.102.22.96

Whois 180.102.22.96

IP Abuse Reports for 180.102.22.96:

This IP address has been reported a total of 617 times from 327 distinct sources. 180.102.22.96 was first reported on March 17th 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 QSC-Sentinel	2026-05-20 20:46:05 (4 weeks ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇳🇱 clowdy2020	2026-04-16 14:45:28 (2 months ago)	SSH brute-force detected by fail2ban. 2026-03-30T17:57:42.495621+00:00 69b3cd171f73753a1351574e sshd ... show more SSH brute-force detected by fail2ban. 2026-03-30T17:57:42.495621+00:00 69b3cd171f73753a1351574e sshd[569284]: Failed password for root from 180.102.22.96 port 37960 ssh2 2026-03-30T18:02:35.599440+00:00 69b3cd171f73753a1351574e sshd[569361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.102.22.96 user=root 2026-03-30T18:02:37.419039+00:00 69b3cd171f73753a1351574e sshd[569361]: Failed password for root from 180.102.22.96 port 40952 ssh2 show less	Brute-Force SSH
🇳🇱 clowdy2020	2026-04-13 13:13:50 (2 months ago)	SSH brute-force detected by fail2ban. 2026-03-30T17:57:42.495621+00:00 69b3cd171f73753a1351574e sshd ... show more SSH brute-force detected by fail2ban. 2026-03-30T17:57:42.495621+00:00 69b3cd171f73753a1351574e sshd[569284]: Failed password for root from 180.102.22.96 port 37960 ssh2 2026-03-30T18:02:35.599440+00:00 69b3cd171f73753a1351574e sshd[569361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.102.22.96 user=root 2026-03-30T18:02:37.419039+00:00 69b3cd171f73753a1351574e sshd[569361]: Failed password for root from 180.102.22.96 port 40952 ssh2 show less	Brute-Force SSH
🇺🇸 Lezetho	2026-04-11 18:39:58 (2 months ago)	SSH brute force - invalid user attempt	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-11 00:32:05 (2 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/180.102.22.96	SSH
🇩🇪 EnthecSolutions	2026-04-10 22:01:50 (2 months ago)	Detected by Enthec Solutions. \| Attempts: 51 in 24h \| Target port: 22	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-10 15:17:35 (2 months ago)	180.102.22.96 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more 180.102.22.96 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 10 10:17:21 14157 sshd[12781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.102.22.96 user=root Apr 10 10:15:35 14157 sshd[12611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.189.27.179 user=root Apr 10 10:15:37 14157 sshd[12611]: Failed password for root from 107.189.27.179 port 37594 ssh2 Apr 10 10:10:00 14157 sshd[12166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.125.102.6 user=root Apr 10 10:10:03 14157 sshd[12166]: Failed password for root from 154.125.102.6 port 40477 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-04-10 12:51:41 (2 months ago)	2026-04-10T14:46:07.860121+02:00 gw-de40-01.guestgw.net sshd[933778]: Disconnected from authenticati ... show more 2026-04-10T14:46:07.860121+02:00 gw-de40-01.guestgw.net sshd[933778]: Disconnected from authenticating user root 180.102.22.96 port 40344 [preauth] 2026-04-10T14:48:15.611691+02:00 gw-de40-01.guestgw.net sshd[934418]: Disconnected from authenticating user root 180.102.22.96 port 38580 [preauth] 2026-04-10T14:49:39.177514+02:00 gw-de40-01.guestgw.net sshd[934824]: Disconnected from authenticating user root 180.102.22.96 port 43204 [preauth] 2026-04-10T14:51:39.653071+02:00 gw-de40-01.guestgw.net sshd[935474]: Invalid user ubuntu from 180.102.22.96 port 60034 2026-04-10T14:51:40.031662+02:00 gw-de40-01.guestgw.net sshd[935474]: Disconnected from invalid user ubuntu 180.102.22.96 port 60034 [preauth] show less	Brute-Force
🇺🇸 kathanp	2026-04-10 12:21:38 (2 months ago)	Apr 10 12:16:20 nova sshd[560112]: Invalid user claude from 180.102.22.96 port 58396 Apr 10 12:18:27 ... show more Apr 10 12:16:20 nova sshd[560112]: Invalid user claude from 180.102.22.96 port 58396 Apr 10 12:18:27 nova sshd[560121]: Invalid user ftp_user from 180.102.22.96 port 59090 Apr 10 12:21:37 nova sshd[560129]: Invalid user steam from 180.102.22.96 port 42756 show less	Brute-Force SSH
Anonymous	2026-04-10 11:52:50 (2 months ago)	$f2bV_matches	Brute-Force SSH
🇮🇹 alph44	2026-04-10 09:43:55 (2 months ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇺🇸 FABIO EGAS	2026-04-10 09:39:07 (2 months ago)	(sshd) Failed SSH login from 180.102.22.96 (CN/China/-)	Brute-Force SSH
🇳🇱 trivox.sh	2026-04-10 09:38:49 (2 months ago)	2026-04-10T09:37:04.803984+00:00 ws1.trivox.sh sshd-session[1068674]: pam_unix(sshd:auth): authentic ... show more 2026-04-10T09:37:04.803984+00:00 ws1.trivox.sh sshd-session[1068674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.102.22.96 2026-04-10T09:37:06.841906+00:00 ws1.trivox.sh sshd-session[1068674]: Failed password for invalid user testuser from 180.102.22.96 port 40412 ssh2 2026-04-10T09:37:08.131259+00:00 ws1.trivox.sh sshd-session[1068674]: Disconnected from invalid user testuser 180.102.22.96 port 40412 [preauth] 2026-04-10T09:38:49.093105+00:00 ws1.trivox.sh sshd-session[1068762]: Connection closed by 180.102.22.96 port 41484 [preauth] ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-04-10 09:20:07 (2 months ago)	Apr 10 03:07:34 tweety sshd[3084609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Apr 10 03:07:34 tweety sshd[3084609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.102.22.96 Apr 10 03:07:36 tweety sshd[3084609]: Failed password for invalid user opc from 180.102.22.96 port 58548 ssh2 Apr 10 03:20:06 tweety sshd[3086422]: Invalid user bitnami from 180.102.22.96 port 60474 ... show less	Brute-Force SSH
🇧🇷 helix	2026-04-10 09:07:24 (2 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH

Showing 1 to 15 of 617 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.62.156.58

🇸🇬 2a09:bac1:6520:8::3c1:25

🇺🇸 2001:19f0:6001:30ab:5400:5ff:fe87:2a5e

🇪🇸 212.227.235.203

🇳🇱 193.176.31.211

🇦🇷 181.23.84.240

🇺🇸 178.93.52.15

🇬🇧 167.99.197.34

🇺🇸 162.216.149.98

🇸🇬 129.226.152.67

🇮🇶 65.20.137.173

🇺🇸 64.23.161.101

🇨🇦 40.85.241.15

🇩🇪 37.228.164.91

🇰🇷 222.117.176.58

🇺🇸 165.154.162.111

🇱🇹 81.30.98.142

🇱🇹 77.90.185.97

🇺🇸 43.130.33.245

🇺🇸 20.14.73.63