180.165.48.127
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET SHANGHAI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4812
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Shanghai, Shanghai
Abuse Reports
Total reports
69 from
59 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 rrn4444 |
$f2bV_matches
|
Brute-Force SSH | |
| Anonymous |
$f2bV_matches
|
Brute-Force SSH | |
| 🇪🇸 librebit |
Knockin' on Heaven's Door, SSH known crap
|
Brute-Force SSH | |
| 🇬🇧 sh97 |
uk01.vps: SSH Brute Force from 180.165.48.127 at 2026-11-11 05:03:16 +04
|
Brute-Force SSH | |
| 🇧🇷 paradoxnetworks |
|
Brute-Force SSH | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇩🇪 THYRAKLES_EINZELUNTERNEHMEN_NOAH_FINLEY WOLF |
systemd timer sync; fail2ban jail=sshd host=thyrakles.in-berlin.de ip=180.165.48.127; evidence=fail2ban log NOTICE Ban event
|
Brute-Force SSH | |
| 🇫🇮 tcivie |
|
Brute-Force SSH | |
| 🇩🇪 genclikfederasyonu.org |
fail2banned (ssh brute)
|
Brute-Force SSH | |
| 🇩🇪 lumi |
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-11-09T23:47:46Z
|
Brute-Force SSH | |
| 🇩🇪 formality |
Invalid user user from 180.165.48.127 port 9107
|
Brute-Force SSH | |
| 🇭🇺 kisbogdan |
endlessh: 15 connections ended in last one hour, totaling 0:14:01, average 0:00:56 per connection
|
Brute-Force SSH | |
| 🇭🇺 kisbogdan |
endlessh: 67 connections ended in last one hour, totaling 1:02:07, average 0:00:55 per connection
|
Brute-Force SSH | |
| 🇳🇱 COMPLEX |
Banned by Multi Agent · node …0hu3 · attempts=5 · SSH brute-force / scan
|
Brute-Force SSH | |
| 🇭🇺 kisbogdan |
endlessh: 162 connections ended in last one hour, totaling 0:52:26, average 0:00:19 per connection
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown