AbuseIPDB » 180.97.90.143

180.97.90.143 was found in our database!

This IP was reported 22,753 times. Confidence of Abuse is 100%: ?

100%

ISP	Chinanet Jiangsu Province Network
Usage Type	Commercial
ASN	AS140292
Domain Name	chinatelecom.cn
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 180.97.90.143

Whois 180.97.90.143

IP Abuse Reports for 180.97.90.143:

This IP address has been reported a total of 22,753 times from 619 distinct sources. 180.97.90.143 was first reported on November 22nd 2020, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Dampen59	2025-03-16 01:04:16 (4 minutes ago)	(smtpauth) Failed SMTP AUTH login from 180.97.90.143 (CN/China/-): 5 in the last 3600 secs; Ports: * ... show more(smtpauth) Failed SMTP AUTH login from 180.97.90.143 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-03-16 00:14:48 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:46142: 535 Incorrect authentication data (set_id=justine) 2025-03-16 00:21:48 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:33827: 535 Incorrect authentication data ([email protected]) 2025-03-16 00:33:14 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:57505: 535 Incorrect authentication data ([email protected]) 2025-03-16 00:42:07 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:47244: 535 Incorrect authentication data ([email protected]) 2025-03-16 01:04:11 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:36747: 535 Incorrect authentication data ([email protected]) show less	Port Scan
rtbh.com.tr	2025-03-15 20:48:55 (4 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
GeorgieNAS77	2025-03-15 16:40:23 (8 hours ago)	...	Brute-Force
Vieira Filho	2025-03-15 14:18:29 (10 hours ago)	Mar 14 20:06:04 vieirafilho postfix/smtps/smtpd[1735]: warning: unknown[180.97.90.143]: SASL LOGIN a ... show moreMar 14 20:06:04 vieirafilho postfix/smtps/smtpd[1735]: warning: unknown[180.97.90.143]: SASL LOGIN authentication failed: authentication failure Mar 15 11:18:29 vieirafilho postfix/smtps/smtpd[19963]: warning: unknown[180.97.90.143]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force SSH
lavnet.net	2025-03-15 13:18:01 (11 hours ago)	Mar 15 13:17:59 angela postfix/smtps/smtpd[3802094]: warning: unknown[180.97.90.143]: SASL LOGIN aut ... show moreMar 15 13:17:59 angela postfix/smtps/smtpd[3802094]: warning: unknown[180.97.90.143]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Mar 15 13:18:00 angela postfix/smtps/smtpd[3802094]: lost connection after AUTH from unknown[180.97.90.143] Mar 15 13:18:00 angela postfix/smtps/smtpd[3802094]: disconnect from unknown[180.97.90.143] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force Web App Attack
lintelcorpo	2025-03-15 09:09:26 (15 hours ago)	Yesterday, this IP was the source of 10 failed authentications targeting 8 unique usernames on our M ... show moreYesterday, this IP was the source of 10 failed authentications targeting 8 unique usernames on our Mail Server at 216.21.193.119. show less	Brute-Force
Dampen59	2025-03-15 08:32:48 (16 hours ago)	(smtpauth) Failed SMTP AUTH login from 180.97.90.143 (CN/China/-): 5 in the last 3600 secs; Ports: * ... show more(smtpauth) Failed SMTP AUTH login from 180.97.90.143 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-03-15 07:45:38 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:43102: 535 Incorrect authentication data ([email protected]) 2025-03-15 07:52:18 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:33289: 535 Incorrect authentication data ([email protected]) 2025-03-15 08:10:36 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:56227: 535 Incorrect authentication data (set_id=direction) 2025-03-15 08:18:19 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:51030: 535 Incorrect authentication data ([email protected]) 2025-03-15 08:32:45 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:35583: 535 Incorrect authentication data (set_id=m6) show less	Port Scan
singertc	2025-03-15 08:02:27 (17 hours ago)	2025-03-15 09:02:27 H=([180.97.90.143]) [180.97.90.143] F=<[email protected]> rejected RCP ... show more2025-03-15 09:02:27 H=([180.97.90.143]) [180.97.90.143] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted 2025-03-15 09:02:27 H=([180.97.90.143]) [180.97.90.143] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted ... show less	Email Spam Hacking
Dampen59	2025-03-15 07:25:07 (17 hours ago)	(smtpauth) Failed SMTP AUTH login from 180.97.90.143 (CN/China/-): 5 in the last 3600 secs; Ports: * ... show more(smtpauth) Failed SMTP AUTH login from 180.97.90.143 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-03-15 06:43:22 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:34556: 535 Incorrect authentication data ([email protected]) 2025-03-15 06:48:51 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:49872: 535 Incorrect authentication data (set_id=rainer) 2025-03-15 07:01:50 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:58654: 535 Incorrect authentication data ([email protected]) 2025-03-15 07:18:24 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:49304: 535 Incorrect authentication data (set_id=rusti) 2025-03-15 07:25:04 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:40357: 535 Incorrect authentication data (set_id=fabio) show less	Port Scan
Anonymous	2025-03-15 06:28:15 (18 hours ago)	Ports: 25,2525,465,587,2525; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Dampen59	2025-03-15 06:04:02 (19 hours ago)	(smtpauth) Failed SMTP AUTH login from 180.97.90.143 (CN/China/-): 5 in the last 3600 secs; Ports: * ... show more(smtpauth) Failed SMTP AUTH login from 180.97.90.143 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-03-15 05:16:28 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:40059: 535 Incorrect authentication data ([email protected]) 2025-03-15 05:19:40 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:49283: 535 Incorrect authentication data ([email protected]) 2025-03-15 05:22:39 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:58442: 535 Incorrect authentication data (set_id=bde) 2025-03-15 05:25:17 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:37081: 535 Incorrect authentication data (set_id=annabelle) 2025-03-15 06:03:59 dovecot_plain authenticator failed for ([180.97.90.143]) [180.97.90.143]:33204: 535 Incorrect authentication data ([email protected]) show less	Port Scan
Hobby Bob	2025-03-15 03:43:54 (21 hours ago)	Mar 15 03:43:54 mail postfix/smtps/smtpd[3094239]: warning: unknown[180.97.90.143]: SASL PLAIN authe ... show moreMar 15 03:43:54 mail postfix/smtps/smtpd[3094239]: warning: unknown[180.97.90.143]: SASL PLAIN authentication failed: show less	Hacking Brute-Force
Anonymous	2025-03-15 00:18:14 (1 day ago)	IMAP password guessing	Brute-Force
rtbh.com.tr	2025-03-14 20:48:57 (1 day ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-03-14 18:20:00 (1 day ago)	SMTP brute force - auth failed	Brute-Force Exploited Host