JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

128.1.132.145

Neutral Activity

Abuse confidence score ?

0% Low Risk

46 reports

28 reporters · latest 2 years ago

ISP	UCLOUD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇭🇰 Hong Kong
City	Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

128.1.132.145 has been reported 46 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 128.1.132.145

Export CSV

This IP address has been reported a total of 46 times from 28 distinct sources. 128.1.132.145 was first reported on February 17th 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 unhfree.net	2024-05-04 04:24:12 (2 years ago)		Brute-Force Exploited Host SSH
🇪🇸 saima	2024-05-01 00:00:05 (2 years ago)	Detected 96 times. SSH Brute-Force from address 128.1.132.145	Brute-Force SSH
🇮🇩 sireno	2024-04-30 14:20:28 (2 years ago)	Apr 30 14:20:24 localhost sshd[312990]: Invalid user jenkins from 128.1.132.145 port 54834 Apr 30 14 ... show more Apr 30 14:20:24 localhost sshd[312990]: Invalid user jenkins from 128.1.132.145 port 54834 Apr 30 14:20:24 localhost sshd[312990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 Apr 30 14:20:26 localhost sshd[312990]: Failed password for invalid user jenkins from 128.1.132.145 port 54834 ssh2 Apr 30 14:20:24 localhost sshd[312990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 Apr 30 14:20:26 localhost sshd[312990]: Failed password for invalid user jenkins from 128.1.132.145 port 54834 ssh2 ... show less	Brute-Force SSH
🇮🇩 sireno	2024-04-30 13:40:15 (2 years ago)	Apr 30 13:35:50 localhost sshd[308044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Apr 30 13:35:50 localhost sshd[308044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 user=postgres Apr 30 13:35:52 localhost sshd[308044]: Failed password for postgres from 128.1.132.145 port 36692 ssh2 Apr 30 13:40:12 localhost sshd[308715]: Invalid user minecraft from 128.1.132.145 port 25338 Apr 30 13:40:12 localhost sshd[308715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 Apr 30 13:40:14 localhost sshd[308715]: Failed password for invalid user minecraft from 128.1.132.145 port 25338 ssh2 ... show less	Brute-Force SSH
🇺🇸 yvoictra	2024-04-30 13:36:08 (2 years ago)	2024-04-30T15:36:07.671213+02:00 shasta sshd[4086985]: Invalid user postgres from 128.1.132.145 port ... show more 2024-04-30T15:36:07.671213+02:00 shasta sshd[4086985]: Invalid user postgres from 128.1.132.145 port 40504 ... show less	Brute-Force SSH
🇺🇸 PeravixGroup	2024-04-30 12:15:09 (2 years ago)	2024-04-30T13:14:55.542700 AdbuseHP sshd[400640]: pam_unix(sshd:auth): authentication failure; logna ... show more 2024-04-30T13:14:55.542700 AdbuseHP sshd[400640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 user=root 2024-04-30T13:14:57.556481 AdbuseHP sshd[400640]: Failed password for root from 128.1.132.145 port 61716 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2024-04-30 09:47:30 (2 years ago)	128.1.132.145 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 128.1.132.145 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 30 04:47:10 16405 sshd[17041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.70.112.96 user=root Apr 30 04:45:53 16405 sshd[16922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 user=root Apr 30 04:45:55 16405 sshd[16922]: Failed password for root from 128.1.132.145 port 18012 ssh2 Apr 30 04:38:49 16405 sshd[16442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 user=root Apr 30 04:38:50 16405 sshd[16442]: Failed password for root from 128.1.132.145 port 14958 ssh2 IP Addresses Blocked: 222.70.112.96 (CN/China/96.112.70.222.broad.xw.sh.dynamic.163data.com.cn) show less	Brute-Force SSH
🇩🇪 ITSNF	2024-04-30 09:07:59 (2 years ago)	FFM	Brute-Force SSH
🇩🇪 MrIPBreaker	2024-04-30 08:48:27 (2 years ago)	Apr 30 10:24:36 vmd80284 sshd[1569515]: Invalid user himanshu from 128.1.132.145 port 16540 Apr 30 1 ... show more Apr 30 10:24:36 vmd80284 sshd[1569515]: Invalid user himanshu from 128.1.132.145 port 16540 Apr 30 10:37:34 vmd80284 sshd[1569869]: Invalid user ubuntu from 128.1.132.145 port 34072 Apr 30 10:48:25 vmd80284 sshd[1570107]: Invalid user qwer1234 from 128.1.132.145 port 35078 ... show less	Brute-Force SSH
🇩🇪 ITSNF	2024-04-30 08:47:38 (2 years ago)	FFM Apr 30 10:37:29 websrv01 sshd[3656351]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more FFM Apr 30 10:37:29 websrv01 sshd[3656351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 user=root Apr 30 10:37:31 websrv01 sshd[3656351]: Failed password for root from 128.1.132.145 port 51350 ssh2 Apr 30 10:39:37 websrv01 sshd[3656886]: Invalid user qwer1234 from 128.1.132.145 port 18558 Apr 30 10:39:37 websrv01 sshd[3656886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 Apr 30 10:39:39 websrv01 sshd[3656886]: Failed password for invalid user qwer1234 from 128.1.132.145 port 18558 ssh2 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2024-04-30 08:28:49 (2 years ago)	128.1.132.145 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 128.1.132.145 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 30 03:28:37 16144 sshd[25742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 user=root Apr 30 03:28:38 16144 sshd[25742]: Failed password for root from 128.1.132.145 port 17546 ssh2 Apr 30 03:01:55 16144 sshd[23873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.227.106 user=root Apr 30 02:54:29 16144 sshd[23397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.227.106 user=root Apr 30 02:54:31 16144 sshd[23397]: Failed password for root from 104.28.227.106 port 25054 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 ITSNF	2024-04-30 08:28:09 (2 years ago)	FFM Apr 30 10:13:58 websrv01 sshd[3653026]: Invalid user himanshu from 128.1.132.145 port 40074 Apr ... show more FFM Apr 30 10:13:58 websrv01 sshd[3653026]: Invalid user himanshu from 128.1.132.145 port 40074 Apr 30 10:13:58 websrv01 sshd[3653026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 Apr 30 10:14:00 websrv01 sshd[3653026]: Failed password for invalid user himanshu from 128.1.132.145 port 40074 ssh2 Apr 30 10:20:09 websrv01 sshd[3654067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.145 user=root Apr 30 10:20:10 websrv01 sshd[3654067]: Failed password for root from 128.1.132.145 port 38768 ssh2 show less	Brute-Force SSH
Anonymous	2024-04-30 08:22:35 (2 years ago)	Disconnected from invalid user 128.1.132.145 ssh2	Email Spam
🇨🇿 lp	2024-04-30 06:23:35 (2 years ago)	SSH Brute force: 7 attempts were recorded from 128.1.132.145 2024-04-30T07:51:49+02:00 Disconnected ... show more SSH Brute force: 7 attempts were recorded from 128.1.132.145 2024-04-30T07:51:49+02:00 Disconnected from authenticating user root 128.1.132.145 port 46758 [preauth] 2024-04-30T07:57:22+02:00 Invalid user deep from 128.1.132.145 port 40564 2024-04-30T08:01:47+02:00 Invalid user aram from 128.1.132.145 port 29252 2024-04-30T08:03:58+02:00 Invalid user jack from 128.1.132.145 port 51092 2024-04-30T08:06:07+02:00 Invalid user pooja from 128.1.132.145 port 17932 2024-04-30T08:08:17+02:00 Invalid user teacher from 128.1.132.145 port 39764 2024-04-30T08:12:42+02:00 Disconnected from authenticating user root 128.1.132.145 port 28448 [preauth] show less	Brute-Force SSH
🇺🇸 KitsuneTech	2024-04-30 06:14:46 (2 years ago)	2024-04-30T01:14:46.066044-05:00 kitsunetech sshd[17141]: Invalid user fernando from 128.1.132.145 p ... show more 2024-04-30T01:14:46.066044-05:00 kitsunetech sshd[17141]: Invalid user fernando from 128.1.132.145 port 11306 ... show less	Brute-Force

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 168.144.247.170

🇰🇷 59.15.58.148

🇻🇳 42.113.39.119

🇺🇸 34.75.233.29

🇺🇸 3.83.245.221

🇺🇸 216.180.246.229

🇹🇭 203.154.158.195

🇺🇸 104.164.126.117

🇵🇰 103.115.199.165

🇺🇸 147.90.234.13

🇳🇱 109.160.32.36

🇻🇳 103.228.36.205

🇺🇸 69.49.246.176

🇧🇩 37.111.211.79

🇩🇪 5.231.242.203

🇩🇪 69.5.169.57

🇬🇧 64.227.47.92

🇨🇳 49.65.195.115

🇧🇪 34.52.150.124

🇺🇸 2a06:98c1:52::3