JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.220.72.141

145.220.72.141 was found in our database!

This IP was reported 197 times. Confidence of Abuse is 9%: ?

ISP	SURF B.V.
Usage Type	Fixed Line ISP
ASN	AS1101
Hostname(s)	145.220.EARLY-REGISTRATION.of.SURFnet.invalid
Domain Name	surf.nl
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.220.72.141

Whois 145.220.72.141

IP Abuse Reports for 145.220.72.141:

This IP address has been reported a total of 197 times from 125 distinct sources. 145.220.72.141 was first reported on April 18th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-06-22 05:25:06 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇦 QSC-Sentinel	2026-05-11 14:08:08 (1 month ago)	Banned by fail2ban jail sshd-instant on jump	Brute-Force SSH
🇨🇦 QSC-Sentinel	2026-05-11 13:17:13 (1 month ago)	Banned by fail2ban jail sshd on jump	Brute-Force SSH
🇨🇦 QSC-Sentinel	2026-04-27 16:33:51 (2 months ago)	Banned by fail2ban jail sshd on jump	Brute-Force SSH
🇨🇦 QSC-Sentinel	2026-04-27 16:33:51 (2 months ago)	Retroactive report: Banned by fail2ban jail sshd (originally detected 2026-04-27T12:33:51-04:00)	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-04-22 22:28:16 (2 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-04-20 22:28:59 (2 months ago)		Brute-Force Web App Attack
🇰🇷 ericshim.me	2026-04-20 11:23:25 (2 months ago)	Reported from fail2ban historical logs. (Detected at 2026-04-20 11:23:25)	Brute-Force SSH
🇷🇺 weke	2026-04-20 07:23:09 (2 months ago)	ip=145.220.72.141 \| user=user04 \| pass=123 \| event=cowrie.login.failed \| source=ssh honeypot MSK \| t ... show more ip=145.220.72.141 \| user=user04 \| pass=123 \| event=cowrie.login.failed \| source=ssh honeypot MSK \| time=2026-04-20T07:23:09.142948Z show less	Brute-Force SSH
🇫🇮 hosting.gl	2026-04-20 06:51:52 (2 months ago)	Apr 20 08:50:29 web sshd[220299]: Failed password for invalid user server from 145.220.72.141 port 4 ... show more Apr 20 08:50:29 web sshd[220299]: Failed password for invalid user server from 145.220.72.141 port 47572 ssh2 Apr 20 08:51:49 web sshd[220456]: Invalid user bbs from 145.220.72.141 port 57852 Apr 20 08:51:49 web sshd[220456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.220.72.141 Apr 20 08:51:49 web sshd[220456]: Invalid user bbs from 145.220.72.141 port 57852 Apr 20 08:51:51 web sshd[220456]: Failed password for invalid user bbs from 145.220.72.141 port 57852 ssh2 ... show less	Brute-Force SSH
🇫🇷 rhydo	2026-04-20 06:17:53 (2 months ago)	2026-04-20T08:11:10.097457+02:00 server sshd[256885]: User root from 145.220.72.141 not allowed beca ... show more 2026-04-20T08:11:10.097457+02:00 server sshd[256885]: User root from 145.220.72.141 not allowed because listed in DenyUsers 2026-04-20T08:13:04.569095+02:00 server sshd[257180]: Invalid user steam from 145.220.72.141 port 55612 2026-04-20T08:14:31.914572+02:00 server sshd[257406]: Invalid user gitlab-runner from 145.220.72.141 port 53380 2026-04-20T08:15:55.105726+02:00 server sshd[257602]: User root from 145.220.72.141 not allowed because listed in DenyUsers 2026-04-20T08:17:14.993804+02:00 server sshd[257817]: Invalid user ubuntu from 145.220.72.141 port 54248 ... show less	Brute-Force SSH
🇺🇸 kosmonot	2026-04-20 06:16:34 (2 months ago)	2026-04-20T06:12:19.893506+00:00 schlitz sshd[2285266]: Invalid user steam from 145.220.72.141 port ... show more 2026-04-20T06:12:19.893506+00:00 schlitz sshd[2285266]: Invalid user steam from 145.220.72.141 port 58136 2026-04-20T06:13:45.901380+00:00 schlitz sshd[2285457]: Invalid user gitlab-runner from 145.220.72.141 port 47720 2026-04-20T06:16:34.378319+00:00 schlitz sshd[2285740]: Invalid user ubuntu from 145.220.72.141 port 35796 ... show less	Port Scan Brute-Force SSH
🇩🇪 ipcop.net	2026-04-20 06:13:47 (2 months ago)	2026-04-20T08:08:34.616975+02:00 amqp-host01.amqp.srvfarm.net sshd[63166]: Disconnected from authent ... show more 2026-04-20T08:08:34.616975+02:00 amqp-host01.amqp.srvfarm.net sshd[63166]: Disconnected from authenticating user root 145.220.72.141 port 52642 [preauth] 2026-04-20T08:12:20.518864+02:00 amqp-host01.amqp.srvfarm.net sshd[63389]: Invalid user steam from 145.220.72.141 port 42090 2026-04-20T08:12:20.564103+02:00 amqp-host01.amqp.srvfarm.net sshd[63389]: Disconnected from invalid user steam 145.220.72.141 port 42090 [preauth] 2026-04-20T08:13:46.875850+02:00 amqp-host01.amqp.srvfarm.net sshd[63460]: Invalid user gitlab-runner from 145.220.72.141 port 42938 2026-04-20T08:13:46.913610+02:00 amqp-host01.amqp.srvfarm.net sshd[63460]: Disconnected from invalid user gitlab-runner 145.220.72.141 port 42938 [preauth] show less	Brute-Force
🇺🇸 bigscoots.com	2026-04-20 06:10:06 (2 months ago)	145.220.72.141 (NL/The Netherlands/145.220.EARLY-REGISTRATION.of.SURFnet.invalid), 5 distributed ssh ... show more 145.220.72.141 (NL/The Netherlands/145.220.EARLY-REGISTRATION.of.SURFnet.invalid), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 20 00:28:00 14039 sshd[2950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.110.191.158 user=root Apr 20 00:35:32 14039 sshd[5855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.144.76.162 user=root Apr 20 00:35:34 14039 sshd[5855]: Failed password for root from 168.144.76.162 port 48828 ssh2 Apr 20 01:10:01 14039 sshd[13626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.220.72.141 user=root Apr 20 01:10:02 14039 sshd[13626]: Failed password for root from 145.220.72.141 port 51996 ssh2 IP Addresses Blocked: 185.110.191.158 (DE/Germany/-) 168.144.76.162 (US/United States/-) show less	Brute-Force SSH
🇯🇵 k725	2026-04-20 06:00:55 (2 months ago)	2026-04-20T05:52:48.337454+00:00 instance-20250416-2307 sshd-session[3092365]: Invalid user tesoreri ... show more 2026-04-20T05:52:48.337454+00:00 instance-20250416-2307 sshd-session[3092365]: Invalid user tesoreria from 145.220.72.141 port 53312 2026-04-20T05:55:33.066307+00:00 instance-20250416-2307 sshd-session[3092381]: Invalid user odoo from 145.220.72.141 port 36580 2026-04-20T05:58:10.340992+00:00 instance-20250416-2307 sshd-session[3092402]: Invalid user ftp_user from 145.220.72.141 port 34020 2026-04-20T05:59:25.610983+00:00 instance-20250416-2307 sshd-session[3092411]: Invalid user panda from 145.220.72.141 port 42212 2026-04-20T06:00:54.663906+00:00 instance-20250416-2307 sshd-session[3092420]: Invalid user vpn from 145.220.72.141 port 41658 ... show less	Brute-Force SSH

Showing 1 to 15 of 197 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 206.135.41.57

🇦🇹 194.35.121.14

🇷🇴 193.46.255.86

🇮🇳 168.144.90.84

🇦🇹 91.151.18.27

🇳🇱 91.92.40.200

🇮🇷 85.198.19.239

🇳🇱 45.148.10.151

🇻🇳 1.55.227.36

🇵🇰 203.128.10.35

🇧🇩 202.94.164.154

🇹🇳 196.229.144.149

🇻🇪 159.90.61.100

🇳🇱 83.168.106.26

🇪🇸 68.221.67.111

🇨🇳 61.141.161.29

🇬🇪 46.49.53.119

🇨🇳 36.111.42.36

🇨🇳 27.39.128.127

🇲🇾 202.185.224.42