JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

157.245.72.128

Activity Trending Down

Abuse Confidence Score

17% Caution

343 reports

164 reporters · latest 2 weeks ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

343 from 164 distinct reporters

First reported

November 16th 2025

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 4 🇪🇸 Spain 1

Most common categories Web App Attack 3 DDoS Attack 3 Web Spam 3 Phishing 3 Blog Spam 3

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 raiolanetworks.com	2026-10-27 05:49:00 UTC · (2 weeks ago)	Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.	Port Scan
🇺🇸 chronos	2026-10-26 06:56:02 UTC · (2 weeks ago)	[AUTORAVALT][[26/10/2026 - 03:56:02 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.72.128] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spa ... show more [AUTORAVALT][[26/10/2026 - 03:56:02 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.72.128] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe ] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 chronos	2026-10-26 06:17:27 UTC · (2 weeks ago)	[AUTORAVALT][[26/10/2026 - 03:17:26 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.72.128] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spa ... show more [AUTORAVALT][[26/10/2026 - 03:17:26 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.72.128] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe ] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 chronos	2026-10-26 04:32:51 UTC · (2 weeks ago)	[AUTORAVALT][[26/10/2026 - 01:32:51 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.72.128] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spa ... show more [AUTORAVALT][[26/10/2026 - 01:32:51 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.72.128] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe ] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 xmission.com	2026-10-26 00:50:38 UTC · (2 weeks ago)	Blocked by UFW (TCP on 7443) Source port: 61011 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 157.245.72.128) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇹🇷 rtbh.com.tr	2026-01-20 20:11:08 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2026-01-19 02:30:50 UTC · (9 months ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/157.245.72.128	SSH
🇺🇸 Anybody9975	2026-01-18 18:59:59 UTC · (9 months ago)	127 SSH login attempts on 2026-01-18	Brute-Force SSH
🇫🇷 Cirno	2026-01-18 11:48:09 UTC · (9 months ago)	Jan 18 12:47:33 cirno sshd[3333131]: Invalid user user from 157.245.72.128 port 38474 Jan 18 12:47:34 cirno sshd[3333131]: Failed password for invalid user user from 157.245.72.128 port 38474 ssh2 Jan 18 12:48:09 cirno sshd[3333176]: Invalid user use ... show more Jan 18 12:47:33 cirno sshd[3333131]: Invalid user user from 157.245.72.128 port 38474 Jan 18 12:47:34 cirno sshd[3333131]: Failed password for invalid user user from 157.245.72.128 port 38474 ssh2 Jan 18 12:48:09 cirno sshd[3333176]: Invalid user user from 157.245.72.128 port 33436 ... show less	Brute-Force SSH
🇨🇦 ImMarvolo	2026-01-18 11:44:29 UTC · (9 months ago)	Jan 18 12:44:29 ca-bhs-01 sshd[2806652]: Invalid user user from 157.245.72.128 port 52550 ...	Brute-Force SSH
🇳🇴 tmiland	2026-01-18 11:43:11 UTC · (9 months ago)	(sshd) Failed SSH login from 157.245.72.128 (NL/The Netherlands/-): 3 in the last 3600 secs	Brute-Force SSH
🇫🇷 dispherical	2026-01-18 11:43:08 UTC · (9 months ago)	2026-01-18T12:41:55.773475+01:00 vmi2893862 sshd-session[2489955]: Failed password for invalid user user from 157.245.72.128 port 55508 ssh2 2026-01-18T12:42:30.568816+01:00 vmi2893862 sshd-session[2497773]: Invalid user user from 157.245.72.128 port ... show more 2026-01-18T12:41:55.773475+01:00 vmi2893862 sshd-session[2489955]: Failed password for invalid user user from 157.245.72.128 port 55508 ssh2 2026-01-18T12:42:30.568816+01:00 vmi2893862 sshd-session[2497773]: Invalid user user from 157.245.72.128 port 60610 2026-01-18T12:42:30.582426+01:00 vmi2893862 sshd-session[2497773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.72.128 2026-01-18T12:42:32.728376+01:00 vmi2893862 sshd-session[2497773]: Failed password for invalid user user from 157.245.72.128 port 60610 ssh2 2026-01-18T12:43:07.821900+01:00 vmi2893862 sshd-session[2505775]: Invalid user user from 157.245.72.128 port 32826 ... show less	Brute-Force SSH
🇩🇪 merededdo	2026-01-18 11:43:06 UTC · (9 months ago)	2026-01-18T11:41:53.883774+00:00 shy-frogs.aeza.network sshd[2318121]: Failed password for invalid user user from 157.245.72.128 port 60688 ssh2 2026-01-18T11:42:28.692645+00:00 shy-frogs.aeza.network sshd[2318199]: Invalid user user from 157.245.72. ... show more 2026-01-18T11:41:53.883774+00:00 shy-frogs.aeza.network sshd[2318121]: Failed password for invalid user user from 157.245.72.128 port 60688 ssh2 2026-01-18T11:42:28.692645+00:00 shy-frogs.aeza.network sshd[2318199]: Invalid user user from 157.245.72.128 port 54194 2026-01-18T11:42:28.724543+00:00 shy-frogs.aeza.network sshd[2318199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.72.128 2026-01-18T11:42:30.259477+00:00 shy-frogs.aeza.network sshd[2318199]: Failed password for invalid user user from 157.245.72.128 port 54194 ssh2 2026-01-18T11:43:05.212719+00:00 shy-frogs.aeza.network sshd[2318294]: Invalid user user from 157.245.72.128 port 33772 ... show less	Brute-Force SSH
🇩🇪 VMHeaven.io	2026-01-18 11:43:05 UTC · (9 months ago)	Jan 18 11:41:53 webundsoshit sshd[3216718]: Failed password for invalid user user from 157.245.72.128 port 36484 ssh2 Jan 18 11:42:28 webundsoshit sshd[3217063]: Invalid user user from 157.245.72.128 port 41958 Jan 18 11:42:28 webundsoshit sshd[32170 ... show more Jan 18 11:41:53 webundsoshit sshd[3216718]: Failed password for invalid user user from 157.245.72.128 port 36484 ssh2 Jan 18 11:42:28 webundsoshit sshd[3217063]: Invalid user user from 157.245.72.128 port 41958 Jan 18 11:42:28 webundsoshit sshd[3217063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.72.128 Jan 18 11:42:29 webundsoshit sshd[3217063]: Failed password for invalid user user from 157.245.72.128 port 41958 ssh2 Jan 18 11:43:04 webundsoshit sshd[3217473]: Invalid user user from 157.245.72.128 port 35310 ... show less	Brute-Force SSH
🇩🇪 dnsguard.pub	2026-01-18 11:43:03 UTC · (9 months ago)	2026-01-18T12:41:51.822404+01:00 dnsguard-vps sshd[2891821]: Failed password for invalid user user from 157.245.72.128 port 59666 ssh2 2026-01-18T12:42:26.431561+01:00 dnsguard-vps sshd[2891917]: Invalid user user from 157.245.72.128 port 35700 2026- ... show more 2026-01-18T12:41:51.822404+01:00 dnsguard-vps sshd[2891821]: Failed password for invalid user user from 157.245.72.128 port 59666 ssh2 2026-01-18T12:42:26.431561+01:00 dnsguard-vps sshd[2891917]: Invalid user user from 157.245.72.128 port 35700 2026-01-18T12:42:26.476639+01:00 dnsguard-vps sshd[2891917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.72.128 2026-01-18T12:42:28.071782+01:00 dnsguard-vps sshd[2891917]: Failed password for invalid user user from 157.245.72.128 port 35700 ssh2 2026-01-18T12:43:02.758683+01:00 dnsguard-vps sshd[2891980]: Invalid user user from 157.245.72.128 port 53500 ... show less	Brute-Force SSH

Showing 1 to 15 of 343 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 202.65.229.144

🇺🇸 66.228.62.150

🇺🇸 205.210.31.99

🇺🇸 162.193.135.29

🇸🇬 162.158.170.237

🇩🇪 151.240.151.59

🇱🇰 124.43.10.224

🇪🇸 103.226.194.166

🇺🇦 85.91.203.120

🇺🇸 74.7.242.37

🇳🇱 45.148.10.162

🇺🇸 20.46.236.0

🇺🇸 20.40.233.112

🇷🇴 2.57.121.112

🇫🇷 2001:861:5c87:6930:c89d:b5a7:e0a:e657

🇨🇳 220.197.85.84

🇯🇵 216.246.111.46

🇺🇸 205.210.31.106

🇺🇸 199.165.159.15

🇩🇪 172.71.144.171