JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.145.120.199

23.145.120.199 was found in our database!

This IP was reported 172 times. Confidence of Abuse is 54%: ?

54%

ISP	FiberState, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26042
Domain Name	fiberstate.com
Country	🇺🇸 United States of America
City	Orem, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.145.120.199

Whois 23.145.120.199

IP Abuse Reports for 23.145.120.199:

This IP address has been reported a total of 172 times from 78 distinct sources. 23.145.120.199 was first reported on August 9th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 nong yiyi	2026-06-07 13:10:58 (3 days ago)	SSH brute force attack against WMDXC server. Automated report.	Brute-Force SSH
Anonymous	2026-06-03 06:40:36 (1 week ago)	Cowrie SSH honeypot: cowrie.session.connect	Brute-Force SSH
🇨🇳 さいとうあすか	2026-05-29 09:58:30 (1 week ago)	May 29 17:58:28 pbs sshd[455586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more May 29 17:58:28 pbs sshd[455586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.145.120.199 user=root May 29 17:58:29 pbs sshd[455586]: Failed password for root from 23.145.120.199 port 37226 ssh2 ... show less	Brute-Force SSH
🇨🇳 さいとうあすか	2026-05-28 09:05:23 (2 weeks ago)	May 28 17:05:20 pbs sshd[446368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more May 28 17:05:20 pbs sshd[446368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.145.120.199 user=root May 28 17:05:22 pbs sshd[446368]: Failed password for root from 23.145.120.199 port 40946 ssh2 ... show less	Brute-Force SSH
🇧🇷 ICS Labs	2026-05-27 19:00:56 (2 weeks ago)	ICS Labs identified 23.145.120.199 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇩🇪 ipcop.net	2026-05-26 14:17:47 (2 weeks ago)	2026-05-26T16:17:43.918110+02:00 guestgw-router01.remscheid.de sshd-session[3662821]: Connection clo ... show more 2026-05-26T16:17:43.918110+02:00 guestgw-router01.remscheid.de sshd-session[3662821]: Connection closed by authenticating user root 23.145.120.199 port 40124 [preauth] 2026-05-26T16:17:44.680191+02:00 guestgw-router01.remscheid.de sshd-session[3662826]: Invalid user curl from 23.145.120.199 port 40136 2026-05-26T16:17:44.869463+02:00 guestgw-router01.remscheid.de sshd-session[3662826]: Connection closed by invalid user curl 23.145.120.199 port 40136 [preauth] 2026-05-26T16:17:45.825046+02:00 guestgw-router01.remscheid.de sshd-session[3662831]: Connection closed by authenticating user root 23.145.120.199 port 51768 [preauth] 2026-05-26T16:17:46.770223+02:00 guestgw-router01.remscheid.de sshd-session[3662835]: Connection closed by authenticating user root 23.145.120.199 port 51784 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2026-05-26 13:17:41 (2 weeks ago)	2026-05-26T15:17:37.693221+02:00 guestgw-router01.remscheid.de sshd-session[3653864]: Connection clo ... show more 2026-05-26T15:17:37.693221+02:00 guestgw-router01.remscheid.de sshd-session[3653864]: Connection closed by authenticating user root 23.145.120.199 port 36536 [preauth] 2026-05-26T15:17:38.450211+02:00 guestgw-router01.remscheid.de sshd-session[3653868]: Invalid user ksyun from 23.145.120.199 port 36548 2026-05-26T15:17:38.639376+02:00 guestgw-router01.remscheid.de sshd-session[3653868]: Connection closed by invalid user ksyun 23.145.120.199 port 36548 [preauth] 2026-05-26T15:17:39.583774+02:00 guestgw-router01.remscheid.de sshd-session[3653873]: Connection closed by authenticating user root 23.145.120.199 port 36552 [preauth] 2026-05-26T15:17:40.339621+02:00 guestgw-router01.remscheid.de sshd-session[3653877]: Invalid user albert from 23.145.120.199 port 36566 show less	Brute-Force
🇨🇳 Indexyz	2026-05-25 07:17:29 (2 weeks ago)	2026-05-25T15:17:27.565200+08:00 hostname sshd-session[1128481]: Invalid user albert from 23.145.1 ... show more 2026-05-25T15:17:27.565200+08:00 hostname sshd-session[1128481]: Invalid user albert from 23.145.120.199 port 36804 2026-05-25T15:17:26.989663+08:00 hostname sshd-session[1128481]: Connection from 23.145.120.199 port 36804 on 10.89.160.7 port 22 rdomain "" 2026-05-25T15:17:27.565200+08:00 hostname sshd-session[1128481]: Invalid user albert from 23.145.120.199 port 36804 2026-05-25T15:17:27.943803+08:00 hostname sshd-session[1128483]: Connection from 23.145.120.199 port 38158 on 10.89.160.7 port 22 rdomain "" 2026-05-25T15:17:28.521838+08:00 hostname sshd-session[1128483]: Invalid user taobao from 23.145.120.199 port 38158 show less	Brute-Force SSH
🇩🇪 ITSNF	2026-05-24 09:35:04 (2 weeks ago)	Blocked by os-abuseipdb; 137 hits, proto=tcp, ports=22	Port Scan Hacking
🇯🇵 Indexyz	2026-05-24 09:31:51 (2 weeks ago)	2026-05-24T17:31:46.903055+08:00 hostname sshd-session[3630171]: Invalid user taobao from 23.145.1 ... show more 2026-05-24T17:31:46.903055+08:00 hostname sshd-session[3630171]: Invalid user taobao from 23.145.120.199 port 43474 2026-05-24T17:31:47.269021+08:00 hostname sshd-session[3630175]: Connection from 23.145.120.199 port 43490 on 115.231.27.164 port 22 rdomain "" 2026-05-24T17:31:47.999822+08:00 hostname sshd-session[3630175]: Invalid user sysadmin from 23.145.120.199 port 43490 2026-05-24T17:31:48.364783+08:00 hostname sshd-session[3630177]: Connection from 23.145.120.199 port 43496 on 115.231.27.164 port 22 rdomain "" 2026-05-24T17:31:49.655685+08:00 hostname sshd-session[3630177]: Invalid user qilong from 23.145.120.199 port 43496 show less	Brute-Force SSH
🇩🇪 ITSNF	2026-05-24 06:05:04 (2 weeks ago)	Blocked by os-abuseipdb; 150 hits, proto=tcp, ports=22	Port Scan Hacking
🇩🇪 ITSNF	2026-05-24 05:50:04 (2 weeks ago)	Blocked by os-abuseipdb; 110 hits, proto=tcp, ports=22	Port Scan Hacking
🇨🇳 Indexyz	2026-05-23 12:27:30 (2 weeks ago)	2026-05-23T20:27:26.312182+08:00 hostname sshd-session[1084363]: Invalid user taobao from 23.145.1 ... show more 2026-05-23T20:27:26.312182+08:00 hostname sshd-session[1084363]: Invalid user taobao from 23.145.120.199 port 50858 2026-05-23T20:27:26.641044+08:00 hostname sshd-session[1084365]: Connection from 23.145.120.199 port 50870 on 10.89.160.7 port 22 rdomain "" 2026-05-23T20:27:27.143883+08:00 hostname sshd-session[1084365]: Invalid user sysadmin from 23.145.120.199 port 50870 2026-05-23T20:27:28.492815+08:00 hostname sshd-session[1084367]: Connection from 23.145.120.199 port 50884 on 10.89.160.7 port 22 rdomain "" 2026-05-23T20:27:29.021042+08:00 hostname sshd-session[1084367]: Invalid user qilong from 23.145.120.199 port 50884 show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-05-21 06:45:16 (3 weeks ago)	2026-05-21T08:45:13.279208+02:00 router02.boersch-gmbh.de sshd[526258]: Connection closed by authent ... show more 2026-05-21T08:45:13.279208+02:00 router02.boersch-gmbh.de sshd[526258]: Connection closed by authenticating user root 23.145.120.199 port 60688 [preauth] 2026-05-21T08:45:14.115429+02:00 router02.boersch-gmbh.de sshd[526262]: Invalid user Administrator from 23.145.120.199 port 60698 2026-05-21T08:45:14.284568+02:00 router02.boersch-gmbh.de sshd[526262]: Connection closed by invalid user Administrator 23.145.120.199 port 60698 [preauth] 2026-05-21T08:45:15.290944+02:00 router02.boersch-gmbh.de sshd[526264]: Connection closed by authenticating user root 23.145.120.199 port 60712 [preauth] 2026-05-21T08:45:16.138228+02:00 router02.boersch-gmbh.de sshd[526267]: Invalid user albert from 23.145.120.199 port 53140 show less	Brute-Force
🇨🇳 pengpeng	2026-05-20 10:05:12 (3 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 250 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH

Showing 1 to 15 of 172 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 192.109.200.220

🇺🇸 136.118.31.250

🇺🇸 134.199.212.210

🇮🇩 103.121.169.53

🇷🇴 92.118.39.62

🇮🇩 49.0.1.60

🇲🇾 47.254.245.248

🇮🇹 45.143.182.238

🇬🇧 35.203.211.87

🇬🇪 2.57.217.229

🇨🇳 117.34.85.168

🇺🇸 107.172.119.166

🇬🇧 217.154.61.249

🇩🇪 213.209.159.225

🇬🇧 212.38.75.196

🇨🇳 202.46.62.78

🇸🇪 195.178.191.5

🇳🇱 195.178.110.188

🇺🇸 148.153.121.224

🇩🇪 139.59.143.102