JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.221.11.20

Neutral Activity

Abuse Confidence Score

0% Low Risk

495 reports

131 reporters · latest 3 years ago

ISP: East Africa Broadband Services
Usage Type: Fixed Line ISP
ASN: AS328118
Domain Name: eabs.ug
Country: 🇺🇬 Uganda
City: Nansana, Central Region

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.221.11.20 has been reported 495 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

495 from 131 distinct reporters

First reported

April 22nd 2022

Most recent report

3 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2023-05-02 17:26:53 UTC · (3 years ago)	45.221.11.20 (UG/Uganda/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 2 12:03:08 14484 sshd[5644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more 45.221.11.20 (UG/Uganda/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 2 12:03:08 14484 sshd[5644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.220.113 user=root May 2 12:03:09 14484 sshd[5644]: Failed password for root from 129.226.220.113 port 50686 ssh2 May 2 11:59:22 14484 sshd[4994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.220.113 user=root May 2 11:59:24 14484 sshd[4994]: Failed password for root from 129.226.220.113 port 39608 ssh2 May 2 12:26:36 14484 sshd[7356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.221.11.20 user=root May 2 12:04:24 14484 sshd[5710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.220.113 user=root IP Addresses Blocked: 129.226.220.113 (SG/Singapore/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-05-02 14:25:02 UTC · (3 years ago)	45.221.11.20 (UG/Uganda/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 2 09:23:11 15590 sshd[17901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more 45.221.11.20 (UG/Uganda/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 2 09:23:11 15590 sshd[17901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.219.178.244 user=root May 2 09:23:13 15590 sshd[17901]: Failed password for root from 8.219.178.244 port 36400 ssh2 May 2 09:24:44 15590 sshd[17968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.50.143.234 user=root May 2 09:15:19 15590 sshd[17413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.221.11.20 user=root May 2 09:15:21 15590 sshd[17413]: Failed password for root from 45.221.11.20 port 50261 ssh2 IP Addresses Blocked: 8.219.178.244 (SG/Singapore/-) 195.50.143.234 (DE/Germany/-) show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-05-02 02:28:14 UTC · (3 years ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/45.221.11.20	SSH
🇳🇱 Daemonlord	2023-05-01 07:34:48 UTC · (3 years ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "admin" at 2023-05-01T07:34:48Z	Brute-Force SSH
🇳🇱 EGP Abuse Dept	2023-05-01 06:20:04 UTC · (3 years ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
Anonymous	2023-05-01 03:34:02 UTC · (3 years ago)	Invalid user admin from 45.221.11.20 port 57634	Brute-Force SSH
Anonymous	2023-05-01 03:15:25 UTC · (3 years ago)	May 1 00:15:24 mail sshd[160364]: Invalid user admin from 45.221.11.20 port 41784 ...	Brute-Force
🇨🇳 ThreatBook.io	2023-04-25 02:04:21 UTC · (3 years ago)	ThreatBook Intelligence: Brute Force more details on http://threatbook.io/ip/45.221.11.20	SSH
🇩🇪 ballonstar.de	2023-04-24 16:56:17 UTC · (3 years ago)	Apr 24 18:57:29 server2 sshd[21260]: Invalid user ftpuser from 45.221.11.20 port 43461 Apr 24 18:57:31 server2 sshd[21260]: error: PAM: Authentication error for illegal user ftpuser from 45.221.11.20 Apr 24 18:57:31 server2 sshd[21260]: Failed keyboa ... show more Apr 24 18:57:29 server2 sshd[21260]: Invalid user ftpuser from 45.221.11.20 port 43461 Apr 24 18:57:31 server2 sshd[21260]: error: PAM: Authentication error for illegal user ftpuser from 45.221.11.20 Apr 24 18:57:31 server2 sshd[21260]: Failed keyboard-interactive/pam for invalid user ftpuser from 45.221.11.20 port 43461 ssh2 ... show less	Brute-Force SSH
🇺🇸 MPL	2023-04-24 05:43:31 UTC · (3 years ago)	tcp/22 (2 or more attempts)	Port Scan
🇹🇭 thaizone.com	2023-04-04 03:52:27 UTC · (3 years ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
Anonymous	2023-03-17 12:10:27 UTC · (3 years ago)	Mar 17 13:10:26 ns3130050 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 8 secs): user=<contact>, method=PLAIN, rip=45.221.11.20, lip=146.59.134.78, session=<4zzvdRf39+kt3QsU> ...	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2023-03-14 01:15:11 UTC · (3 years ago)	ThreatBook Intelligence: Zombie,Brute Force more details on https://threatbook.io/ip/45.221.11.20	SSH
🇺🇸 rellim.com	2023-03-13 20:37:55 UTC · (3 years ago)	Mar 13 13:37:52 spidey sshd[22301]: Invalid user default from 45.221.11.20 port 55335 Mar 13 13:37:55 spidey sshd[22301]: error: PAM: Authentication failure for illegal user default from 45.221.11.20 Mar 13 13:37:55 spidey sshd[22301]: Failed keyboar ... show more Mar 13 13:37:52 spidey sshd[22301]: Invalid user default from 45.221.11.20 port 55335 Mar 13 13:37:55 spidey sshd[22301]: error: PAM: Authentication failure for illegal user default from 45.221.11.20 Mar 13 13:37:55 spidey sshd[22301]: Failed keyboard-interactive/pam for invalid user default from 45.221.11.20 port 55335 ssh2 ... show less	Brute-Force SSH
🇩🇪 itsvic.dev	2023-03-13 19:15:02 UTC · (3 years ago)	2023-03-13T19:15:02.047538+00:00 woof-house sshd[2103434]: Invalid user guest from 45.221.11.20 port 46662 ...	Brute-Force SSH

Showing 1 to 15 of 495 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 5.183.252.105

🇨🇴 190.84.119.248

🇪🇸 185.230.124.197

🇺🇸 172.185.24.228

🇮🇳 128.185.235.110

🇫🇷 91.231.89.153

🇦🇷 190.231.56.59

🇨🇳 183.23.145.131

🇵🇰 153.117.1.177

🇺🇸 98.142.247.53

🇺🇸 71.6.245.203

🇦🇫 149.54.23.98

🇺🇸 45.33.7.4

🇮🇩 202.155.143.190

🇺🇸 149.165.153.240

🇺🇸 137.184.16.31

🇨🇳 111.194.205.244

🇧🇬 78.128.113.22

🇺🇸 71.6.238.121

🇧🇪 35.206.191.146