157.230.104.94

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Invalid user ubnt from 157.230.104.94 port 40546	2020-09-16 02:27:23
attackbotsspam	Scanning	2020-09-15 18:23:23

Comments on same subnet:

IP	Type	Details	Datetime
157.230.104.185	attack	Automatic report - Banned IP Access	2020-08-07 18:51:10
157.230.104.185	attackbotsspam	157.230.104.185 - - [03/Aug/2020:13:26:19 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.104.185 - - [03/Aug/2020:13:26:22 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.104.185 - - [03/Aug/2020:13:26:26 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-03 22:25:01
157.230.104.185	attackbotsspam	Malicious/Probing: /wp-login.php	2020-08-03 02:19:52
157.230.104.185	attackspam	157.230.104.185 - - [23/Jul/2020:05:58:45 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.104.185 - - [23/Jul/2020:05:58:47 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.104.185 - - [23/Jul/2020:05:58:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-23 12:54:42
157.230.104.51	attack	Port scanning [2 denied]	2020-06-14 15:15:14
157.230.104.51	attackspambots	Jun 9 23:19:20 debian kernel: [636516.139741] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=157.230.104.51 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=20266 PROTO=TCP SPT=32767 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-10 05:57:17
157.230.104.54	attack	As always with digital ocean	2019-10-17 03:13:11
157.230.104.176	attackbotsspam	Jul 30 18:28:17 server sshd\[74621\]: Invalid user kathleen from 157.230.104.176 Jul 30 18:28:17 server sshd\[74621\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.104.176 Jul 30 18:28:19 server sshd\[74621\]: Failed password for invalid user kathleen from 157.230.104.176 port 46766 ssh2 ...	2019-10-09 19:16:27
157.230.104.176	attackspam	Aug 8 22:48:22 XXX sshd[29748]: Invalid user ma from 157.230.104.176 port 58758	2019-08-09 09:17:56
157.230.104.176	attackspam	Automatic report - Banned IP Access	2019-08-04 03:06:55
157.230.104.176	attackspambots	Jul 5 09:13:30 pornomens sshd\[32118\]: Invalid user tim from 157.230.104.176 port 59632 Jul 5 09:13:30 pornomens sshd\[32118\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.104.176 Jul 5 09:13:32 pornomens sshd\[32118\]: Failed password for invalid user tim from 157.230.104.176 port 59632 ssh2 ...	2019-07-05 16:00:29

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.230.104.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16529
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.230.104.94.			IN	A

;; AUTHORITY SECTION:
.			323	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091500 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 15 18:23:19 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 94.104.230.157.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.104.230.157.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
178.62.234.124	attackbotsspam	Jul 11 07:56:32 abendstille sshd\[29498\]: Invalid user chungheon from 178.62.234.124 Jul 11 07:56:32 abendstille sshd\[29498\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.234.124 Jul 11 07:56:34 abendstille sshd\[29498\]: Failed password for invalid user chungheon from 178.62.234.124 port 42808 ssh2 Jul 11 07:59:09 abendstille sshd\[32018\]: Invalid user andreanna from 178.62.234.124 Jul 11 07:59:09 abendstille sshd\[32018\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.234.124 ...	2020-07-11 14:05:59
87.190.16.229	attackbotsspam	2020-07-11T08:05:04.014772vps751288.ovh.net sshd\[26956\]: Invalid user www-data from 87.190.16.229 port 39920 2020-07-11T08:05:04.023909vps751288.ovh.net sshd\[26956\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.190.16.229 2020-07-11T08:05:06.023694vps751288.ovh.net sshd\[26956\]: Failed password for invalid user www-data from 87.190.16.229 port 39920 ssh2 2020-07-11T08:08:13.713791vps751288.ovh.net sshd\[26988\]: Invalid user liuziyuan from 87.190.16.229 port 36762 2020-07-11T08:08:13.723448vps751288.ovh.net sshd\[26988\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.190.16.229	2020-07-11 14:08:52
159.89.145.59	attackspam	$f2bV_matches	2020-07-11 14:10:30
209.141.40.151	attackspam	Invalid user hadoop from 209.141.40.151 port 49208	2020-07-11 14:22:56
61.74.118.139	attackspam	Jul 11 08:21:34 odroid64 sshd\[2487\]: Invalid user gerd from 61.74.118.139 Jul 11 08:21:34 odroid64 sshd\[2487\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.74.118.139 ...	2020-07-11 14:32:11
218.92.0.192	attackspambots	07/11/2020-02:01:31.306901 218.92.0.192 Protocol: 6 ET SCAN Potential SSH Scan	2020-07-11 14:02:41
192.144.154.237	attackbotsspam	Jul 11 11:33:37 itv-usvr-01 sshd[31542]: Invalid user madmad23 from 192.144.154.237 Jul 11 11:33:37 itv-usvr-01 sshd[31542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.154.237 Jul 11 11:33:37 itv-usvr-01 sshd[31542]: Invalid user madmad23 from 192.144.154.237 Jul 11 11:33:38 itv-usvr-01 sshd[31542]: Failed password for invalid user madmad23 from 192.144.154.237 port 59419 ssh2 Jul 11 11:34:48 itv-usvr-01 sshd[31574]: Invalid user fritzi from 192.144.154.237	2020-07-11 14:04:41
106.12.173.236	attackbots	2020-07-11T07:55:57.650924ks3355764 sshd[26448]: Invalid user z-knishi from 106.12.173.236 port 44086 2020-07-11T07:55:59.240524ks3355764 sshd[26448]: Failed password for invalid user z-knishi from 106.12.173.236 port 44086 ssh2 ...	2020-07-11 14:05:03
218.29.188.139	attackbots	Jul 11 05:55:57 host sshd[28286]: Invalid user kawahara from 218.29.188.139 port 54128 ...	2020-07-11 13:55:49
157.245.64.140	attack	Jul 11 01:57:14 vps46666688 sshd[10222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.64.140 Jul 11 01:57:16 vps46666688 sshd[10222]: Failed password for invalid user shuangbo from 157.245.64.140 port 34068 ssh2 ...	2020-07-11 14:15:13
3.85.117.198	attackbots	Scanning an empty webserver with deny all robots.txt	2020-07-11 14:19:20
165.22.255.242	attackspam	WordPress login Brute force / Web App Attack on client site.	2020-07-11 13:57:32
176.88.248.170	attack	TCP (SYN) 176.88.248.170:35481 -> port 23, len 44	2020-07-11 14:18:45
54.39.138.251	attackbots	Invalid user kristine from 54.39.138.251 port 52098	2020-07-11 13:53:24
175.106.17.99	attackspam	WordPress wp-login brute force :: 175.106.17.99 0.072 BYPASS [11/Jul/2020:03:55:51 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2003 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-11 14:01:38

Recently Reported IPs

20.211.75.33	36.255.233.0	151.24.166.108	144.91.68.240
68.79.60.45	148.26.225.248	188.214.12.220	153.146.72.123
195.113.80.199	52.133.201.118	85.36.23.193	201.151.232.89
206.247.66.229	91.172.241.125	250.221.25.239	144.206.62.11
113.35.119.235	119.28.53.199	39.240.229.116	108.186.199.112