157.245.104.153

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	2019-09-29T04:28:56.038973abusebot.cloudsearch.cf sshd\[13043\]: Invalid user aira from 157.245.104.153 port 43572	2019-09-29 12:53:39
attackspam	Sep 28 18:39:26 MainVPS sshd[20883]: Invalid user support from 157.245.104.153 port 37358 Sep 28 18:39:26 MainVPS sshd[20883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.104.153 Sep 28 18:39:26 MainVPS sshd[20883]: Invalid user support from 157.245.104.153 port 37358 Sep 28 18:39:27 MainVPS sshd[20883]: Failed password for invalid user support from 157.245.104.153 port 37358 ssh2 Sep 28 18:44:20 MainVPS sshd[21261]: Invalid user kayden from 157.245.104.153 port 50472 ...	2019-09-29 01:35:14
attackbotsspam	Sep 15 08:04:20 markkoudstaal sshd[5894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.104.153 Sep 15 08:04:22 markkoudstaal sshd[5894]: Failed password for invalid user hiepls from 157.245.104.153 port 59148 ssh2 Sep 15 08:09:21 markkoudstaal sshd[6516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.104.153	2019-09-15 14:26:36

Type

Details

Datetime

attackspam

2019-09-29T04:28:56.038973abusebot.cloudsearch.cf sshd\[13043\]: Invalid user aira from 157.245.104.153 port 43572

2019-09-29 12:53:39

attackspam

Sep 28 18:39:26 MainVPS sshd[20883]: Invalid user support from 157.245.104.153 port 37358
Sep 28 18:39:26 MainVPS sshd[20883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.104.153
Sep 28 18:39:26 MainVPS sshd[20883]: Invalid user support from 157.245.104.153 port 37358
Sep 28 18:39:27 MainVPS sshd[20883]: Failed password for invalid user support from 157.245.104.153 port 37358 ssh2
Sep 28 18:44:20 MainVPS sshd[21261]: Invalid user kayden from 157.245.104.153 port 50472
...

2019-09-29 01:35:14

attackbotsspam

Sep 15 08:04:20 markkoudstaal sshd[5894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.104.153
Sep 15 08:04:22 markkoudstaal sshd[5894]: Failed password for invalid user hiepls from 157.245.104.153 port 59148 ssh2
Sep 15 08:09:21 markkoudstaal sshd[6516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.104.153

2019-09-15 14:26:36

Comments on same subnet:

IP	Type	Details	Datetime
157.245.104.19	attackbots	Sep 22 21:11:58 dhoomketu sshd[3306075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.104.19 Sep 22 21:11:58 dhoomketu sshd[3306075]: Invalid user ftptest from 157.245.104.19 port 49890 Sep 22 21:12:00 dhoomketu sshd[3306075]: Failed password for invalid user ftptest from 157.245.104.19 port 49890 ssh2 Sep 22 21:16:12 dhoomketu sshd[3306125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.104.19 user=root Sep 22 21:16:15 dhoomketu sshd[3306125]: Failed password for root from 157.245.104.19 port 58776 ssh2 ...	2020-09-22 23:59:25
157.245.104.19	attackspambots	$f2bV_matches	2020-09-22 16:03:17
157.245.104.19	attackspam	2020-09-22T01:27:35.185122afi-git.jinr.ru sshd[32617]: Invalid user user1 from 157.245.104.19 port 44898 2020-09-22T01:27:35.188566afi-git.jinr.ru sshd[32617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.104.19 2020-09-22T01:27:35.185122afi-git.jinr.ru sshd[32617]: Invalid user user1 from 157.245.104.19 port 44898 2020-09-22T01:27:36.959421afi-git.jinr.ru sshd[32617]: Failed password for invalid user user1 from 157.245.104.19 port 44898 ssh2 2020-09-22T01:31:55.137208afi-git.jinr.ru sshd[1280]: Invalid user nginx from 157.245.104.19 port 55918 ...	2020-09-22 08:06:45
157.245.104.19	attackspam	SSH brute-force attempt	2020-08-22 22:18:18
157.245.104.19	attackbotsspam	Aug 20 14:05:16 rancher-0 sshd[1177594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.104.19 user=root Aug 20 14:05:18 rancher-0 sshd[1177594]: Failed password for root from 157.245.104.19 port 50204 ssh2 ...	2020-08-20 23:07:32
157.245.104.19	attackbotsspam	Bruteforce detected by fail2ban	2020-08-10 22:34:52
157.245.104.19	attackspam	Fail2Ban Ban Triggered (2)	2020-08-05 03:37:38
157.245.104.19	attackspambots	Aug 3 11:55:05 ip-172-31-62-245 sshd\[7517\]: Failed password for root from 157.245.104.19 port 44240 ssh2\ Aug 3 11:56:54 ip-172-31-62-245 sshd\[7546\]: Failed password for root from 157.245.104.19 port 43652 ssh2\ Aug 3 11:58:49 ip-172-31-62-245 sshd\[7562\]: Failed password for root from 157.245.104.19 port 43064 ssh2\ Aug 3 12:00:49 ip-172-31-62-245 sshd\[7596\]: Failed password for root from 157.245.104.19 port 42476 ssh2\ Aug 3 12:02:45 ip-172-31-62-245 sshd\[7617\]: Failed password for root from 157.245.104.19 port 41888 ssh2\	2020-08-03 20:25:43
157.245.104.19	attackspam	Invalid user ruby from 157.245.104.19 port 42212	2020-08-01 19:31:25
157.245.104.19	attackspam	Unauthorised connection attempt detected at AUO FR1 NODE2. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-07-27 22:08:31
157.245.104.19	attackbots	Brute force SMTP login attempted. ...	2020-07-24 16:14:03
157.245.104.19	attackspambots	leo_www	2020-07-24 00:28:38
157.245.104.19	attackbotsspam	Jul 22 21:41:38 vps639187 sshd\[16835\]: Invalid user spiceworks from 157.245.104.19 port 39828 Jul 22 21:41:38 vps639187 sshd\[16835\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.104.19 Jul 22 21:41:41 vps639187 sshd\[16835\]: Failed password for invalid user spiceworks from 157.245.104.19 port 39828 ssh2 ...	2020-07-23 04:51:51
157.245.104.19	attack	Invalid user kkj from 157.245.104.19 port 45406	2020-07-12 22:00:05
157.245.104.19	attackspam	(sshd) Failed SSH login from 157.245.104.19 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 10 14:23:35 grace sshd[26366]: Invalid user news from 157.245.104.19 port 52442 Jul 10 14:23:38 grace sshd[26366]: Failed password for invalid user news from 157.245.104.19 port 52442 ssh2 Jul 10 14:29:09 grace sshd[27031]: Invalid user testuser from 157.245.104.19 port 35494 Jul 10 14:29:11 grace sshd[27031]: Failed password for invalid user testuser from 157.245.104.19 port 35494 ssh2 Jul 10 14:31:42 grace sshd[27572]: Invalid user fisher from 157.245.104.19 port 47002	2020-07-11 02:28:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.104.153
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63088
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.245.104.153.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091500 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 15 14:26:24 CST 2019
;; MSG SIZE  rcvd: 119

Host info

Host 153.104.245.157.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 153.104.245.157.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
58.3.15.135	attack	Unauthorised access (Oct 12) SRC=58.3.15.135 LEN=40 TTL=48 ID=14907 TCP DPT=8080 WINDOW=48891 SYN	2019-10-12 17:10:54
220.164.2.134	attackbotsspam	Oct 12 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 4 secs$: user=\, method=PLAIN, rip=220.164.2.134, lip=REMOVED, TLS, session=\ Oct 12 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 5 secs$: user=\<REMOVED.dehenrik@REMOVED.de\>, method=PLAIN, rip=220.164.2.134, lip=REMOVED, TLS, session=\ Oct 12 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=220.164.2.134, lip=REMOVED, TLS, session=\<71Z3WrCU06XcpAKG\>	2019-10-12 17:02:25
115.74.192.81	attack	Unauthorized connection attempt from IP address 115.74.192.81 on Port 445(SMB)	2019-10-12 17:30:07
202.230.143.53	attack	$f2bV_matches	2019-10-12 16:51:35
1.53.180.109	attack	Unauthorized connection attempt from IP address 1.53.180.109 on Port 445(SMB)	2019-10-12 17:20:51
92.19.174.77	attack	firewall-block, port(s): 9200/tcp	2019-10-12 17:16:24
167.114.47.68	attackspambots	Oct 12 11:05:19 SilenceServices sshd[26655]: Failed password for root from 167.114.47.68 port 43996 ssh2 Oct 12 11:10:00 SilenceServices sshd[27914]: Failed password for root from 167.114.47.68 port 35735 ssh2	2019-10-12 17:25:19
132.232.112.25	attackspam	Oct 12 08:51:47 venus sshd\[13851\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.112.25 user=root Oct 12 08:51:49 venus sshd\[13851\]: Failed password for root from 132.232.112.25 port 58864 ssh2 Oct 12 08:57:38 venus sshd\[13957\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.112.25 user=root ...	2019-10-12 17:01:05
14.226.92.104	attackspam	Unauthorized connection attempt from IP address 14.226.92.104 on Port 445(SMB)	2019-10-12 17:04:05
1.0.180.33	attack	Unauthorized connection attempt from IP address 1.0.180.33 on Port 445(SMB)	2019-10-12 17:34:07
42.2.227.226	attackbotsspam	Netgear DGN Device Remote Command Execution Vulnerability	2019-10-12 17:16:55
182.139.134.107	attackbots	Oct 12 10:14:57 h2177944 sshd\[14529\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.139.134.107 user=root Oct 12 10:14:59 h2177944 sshd\[14529\]: Failed password for root from 182.139.134.107 port 18561 ssh2 Oct 12 10:46:15 h2177944 sshd\[16070\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.139.134.107 user=root Oct 12 10:46:18 h2177944 sshd\[16070\]: Failed password for root from 182.139.134.107 port 13953 ssh2 ...	2019-10-12 17:34:43
185.176.27.42	attack	10/12/2019-04:47:51.845478 185.176.27.42 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-10-12 16:54:47
14.164.87.88	attackspambots	Unauthorized connection attempt from IP address 14.164.87.88 on Port 445(SMB)	2019-10-12 17:09:22
54.153.114.228	attack	Unauthorized connection attempt from IP address 54.153.114.228 on Port 445(SMB)	2019-10-12 16:55:37

Recently Reported IPs

152.81.194.200	69.162.126.126	162.62.19.79	70.92.6.28
68.183.66.219	190.98.96.230	151.181.54.220	90.76.121.230
222.186.175.8	192.210.203.196	31.41.113.113	116.50.239.51
110.228.181.113	209.158.51.225	40.58.250.12	209.59.219.35
97.31.35.252	196.239.135.87	190.89.38.250	57.24.198.54