Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: North Bergen

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
botsattackproxy
SSH bot
2024-04-26 12:58:07
Comments on same subnet:
IP Type Details Datetime
157.245.136.195 attackspambots
Unauthorized connection attempt detected from IP address 157.245.136.195 to port 2220 [J]
2020-01-26 21:15:44
157.245.136.253 attackspam
Oct  6 13:01:42 kmh-wsh-001-nbg03 sshd[32620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.136.253  user=r.r
Oct  6 13:01:43 kmh-wsh-001-nbg03 sshd[32620]: Failed password for r.r from 157.245.136.253 port 44194 ssh2
Oct  6 13:01:43 kmh-wsh-001-nbg03 sshd[32620]: Received disconnect from 157.245.136.253 port 44194:11: Bye Bye [preauth]
Oct  6 13:01:43 kmh-wsh-001-nbg03 sshd[32620]: Disconnected from 157.245.136.253 port 44194 [preauth]
Oct  6 13:13:21 kmh-wsh-001-nbg03 sshd[635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.136.253  user=r.r
Oct  6 13:13:23 kmh-wsh-001-nbg03 sshd[635]: Failed password for r.r from 157.245.136.253 port 44652 ssh2
Oct  6 13:13:23 kmh-wsh-001-nbg03 sshd[635]: Received disconnect from 157.245.136.253 port 44652:11: Bye Bye [preauth]
Oct  6 13:13:23 kmh-wsh-001-nbg03 sshd[635]: Disconnected from 157.245.136.253 port 44652 [preauth]
Oct  6 1........
-------------------------------
2019-10-08 02:46:46
157.245.136.253 attack
Oct  6 18:11:19 piServer sshd[9030]: Failed password for root from 157.245.136.253 port 33966 ssh2
Oct  6 18:15:43 piServer sshd[9269]: Failed password for root from 157.245.136.253 port 48172 ssh2
...
2019-10-07 03:07:58
157.245.136.35 attack
Honeypot attack, port: 23, PTR: PTR record not found
2019-09-29 19:22:48
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.136.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34104
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.136.221.		IN	A

;; AUTHORITY SECTION:
.			344	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024042502 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 26 12:58:05 CST 2024
;; MSG SIZE  rcvd: 108
Host info
Host 221.136.245.157.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 221.136.245.157.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
123.206.87.154 attack
Nov 11 15:16:12 thevastnessof sshd[12623]: Failed password for root from 123.206.87.154 port 57700 ssh2
...
2019-11-12 02:17:57
193.32.160.153 attackbots
2019-11-11T18:20:14.206773mail01 postfix/smtpd[12085]: NOQUEUE: reject: RCPT from unknown[193.32.160.153]: 550
2019-11-12 01:43:32
81.192.53.131 attackbots
Unauthorised access (Nov 11) SRC=81.192.53.131 LEN=40 TOS=0x08 PREC=0x20 TTL=242 ID=50351 TCP DPT=1433 WINDOW=1024 SYN
2019-11-12 02:13:32
61.246.7.145 attack
Nov 11 19:04:51 server sshd\[4187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.246.7.145  user=root
Nov 11 19:04:53 server sshd\[4187\]: Failed password for root from 61.246.7.145 port 33764 ssh2
Nov 11 19:16:36 server sshd\[7590\]: Invalid user birmingham from 61.246.7.145
Nov 11 19:16:36 server sshd\[7590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.246.7.145 
Nov 11 19:16:38 server sshd\[7590\]: Failed password for invalid user birmingham from 61.246.7.145 port 50916 ssh2
...
2019-11-12 02:14:07
92.119.160.40 attack
Unauthorized connection attempt from IP address 92.119.160.40 on Port 3389(RDP)
2019-11-12 02:09:53
113.185.72.138 spambotsattackproxynormal
Khanh1996
2019-11-12 02:02:38
201.148.31.113 attackbots
Unauthorised access (Nov 11) SRC=201.148.31.113 LEN=52 TTL=113 ID=28958 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-12 02:20:05
166.62.123.55 attack
C1,WP GET /suche/wp-login.php
2019-11-12 01:46:07
129.211.131.152 attackbots
2019-11-11T16:17:34.974538abusebot-8.cloudsearch.cf sshd\[26473\]: Invalid user imi from 129.211.131.152 port 41371
2019-11-12 02:20:30
46.16.130.204 attackspam
2019-11-11 x@x
2019-11-11 x@x
2019-11-11 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=46.16.130.204
2019-11-12 01:51:12
122.166.95.33 attackspambots
namecheap spam
2019-11-12 01:52:33
192.119.64.169 attackspambots
Nov 11 11:53:01 mail sshd\[44325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.119.64.169  user=root
...
2019-11-12 01:56:57
92.63.194.148 attackbots
11/11/2019-12:05:54.205087 92.63.194.148 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-12 01:40:52
197.44.94.127 attackspam
failed_logins
2019-11-12 01:52:52
190.186.170.83 attack
SSH invalid-user multiple login try
2019-11-12 01:59:41

Recently Reported IPs

162.216.150.241 24.199.94.151 65.49.1.18 194.50.16.10
137.184.255.50 205.210.31.84 38.54.56.92 1.85.219.56
149.34.242.97 95.113.233.85 35.198.74.157 78.128.114.30
154.40.60.112 13.58.48.116 65.49.1.71 65.49.1.73
226.247.18.57 8.218.222.11 58.242.130.180 122.155.5.47