Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Unauthorized connection attempt detected from IP address 157.245.142.212 to port 6379
2020-05-04 01:15:34
Comments on same subnet:
IP Type Details Datetime
157.245.142.218 attack
Aug 15 22:43:05 ns381471 sshd[7565]: Failed password for root from 157.245.142.218 port 37624 ssh2
2020-08-16 05:18:20
157.245.142.218 attack
Port scan denied
2020-08-15 15:08:21
157.245.142.218 attackbots
Aug 10 23:06:14 abendstille sshd\[24717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.142.218  user=root
Aug 10 23:06:15 abendstille sshd\[24717\]: Failed password for root from 157.245.142.218 port 34218 ssh2
Aug 10 23:10:33 abendstille sshd\[29164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.142.218  user=root
Aug 10 23:10:35 abendstille sshd\[29164\]: Failed password for root from 157.245.142.218 port 43558 ssh2
Aug 10 23:15:00 abendstille sshd\[1642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.142.218  user=root
...
2020-08-11 05:35:05
157.245.142.218 attackbots
Bruteforce detected by fail2ban
2020-08-05 05:31:23
157.245.142.218 attackspambots
Aug  2 12:56:48 vps-51d81928 sshd[394133]: Failed password for root from 157.245.142.218 port 36314 ssh2
Aug  2 12:58:04 vps-51d81928 sshd[394156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.142.218  user=root
Aug  2 12:58:06 vps-51d81928 sshd[394156]: Failed password for root from 157.245.142.218 port 54280 ssh2
Aug  2 12:59:22 vps-51d81928 sshd[394174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.142.218  user=root
Aug  2 12:59:24 vps-51d81928 sshd[394174]: Failed password for root from 157.245.142.218 port 44014 ssh2
...
2020-08-02 22:55:46
157.245.142.218 attackspambots
 TCP (SYN) 157.245.142.218:49998 -> port 18905, len 44
2020-07-23 15:54:40
157.245.142.218 attackspambots
 TCP (SYN) 157.245.142.218:58825 -> port 25226, len 44
2020-07-14 02:06:50
157.245.142.218 attackbotsspam
Jul 12 13:59:49 debian-2gb-nbg1-2 kernel: \[16813768.259166\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=157.245.142.218 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=8646 PROTO=TCP SPT=47129 DPT=14331 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-12 20:14:34
157.245.142.218 attackbots
k+ssh-bruteforce
2020-07-01 22:06:00
157.245.142.218 attackbotsspam
SSH Brute-Force Attack
2020-06-22 03:46:00
157.245.142.218 attackbots
Invalid user administrator from 157.245.142.218 port 58666
2020-06-20 20:12:49
157.245.142.218 attack
Jun  1 22:48:04 eventyay sshd[15531]: Failed password for root from 157.245.142.218 port 53294 ssh2
Jun  1 22:51:34 eventyay sshd[15610]: Failed password for root from 157.245.142.218 port 58242 ssh2
...
2020-06-02 05:06:00
157.245.142.78 attackbots
8291/tcp 5094/tcp 515/tcp...
[2020-04-09/05-03]19pkt,14pt.(tcp),1pt.(udp)
2020-05-04 08:30:30
157.245.142.78 attackspambots
[Wed Apr 22 08:11:28 2020] - DDoS Attack From IP: 157.245.142.78 Port: 32909
2020-04-28 08:00:39
157.245.142.218 attackspambots
$f2bV_matches
2020-04-16 01:54:07
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.142.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 467
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.245.142.212.		IN	A

;; AUTHORITY SECTION:
.			492	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050300 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 04 01:15:29 CST 2020
;; MSG SIZE  rcvd: 119
Host info
Host 212.142.245.157.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 212.142.245.157.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
122.51.204.45 attack
Invalid user yangdeyue from 122.51.204.45 port 49930
2020-08-02 17:14:57
139.59.95.60 attackbots
Aug  2 11:02:20 vps647732 sshd[6525]: Failed password for root from 139.59.95.60 port 51062 ssh2
...
2020-08-02 17:20:24
3.88.127.60 attackspam
Icarus honeypot on github
2020-08-02 17:25:30
110.145.140.210 attackspambots
Invalid user naison from 110.145.140.210 port 52404
2020-08-02 17:45:37
118.27.9.229 attackspambots
Aug  2 05:29:06 ws12vmsma01 sshd[35277]: Failed password for root from 118.27.9.229 port 38200 ssh2
Aug  2 05:31:55 ws12vmsma01 sshd[35736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=v118-27-9-229.6lby.static.cnode.io  user=root
Aug  2 05:31:57 ws12vmsma01 sshd[35736]: Failed password for root from 118.27.9.229 port 52858 ssh2
...
2020-08-02 17:36:49
2.42.196.30 attackspam
port scan and connect, tcp 23 (telnet)
2020-08-02 17:48:34
177.124.184.44 attackbotsspam
Aug  2 07:52:39 piServer sshd[5172]: Failed password for root from 177.124.184.44 port 58342 ssh2
Aug  2 07:57:37 piServer sshd[5578]: Failed password for root from 177.124.184.44 port 60360 ssh2
...
2020-08-02 17:38:00
104.248.88.100 attackbots
CMS (WordPress or Joomla) login attempt.
2020-08-02 17:34:58
200.56.91.234 attack
Automatic report - Port Scan Attack
2020-08-02 17:22:04
171.231.108.16 attackbots
1596340140 - 08/02/2020 05:49:00 Host: 171.231.108.16/171.231.108.16 Port: 445 TCP Blocked
2020-08-02 17:16:31
142.44.185.242 attack
Fail2Ban
2020-08-02 17:32:22
65.50.209.87 attack
Aug  2 09:20:27 ip-172-31-61-156 sshd[22661]: Failed password for root from 65.50.209.87 port 52024 ssh2
Aug  2 09:24:35 ip-172-31-61-156 sshd[22793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.50.209.87  user=root
Aug  2 09:24:37 ip-172-31-61-156 sshd[22793]: Failed password for root from 65.50.209.87 port 36930 ssh2
Aug  2 09:24:35 ip-172-31-61-156 sshd[22793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.50.209.87  user=root
Aug  2 09:24:37 ip-172-31-61-156 sshd[22793]: Failed password for root from 65.50.209.87 port 36930 ssh2
...
2020-08-02 17:42:18
51.15.136.2 attackspam
 TCP (SYN) 51.15.136.2:51805 -> port 23, len 44
2020-08-02 17:13:57
159.89.236.71 attackspambots
trying to access non-authorized port
2020-08-02 17:16:11
92.81.62.32 attack
Aug  2 07:42:57 cdc sshd[8593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.81.62.32  user=pi
Aug  2 07:42:59 cdc sshd[8593]: Failed password for invalid user pi from 92.81.62.32 port 54792 ssh2
2020-08-02 17:31:07

Recently Reported IPs

80.158.172.167 194.44.43.54 13.182.212.145 181.136.63.96
65.171.242.162 96.223.221.245 2601:484:8003:a480:5854:4378:ba06:5838 192.253.205.36
125.253.221.204 123.149.160.16 178.140.204.61 162.232.155.214
194.29.67.96 206.189.207.28 52.255.160.246 10.0.0.251
228.0.26.131 166.175.60.166 124.156.184.135 176.31.255.87