157.245.20.173

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
157.245.204.142	attack	Oct 2 00:18:29 ajax sshd[29859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.142 Oct 2 00:18:31 ajax sshd[29859]: Failed password for invalid user laura from 157.245.204.142 port 33904 ssh2	2020-10-02 07:28:37
157.245.204.125	attackbots	Oct 1 15:46:07 mavik sshd[29518]: Invalid user u1 from 157.245.204.125 Oct 1 15:46:07 mavik sshd[29518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 Oct 1 15:46:09 mavik sshd[29518]: Failed password for invalid user u1 from 157.245.204.125 port 44562 ssh2 Oct 1 15:50:53 mavik sshd[29685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 user=root Oct 1 15:50:55 mavik sshd[29685]: Failed password for root from 157.245.204.125 port 53964 ssh2 ...	2020-10-02 05:49:04
157.245.204.142	attackbots	Oct 1 20:48:56 gw1 sshd[6933]: Failed password for root from 157.245.204.142 port 60280 ssh2 Oct 1 20:53:30 gw1 sshd[6973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.142 ...	2020-10-02 00:00:53
157.245.204.125	attackbots	Oct 1 14:33:06 mavik sshd[26479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 Oct 1 14:33:08 mavik sshd[26479]: Failed password for invalid user ubuntu from 157.245.204.125 port 35350 ssh2 Oct 1 14:37:30 mavik sshd[26635]: Invalid user test from 157.245.204.125 Oct 1 14:37:30 mavik sshd[26635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 Oct 1 14:37:32 mavik sshd[26635]: Failed password for invalid user test from 157.245.204.125 port 44746 ssh2 ...	2020-10-01 22:11:09
157.245.204.142	attack	Oct 1 07:12:08 IngegnereFirenze sshd[24468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.142 user=root ...	2020-10-01 16:07:37
157.245.204.125	attackbotsspam	Oct 1 07:56:56 srv-ubuntu-dev3 sshd[55847]: Invalid user tt from 157.245.204.125 Oct 1 07:56:56 srv-ubuntu-dev3 sshd[55847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 Oct 1 07:56:56 srv-ubuntu-dev3 sshd[55847]: Invalid user tt from 157.245.204.125 Oct 1 07:56:58 srv-ubuntu-dev3 sshd[55847]: Failed password for invalid user tt from 157.245.204.125 port 36206 ssh2 Oct 1 08:01:07 srv-ubuntu-dev3 sshd[56418]: Invalid user andy from 157.245.204.125 Oct 1 08:01:07 srv-ubuntu-dev3 sshd[56418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 Oct 1 08:01:07 srv-ubuntu-dev3 sshd[56418]: Invalid user andy from 157.245.204.125 Oct 1 08:01:09 srv-ubuntu-dev3 sshd[56418]: Failed password for invalid user andy from 157.245.204.125 port 45016 ssh2 Oct 1 08:05:30 srv-ubuntu-dev3 sshd[56937]: Invalid user abcs from 157.245.204.125 ...	2020-10-01 14:29:03
157.245.205.24	attack	$f2bV_matches	2020-09-29 05:11:29
157.245.205.24	attackspam	$f2bV_matches	2020-09-28 21:30:01
157.245.205.24	attackbotsspam	$f2bV_matches	2020-09-28 13:36:33
157.245.204.149	attackbotsspam	2020-09-23 18:28:46 wonderland sshd[18639]: Disconnected from invalid user root 157.245.204.149 port 37820 [preauth]	2020-09-24 01:03:02
157.245.204.149	attack	Sep 23 11:01:39 host1 sshd[120065]: Failed password for root from 157.245.204.149 port 49020 ssh2 Sep 23 11:05:55 host1 sshd[120371]: Invalid user guest2 from 157.245.204.149 port 58098 Sep 23 11:05:55 host1 sshd[120371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.149 Sep 23 11:05:55 host1 sshd[120371]: Invalid user guest2 from 157.245.204.149 port 58098 Sep 23 11:05:57 host1 sshd[120371]: Failed password for invalid user guest2 from 157.245.204.149 port 58098 ssh2 ...	2020-09-23 17:06:29
157.245.205.24	attackspambots	Sep 22 18:42:51 server sshd[7517]: Failed password for invalid user colin from 157.245.205.24 port 47878 ssh2 Sep 22 18:52:28 server sshd[9606]: Failed password for root from 157.245.205.24 port 46354 ssh2 Sep 22 18:55:19 server sshd[10197]: Failed password for invalid user joao from 157.245.205.24 port 60536 ssh2	2020-09-23 03:08:55
157.245.205.24	attackbotsspam	2020-09-22T04:49:25.205530sorsha.thespaminator.com sshd[19146]: Invalid user sanjay from 157.245.205.24 port 48704 2020-09-22T04:49:26.662748sorsha.thespaminator.com sshd[19146]: Failed password for invalid user sanjay from 157.245.205.24 port 48704 ssh2 ...	2020-09-22 19:18:25
157.245.207.215	attack	157.245.207.215 (SG/Singapore/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 19 08:23:32 server2 sshd[4116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.182.38 user=root Sep 19 08:21:36 server2 sshd[2510]: Failed password for root from 116.12.52.141 port 42839 ssh2 Sep 19 08:22:47 server2 sshd[3524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.161.78 user=root Sep 19 08:22:49 server2 sshd[3524]: Failed password for root from 139.59.161.78 port 15564 ssh2 Sep 19 08:21:25 server2 sshd[2319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.207.215 user=root Sep 19 08:21:27 server2 sshd[2319]: Failed password for root from 157.245.207.215 port 48754 ssh2 IP Addresses Blocked: 106.12.182.38 (CN/China/-) 116.12.52.141 (SG/Singapore/-) 139.59.161.78 (GB/United Kingdom/-)	2020-09-19 23:56:44
157.245.207.215	attackspambots	SSH Brute Force	2020-09-19 15:46:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.20.173
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54591
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.20.173.			IN	A

;; AUTHORITY SECTION:
.			550	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 13:28:37 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 173.20.245.157.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 173.20.245.157.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
94.29.126.158	attackspambots	Unauthorized connection attempt from IP address 94.29.126.158 on Port 445(SMB)	2020-03-07 01:59:17
42.114.151.71	attackspam	Unauthorized connection attempt from IP address 42.114.151.71 on Port 445(SMB)	2020-03-07 01:55:28
134.73.51.12	attackspam	Mar 6 15:24:31 mail.srvfarm.net postfix/smtpd[2149507]: NOQUEUE: reject: RCPT from unknown[134.73.51.12]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 15:24:31 mail.srvfarm.net postfix/smtpd[2137311]: NOQUEUE: reject: RCPT from unknown[134.73.51.12]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 15:24:31 mail.srvfarm.net postfix/smtpd[2152021]: NOQUEUE: reject: RCPT from unknown[134.73.51.12]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 15:24:31 mail.srvfarm.net postfix/smtpd[2149505]: NOQUEUE: reject: RCPT from unknown[134.73.51.12]: 450 4.1.8	2020-03-07 02:09:39
45.146.203.129	attackbotsspam	Mar 6 14:13:03 mail.srvfarm.net postfix/smtpd[2128698]: NOQUEUE: reject: RCPT from unknown[45.146.203.129]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 14:21:18 mail.srvfarm.net postfix/smtpd[2130205]: NOQUEUE: reject: RCPT from unknown[45.146.203.129]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 14:21:18 mail.srvfarm.net postfix/smtpd[2131732]: NOQUEUE: reject: RCPT from unknown[45.146.203.129]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 14:21:18 mail.srvfarm.net postfix/smtpd[2128648]: NOQUEUE: reject: RCPT from unknown[45.146.203.129]: 450 4.1.8	2020-03-07 02:13:08
179.222.96.70	attackbots	Mar 6 03:25:34 tdfoods sshd\[22877\]: Invalid user piotr from 179.222.96.70 Mar 6 03:25:34 tdfoods sshd\[22877\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.222.96.70 Mar 6 03:25:35 tdfoods sshd\[22877\]: Failed password for invalid user piotr from 179.222.96.70 port 41330 ssh2 Mar 6 03:30:24 tdfoods sshd\[23258\]: Invalid user wangxx from 179.222.96.70 Mar 6 03:30:24 tdfoods sshd\[23258\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.222.96.70	2020-03-07 02:17:48
15.226.97.12	attackspam	Scan detected and blocked 2020.03.06 14:30:38	2020-03-07 01:51:27
46.101.164.47	attackspam	Fail2Ban Ban Triggered (2)	2020-03-07 02:26:15
223.205.232.245	attackspam	Unauthorized connection attempt from IP address 223.205.232.245 on Port 445(SMB)	2020-03-07 02:28:09
124.123.117.85	attackspambots	Unauthorized connection attempt from IP address 124.123.117.85 on Port 445(SMB)	2020-03-07 02:35:07
69.94.144.8	attackbots	Mar 6 14:25:33 mail.srvfarm.net postfix/smtpd[2116293]: NOQUEUE: reject: RCPT from unknown[69.94.144.8]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 14:25:33 mail.srvfarm.net postfix/smtpd[2131454]: NOQUEUE: reject: RCPT from unknown[69.94.144.8]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 14:25:33 mail.srvfarm.net postfix/smtpd[2131733]: NOQUEUE: reject: RCPT from unknown[69.94.144.8]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 14:25:33 mail.srvfarm.net postfix/smtpd[2131736]: NOQUEUE: reject: RCPT from unknown[69.94.144.8]: 450 4.1.8	2020-03-07 02:11:19
114.33.113.68	attack	firewall-block, port(s): 4567/tcp	2020-03-07 02:29:48
112.85.42.185	attack	DATE:2020-03-06 18:33:05, IP:112.85.42.185, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq)	2020-03-07 02:31:59
183.145.60.52	attack	suspicious action Fri, 06 Mar 2020 10:30:14 -0300	2020-03-07 02:31:46
190.98.233.66	attack	Mar 6 18:18:56 mail.srvfarm.net postfix/smtpd[2200401]: warning: unknown[190.98.233.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 6 18:18:56 mail.srvfarm.net postfix/smtpd[2200401]: lost connection after AUTH from unknown[190.98.233.66] Mar 6 18:23:01 mail.srvfarm.net postfix/smtpd[2197929]: warning: unknown[190.98.233.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 6 18:23:01 mail.srvfarm.net postfix/smtpd[2197929]: lost connection after AUTH from unknown[190.98.233.66] Mar 6 18:27:41 mail.srvfarm.net postfix/smtpd[2212547]: warning: unknown[190.98.233.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-03-07 02:07:00
5.196.70.107	attack	Mar 6 07:52:34 web1 sshd\[1997\]: Invalid user boserver from 5.196.70.107 Mar 6 07:52:34 web1 sshd\[1997\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.70.107 Mar 6 07:52:36 web1 sshd\[1997\]: Failed password for invalid user boserver from 5.196.70.107 port 58082 ssh2 Mar 6 07:59:33 web1 sshd\[2642\]: Invalid user oracle from 5.196.70.107 Mar 6 07:59:33 web1 sshd\[2642\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.70.107	2020-03-07 02:18:44

Recently Reported IPs

157.245.204.138	157.245.213.101	157.245.195.20	157.245.200.203
157.245.210.152	157.245.209.181	157.245.209.185	157.245.214.119
157.245.216.18	157.245.227.78	157.245.218.19	157.245.228.164
157.245.225.158	157.245.215.192	157.245.231.81	157.245.214.126
157.245.228.158	157.245.217.255	157.245.224.134	157.245.235.12