157.245.200.16

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	k+ssh-bruteforce	2020-09-17 02:07:31
attackbotsspam	k+ssh-bruteforce	2020-09-16 18:25:26
attackspam	Time: Mon Sep 14 14:59:19 2020 +0000 IP: 157.245.200.16 (-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 14 14:42:01 ca-18-ede1 sshd[21364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.200.16 user=root Sep 14 14:42:03 ca-18-ede1 sshd[21364]: Failed password for root from 157.245.200.16 port 45464 ssh2 Sep 14 14:54:29 ca-18-ede1 sshd[22707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.200.16 user=root Sep 14 14:54:31 ca-18-ede1 sshd[22707]: Failed password for root from 157.245.200.16 port 54034 ssh2 Sep 14 14:59:18 ca-18-ede1 sshd[23269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.200.16 user=root	2020-09-15 00:56:32
attack	SSH Brute-Forcing (server1)	2020-09-14 16:40:08

Comments on same subnet:

IP	Type	Details	Datetime
157.245.200.233	attackspam	Sep 16 13:15:32 gospond sshd[20951]: Failed password for root from 157.245.200.233 port 51268 ssh2 Sep 16 13:15:30 gospond sshd[20951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.200.233 user=root Sep 16 13:15:32 gospond sshd[20951]: Failed password for root from 157.245.200.233 port 51268 ssh2 ...	2020-09-16 20:29:18
157.245.200.233	attack	Sep 15 23:09:47 ws22vmsma01 sshd[242491]: Failed password for root from 157.245.200.233 port 38222 ssh2 ...	2020-09-16 13:00:31
157.245.200.233	attack	Sep 15 17:03:43 ws24vmsma01 sshd[198124]: Failed password for root from 157.245.200.233 port 59354 ssh2 Sep 15 17:10:32 ws24vmsma01 sshd[136005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.200.233 ...	2020-09-16 04:46:26
157.245.200.68	attackspambots	$f2bV_matches	2020-09-15 22:42:34
157.245.200.233	attack	(sshd) Failed SSH login from 157.245.200.233 (SG/Singapore/-/Singapore (Pioneer)/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 15 03:29:34 atlas sshd[28870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.200.233 user=root Sep 15 03:29:36 atlas sshd[28870]: Failed password for root from 157.245.200.233 port 32780 ssh2 Sep 15 03:38:44 atlas sshd[31402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.200.233 user=root Sep 15 03:38:47 atlas sshd[31402]: Failed password for root from 157.245.200.233 port 60498 ssh2 Sep 15 03:43:31 atlas sshd[451]: Invalid user t7adm from 157.245.200.233 port 45338	2020-09-15 21:50:48
157.245.200.68	attackspambots	$f2bV_matches	2020-09-15 14:38:08
157.245.200.233	attackspambots	Sep 15 07:22:33 vmd26974 sshd[31414]: Failed password for root from 157.245.200.233 port 46982 ssh2 ...	2020-09-15 13:48:25
157.245.200.68	attackspam	[ssh] SSH attack	2020-09-15 06:46:44
157.245.200.233	attack	SSH invalid-user multiple login try	2020-09-15 05:59:44
157.245.200.68	attackbots	Invalid user empleado from 157.245.200.68 port 47548	2020-09-03 22:04:36
157.245.200.68	attack	Port Scan detected from 157.245.200.68 (SG/Singapore/-/Singapore (Pioneer)/-). 4 hits in the last 80 seconds	2020-09-03 13:46:04
157.245.200.68	attackbots	2020-09-02T15:39:10.377025sorsha.thespaminator.com sshd[25640]: Invalid user raghu from 157.245.200.68 port 38864 2020-09-02T15:39:12.490650sorsha.thespaminator.com sshd[25640]: Failed password for invalid user raghu from 157.245.200.68 port 38864 ssh2 ...	2020-09-03 05:59:08
157.245.200.133	attack	2020-04-26T21:53:18.014159shield sshd\[23530\]: Invalid user postgres from 157.245.200.133 port 55574 2020-04-26T21:53:18.018304shield sshd\[23530\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.200.133 2020-04-26T21:53:19.551124shield sshd\[23530\]: Failed password for invalid user postgres from 157.245.200.133 port 55574 ssh2 2020-04-26T21:58:09.800131shield sshd\[24441\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.200.133 user=root 2020-04-26T21:58:12.281487shield sshd\[24441\]: Failed password for root from 157.245.200.133 port 43284 ssh2	2020-04-27 07:42:32
157.245.200.79	attackspambots	Invalid user postgres from 157.245.200.79 port 45928	2020-03-11 16:49:54
157.245.200.79	attackspam	2020-03-01T07:09:55.207339centos sshd\[4005\]: Invalid user bruno from 157.245.200.79 port 44814 2020-03-01T07:09:55.212176centos sshd\[4005\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.200.79 2020-03-01T07:09:57.420705centos sshd\[4005\]: Failed password for invalid user bruno from 157.245.200.79 port 44814 ssh2	2020-03-01 14:30:01

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.200.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3604
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.245.200.16.			IN	A

;; AUTHORITY SECTION:
.			544	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091400 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 14 16:40:02 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 16.200.245.157.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 16.200.245.157.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
142.93.196.133	attack	Jan 23 15:14:31 eddieflores sshd\[8411\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.196.133 user=root Jan 23 15:14:34 eddieflores sshd\[8411\]: Failed password for root from 142.93.196.133 port 59440 ssh2 Jan 23 15:17:20 eddieflores sshd\[8811\]: Invalid user ms from 142.93.196.133 Jan 23 15:17:20 eddieflores sshd\[8811\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.196.133 Jan 23 15:17:22 eddieflores sshd\[8811\]: Failed password for invalid user ms from 142.93.196.133 port 33054 ssh2	2020-01-24 09:20:33
103.81.86.38	attackbotsspam	Automatic report - Banned IP Access	2020-01-24 08:51:27
159.138.154.110	attack	Automatic report - Banned IP Access	2020-01-24 08:49:50
49.234.23.248	attackspam	Unauthorized connection attempt detected from IP address 49.234.23.248 to port 2220 [J]	2020-01-24 09:19:47
186.130.14.222	attack	TCP Port: 25 invalid blocked abuseat-org also barracuda and zen-spamhaus (22)	2020-01-24 08:55:29
185.216.140.252	attackspam	firewall-block, port(s): 33089/tcp, 33589/tcp, 33879/tcp	2020-01-24 09:13:39
51.38.71.36	attackspambots	Jan 23 14:57:58 php1 sshd\[19252\]: Invalid user image from 51.38.71.36 Jan 23 14:57:58 php1 sshd\[19252\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.ip-51-38-71.eu Jan 23 14:57:59 php1 sshd\[19252\]: Failed password for invalid user image from 51.38.71.36 port 44884 ssh2 Jan 23 15:00:21 php1 sshd\[20016\]: Invalid user uk from 51.38.71.36 Jan 23 15:00:21 php1 sshd\[20016\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.ip-51-38-71.eu	2020-01-24 09:22:32
77.101.5.200	attack	TCP Port: 25 invalid blocked dnsbl-sorbs also abuseat-org and barracuda (17)	2020-01-24 09:13:23
51.91.102.97	attackspambots	Jan 24 01:10:33 game-panel sshd[6269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.102.97 Jan 24 01:10:35 game-panel sshd[6269]: Failed password for invalid user izak from 51.91.102.97 port 44294 ssh2 Jan 24 01:12:57 game-panel sshd[6349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.102.97	2020-01-24 09:25:49
182.242.143.78	attack	Unauthorized connection attempt detected from IP address 182.242.143.78 to port 2220 [J]	2020-01-24 09:04:08
81.28.104.104	attack	Jan 24 02:19:41 grey postfix/smtpd\[5560\]: NOQUEUE: reject: RCPT from acidic.wciran.com\[81.28.104.104\]: 554 5.7.1 Service unavailable\; Client host \[81.28.104.104\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[81.28.104.104\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-24 09:23:27
103.71.40.42	attackbots	Automatic report - SSH Brute-Force Attack	2020-01-24 09:25:20
213.251.41.52	attack	Jan 24 01:59:09 lnxded64 sshd[27255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.41.52 Jan 24 01:59:11 lnxded64 sshd[27255]: Failed password for invalid user test from 213.251.41.52 port 35632 ssh2 Jan 24 02:06:47 lnxded64 sshd[29656]: Failed password for root from 213.251.41.52 port 57042 ssh2	2020-01-24 09:17:34
91.92.214.64	attack	20/1/23@19:17:35: FAIL: Alarm-Intrusion address from=91.92.214.64 ...	2020-01-24 09:06:16
190.3.84.151	attackbots	Jan 24 01:09:27 tuxlinux sshd[32338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.3.84.151 user=root Jan 24 01:09:29 tuxlinux sshd[32338]: Failed password for root from 190.3.84.151 port 48215 ssh2 Jan 24 01:09:27 tuxlinux sshd[32338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.3.84.151 user=root Jan 24 01:09:29 tuxlinux sshd[32338]: Failed password for root from 190.3.84.151 port 48215 ssh2 Jan 24 01:17:55 tuxlinux sshd[32468]: Invalid user tapas from 190.3.84.151 port 40064 Jan 24 01:17:55 tuxlinux sshd[32468]: Invalid user tapas from 190.3.84.151 port 40064 Jan 24 01:17:55 tuxlinux sshd[32468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.3.84.151 ...	2020-01-24 08:46:57

Recently Reported IPs

211.229.227.255	116.106.122.51	45.248.194.39	123.30.237.92
52.147.217.209	106.75.8.144	82.221.146.3	78.193.56.234
37.139.25.84	122.226.239.40	12.117.28.132	94.183.31.11
120.59.124.77	116.75.213.71	139.186.66.109	179.127.144.110
233.240.199.197	174.217.29.109	103.195.0.190	189.146.116.125