Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
fail2ban/Jun 29 14:39:28 h1962932 sshd[29747]: Invalid user swa from 157.245.204.153 port 39364
Jun 29 14:39:28 h1962932 sshd[29747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.153
Jun 29 14:39:28 h1962932 sshd[29747]: Invalid user swa from 157.245.204.153 port 39364
Jun 29 14:39:30 h1962932 sshd[29747]: Failed password for invalid user swa from 157.245.204.153 port 39364 ssh2
Jun 29 14:45:56 h1962932 sshd[13271]: Invalid user asia from 157.245.204.153 port 9421
2020-06-29 22:27:56
attack
Jun 24 14:00:23 roki-contabo sshd\[26326\]: Invalid user ts3srv from 157.245.204.153
Jun 24 14:00:23 roki-contabo sshd\[26326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.153
Jun 24 14:00:25 roki-contabo sshd\[26326\]: Failed password for invalid user ts3srv from 157.245.204.153 port 16258 ssh2
Jun 24 14:05:59 roki-contabo sshd\[26452\]: Invalid user admin from 157.245.204.153
Jun 24 14:05:59 roki-contabo sshd\[26452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.153
...
2020-06-25 00:01:22
attack
Invalid user murai from 157.245.204.153 port 7556
2020-06-24 07:48:28
Comments on same subnet:
IP Type Details Datetime
157.245.204.142 attack
Oct  2 00:18:29 ajax sshd[29859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.142 
Oct  2 00:18:31 ajax sshd[29859]: Failed password for invalid user laura from 157.245.204.142 port 33904 ssh2
2020-10-02 07:28:37
157.245.204.125 attackbots
Oct  1 15:46:07 mavik sshd[29518]: Invalid user u1 from 157.245.204.125
Oct  1 15:46:07 mavik sshd[29518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125
Oct  1 15:46:09 mavik sshd[29518]: Failed password for invalid user u1 from 157.245.204.125 port 44562 ssh2
Oct  1 15:50:53 mavik sshd[29685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125  user=root
Oct  1 15:50:55 mavik sshd[29685]: Failed password for root from 157.245.204.125 port 53964 ssh2
...
2020-10-02 05:49:04
157.245.204.142 attackbots
Oct  1 20:48:56 gw1 sshd[6933]: Failed password for root from 157.245.204.142 port 60280 ssh2
Oct  1 20:53:30 gw1 sshd[6973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.142
...
2020-10-02 00:00:53
157.245.204.125 attackbots
Oct  1 14:33:06 mavik sshd[26479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125
Oct  1 14:33:08 mavik sshd[26479]: Failed password for invalid user ubuntu from 157.245.204.125 port 35350 ssh2
Oct  1 14:37:30 mavik sshd[26635]: Invalid user test from 157.245.204.125
Oct  1 14:37:30 mavik sshd[26635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125
Oct  1 14:37:32 mavik sshd[26635]: Failed password for invalid user test from 157.245.204.125 port 44746 ssh2
...
2020-10-01 22:11:09
157.245.204.142 attack
Oct  1 07:12:08 IngegnereFirenze sshd[24468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.142  user=root
...
2020-10-01 16:07:37
157.245.204.125 attackbotsspam
Oct  1 07:56:56 srv-ubuntu-dev3 sshd[55847]: Invalid user tt from 157.245.204.125
Oct  1 07:56:56 srv-ubuntu-dev3 sshd[55847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125
Oct  1 07:56:56 srv-ubuntu-dev3 sshd[55847]: Invalid user tt from 157.245.204.125
Oct  1 07:56:58 srv-ubuntu-dev3 sshd[55847]: Failed password for invalid user tt from 157.245.204.125 port 36206 ssh2
Oct  1 08:01:07 srv-ubuntu-dev3 sshd[56418]: Invalid user andy from 157.245.204.125
Oct  1 08:01:07 srv-ubuntu-dev3 sshd[56418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125
Oct  1 08:01:07 srv-ubuntu-dev3 sshd[56418]: Invalid user andy from 157.245.204.125
Oct  1 08:01:09 srv-ubuntu-dev3 sshd[56418]: Failed password for invalid user andy from 157.245.204.125 port 45016 ssh2
Oct  1 08:05:30 srv-ubuntu-dev3 sshd[56937]: Invalid user abcs from 157.245.204.125
...
2020-10-01 14:29:03
157.245.204.149 attackbotsspam
2020-09-23 18:28:46 wonderland sshd[18639]: Disconnected from invalid user root 157.245.204.149 port 37820 [preauth]
2020-09-24 01:03:02
157.245.204.149 attack
Sep 23 11:01:39 host1 sshd[120065]: Failed password for root from 157.245.204.149 port 49020 ssh2
Sep 23 11:05:55 host1 sshd[120371]: Invalid user guest2 from 157.245.204.149 port 58098
Sep 23 11:05:55 host1 sshd[120371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.149 
Sep 23 11:05:55 host1 sshd[120371]: Invalid user guest2 from 157.245.204.149 port 58098
Sep 23 11:05:57 host1 sshd[120371]: Failed password for invalid user guest2 from 157.245.204.149 port 58098 ssh2
...
2020-09-23 17:06:29
157.245.204.198 attackspambots
2020-04-09T03:54:22Z - RDP login failed multiple times. (157.245.204.198)
2020-04-09 14:40:30
157.245.204.198 attack
2020-04-01T09:24:55Z - RDP login failed multiple times. (157.245.204.198)
2020-04-01 18:28:50
157.245.204.227 attackbots
Unauthorized connection attempt detected from IP address 157.245.204.227 to port 2220 [J]
2020-01-25 02:13:48
157.245.204.139 attack
Jan 21 14:39:53 ns4 sshd[7762]: Invalid user dy from 157.245.204.139
Jan 21 14:39:53 ns4 sshd[7762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.139 
Jan 21 14:39:55 ns4 sshd[7762]: Failed password for invalid user dy from 157.245.204.139 port 56190 ssh2
Jan 21 14:44:55 ns4 sshd[8987]: Invalid user marco from 157.245.204.139
Jan 21 14:44:55 ns4 sshd[8987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.139 
Jan 21 14:44:57 ns4 sshd[8987]: Failed password for invalid user marco from 157.245.204.139 port 38930 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=157.245.204.139
2020-01-21 23:14:03
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.204.153
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 238
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.245.204.153.		IN	A

;; AUTHORITY SECTION:
.			409	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062301 1800 900 604800 86400

;; Query time: 90 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 24 07:48:25 CST 2020
;; MSG SIZE  rcvd: 119
Host info
Host 153.204.245.157.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 153.204.245.157.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
120.201.124.158 attackspambots
Dec 19 15:57:00 loxhost sshd\[11809\]: Invalid user jjjjjjjjjj from 120.201.124.158 port 56125
Dec 19 15:57:00 loxhost sshd\[11809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.124.158
Dec 19 15:57:02 loxhost sshd\[11809\]: Failed password for invalid user jjjjjjjjjj from 120.201.124.158 port 56125 ssh2
Dec 19 16:06:42 loxhost sshd\[12246\]: Invalid user 123456789 from 120.201.124.158 port 50528
Dec 19 16:06:42 loxhost sshd\[12246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.124.158
...
2019-12-20 00:08:51
157.245.217.100 attackspambots
Dec 19 06:44:58 vps34202 sshd[7845]: Invalid user buford from 157.245.217.100
Dec 19 06:44:58 vps34202 sshd[7845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.217.100 
Dec 19 06:45:00 vps34202 sshd[7845]: Failed password for invalid user buford from 157.245.217.100 port 40892 ssh2
Dec 19 06:45:00 vps34202 sshd[7845]: Received disconnect from 157.245.217.100: 11: Bye Bye [preauth]
Dec 19 06:55:53 vps34202 sshd[8155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.217.100  user=r.r
Dec 19 06:55:55 vps34202 sshd[8155]: Failed password for r.r from 157.245.217.100 port 38276 ssh2
Dec 19 06:55:55 vps34202 sshd[8155]: Received disconnect from 157.245.217.100: 11: Bye Bye [preauth]
Dec 19 07:00:49 vps34202 sshd[8384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.217.100  user=r.r
Dec 19 07:00:51 vps34202 sshd[8384]: Failed pass........
-------------------------------
2019-12-20 00:14:56
207.38.90.13 attack
Dec 19 15:38:37 debian-2gb-nbg1-2 kernel: \[419085.425550\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=207.38.90.13 DST=195.201.40.59 LEN=440 TOS=0x00 PREC=0x00 TTL=50 ID=0 DF PROTO=UDP SPT=5283 DPT=5060 LEN=420
2019-12-19 23:41:43
5.135.177.168 attackbots
Dec 19 04:51:59 auw2 sshd\[19455\]: Invalid user ersatz from 5.135.177.168
Dec 19 04:51:59 auw2 sshd\[19455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns332895.ip-5-135-177.eu
Dec 19 04:52:01 auw2 sshd\[19455\]: Failed password for invalid user ersatz from 5.135.177.168 port 41506 ssh2
Dec 19 04:59:01 auw2 sshd\[20115\]: Invalid user mikalsen from 5.135.177.168
Dec 19 04:59:01 auw2 sshd\[20115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns332895.ip-5-135-177.eu
2019-12-19 23:55:49
177.220.177.143 attackbotsspam
detected by Fail2Ban
2019-12-19 23:44:36
49.156.53.17 attackspam
Dec 19 20:46:05 gw1 sshd[26517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.156.53.17
Dec 19 20:46:07 gw1 sshd[26517]: Failed password for invalid user sun from 49.156.53.17 port 21875 ssh2
...
2019-12-19 23:53:43
27.50.24.83 attackbotsspam
Dec 19 16:20:23 xeon sshd[29394]: Failed password for root from 27.50.24.83 port 55316 ssh2
2019-12-19 23:51:07
210.51.161.210 attackspam
Dec 19 08:15:12 mockhub sshd[12444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.51.161.210
Dec 19 08:15:14 mockhub sshd[12444]: Failed password for invalid user raspberry from 210.51.161.210 port 39604 ssh2
...
2019-12-20 00:17:27
51.77.215.227 attack
Dec 19 16:38:23 nextcloud sshd\[31627\]: Invalid user hamada from 51.77.215.227
Dec 19 16:38:23 nextcloud sshd\[31627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.215.227
Dec 19 16:38:25 nextcloud sshd\[31627\]: Failed password for invalid user hamada from 51.77.215.227 port 53756 ssh2
...
2019-12-20 00:12:30
121.15.2.178 attackspam
SSH bruteforce
2019-12-20 00:11:33
222.186.175.220 attackbots
Dec 19 16:44:41 ns3042688 sshd\[6046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220  user=root
Dec 19 16:44:44 ns3042688 sshd\[6046\]: Failed password for root from 222.186.175.220 port 61356 ssh2
Dec 19 16:44:46 ns3042688 sshd\[6046\]: Failed password for root from 222.186.175.220 port 61356 ssh2
Dec 19 16:44:50 ns3042688 sshd\[6046\]: Failed password for root from 222.186.175.220 port 61356 ssh2
Dec 19 16:45:01 ns3042688 sshd\[6202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220  user=root
...
2019-12-19 23:50:17
170.210.214.50 attackbotsspam
Dec 19 10:39:02 linuxvps sshd\[60167\]: Invalid user test from 170.210.214.50
Dec 19 10:39:02 linuxvps sshd\[60167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.214.50
Dec 19 10:39:04 linuxvps sshd\[60167\]: Failed password for invalid user test from 170.210.214.50 port 34258 ssh2
Dec 19 10:44:30 linuxvps sshd\[63792\]: Invalid user euell from 170.210.214.50
Dec 19 10:44:30 linuxvps sshd\[63792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.214.50
2019-12-19 23:46:49
138.204.201.246 attack
Unauthorized connection attempt from IP address 138.204.201.246 on Port 445(SMB)
2019-12-20 00:18:33
80.211.45.85 attack
Dec 19 05:41:28 sachi sshd\[30881\]: Invalid user guest from 80.211.45.85
Dec 19 05:41:28 sachi sshd\[30881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
Dec 19 05:41:30 sachi sshd\[30881\]: Failed password for invalid user guest from 80.211.45.85 port 60844 ssh2
Dec 19 05:46:43 sachi sshd\[31363\]: Invalid user yoyo from 80.211.45.85
Dec 19 05:46:43 sachi sshd\[31363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.45.85
2019-12-19 23:55:26
112.50.192.102 attackbots
Dec 19 15:31:58 pi sshd\[24443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.50.192.102  user=root
Dec 19 15:32:01 pi sshd\[24443\]: Failed password for root from 112.50.192.102 port 35651 ssh2
Dec 19 15:38:46 pi sshd\[24776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.50.192.102  user=root
Dec 19 15:38:48 pi sshd\[24776\]: Failed password for root from 112.50.192.102 port 32970 ssh2
Dec 19 15:45:42 pi sshd\[25243\]: Invalid user rnashcroft from 112.50.192.102 port 58523
...
2019-12-19 23:47:47

Recently Reported IPs

82.139.9.132 115.152.133.62 143.198.142.2 185.119.15.198
82.115.90.162 193.250.67.46 165.211.224.88 89.151.46.206
113.166.71.219 211.123.0.154 161.67.77.96 209.215.157.48
47.200.173.231 165.52.240.22 71.219.166.34 193.248.45.83
88.163.9.62 87.12.180.161 154.109.117.192 223.91.124.209