City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspambots | 2020-04-09T03:54:22Z - RDP login failed multiple times. (157.245.204.198) |
2020-04-09 14:40:30 |
| attack | 2020-04-01T09:24:55Z - RDP login failed multiple times. (157.245.204.198) |
2020-04-01 18:28:50 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 157.245.204.142 | attack | Oct 2 00:18:29 ajax sshd[29859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.142 Oct 2 00:18:31 ajax sshd[29859]: Failed password for invalid user laura from 157.245.204.142 port 33904 ssh2 |
2020-10-02 07:28:37 |
| 157.245.204.125 | attackbots | Oct 1 15:46:07 mavik sshd[29518]: Invalid user u1 from 157.245.204.125 Oct 1 15:46:07 mavik sshd[29518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 Oct 1 15:46:09 mavik sshd[29518]: Failed password for invalid user u1 from 157.245.204.125 port 44562 ssh2 Oct 1 15:50:53 mavik sshd[29685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 user=root Oct 1 15:50:55 mavik sshd[29685]: Failed password for root from 157.245.204.125 port 53964 ssh2 ... |
2020-10-02 05:49:04 |
| 157.245.204.142 | attackbots | Oct 1 20:48:56 gw1 sshd[6933]: Failed password for root from 157.245.204.142 port 60280 ssh2 Oct 1 20:53:30 gw1 sshd[6973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.142 ... |
2020-10-02 00:00:53 |
| 157.245.204.125 | attackbots | Oct 1 14:33:06 mavik sshd[26479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 Oct 1 14:33:08 mavik sshd[26479]: Failed password for invalid user ubuntu from 157.245.204.125 port 35350 ssh2 Oct 1 14:37:30 mavik sshd[26635]: Invalid user test from 157.245.204.125 Oct 1 14:37:30 mavik sshd[26635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 Oct 1 14:37:32 mavik sshd[26635]: Failed password for invalid user test from 157.245.204.125 port 44746 ssh2 ... |
2020-10-01 22:11:09 |
| 157.245.204.142 | attack | Oct 1 07:12:08 IngegnereFirenze sshd[24468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.142 user=root ... |
2020-10-01 16:07:37 |
| 157.245.204.125 | attackbotsspam | Oct 1 07:56:56 srv-ubuntu-dev3 sshd[55847]: Invalid user tt from 157.245.204.125 Oct 1 07:56:56 srv-ubuntu-dev3 sshd[55847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 Oct 1 07:56:56 srv-ubuntu-dev3 sshd[55847]: Invalid user tt from 157.245.204.125 Oct 1 07:56:58 srv-ubuntu-dev3 sshd[55847]: Failed password for invalid user tt from 157.245.204.125 port 36206 ssh2 Oct 1 08:01:07 srv-ubuntu-dev3 sshd[56418]: Invalid user andy from 157.245.204.125 Oct 1 08:01:07 srv-ubuntu-dev3 sshd[56418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.125 Oct 1 08:01:07 srv-ubuntu-dev3 sshd[56418]: Invalid user andy from 157.245.204.125 Oct 1 08:01:09 srv-ubuntu-dev3 sshd[56418]: Failed password for invalid user andy from 157.245.204.125 port 45016 ssh2 Oct 1 08:05:30 srv-ubuntu-dev3 sshd[56937]: Invalid user abcs from 157.245.204.125 ... |
2020-10-01 14:29:03 |
| 157.245.204.149 | attackbotsspam | 2020-09-23 18:28:46 wonderland sshd[18639]: Disconnected from invalid user root 157.245.204.149 port 37820 [preauth] |
2020-09-24 01:03:02 |
| 157.245.204.149 | attack | Sep 23 11:01:39 host1 sshd[120065]: Failed password for root from 157.245.204.149 port 49020 ssh2 Sep 23 11:05:55 host1 sshd[120371]: Invalid user guest2 from 157.245.204.149 port 58098 Sep 23 11:05:55 host1 sshd[120371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.149 Sep 23 11:05:55 host1 sshd[120371]: Invalid user guest2 from 157.245.204.149 port 58098 Sep 23 11:05:57 host1 sshd[120371]: Failed password for invalid user guest2 from 157.245.204.149 port 58098 ssh2 ... |
2020-09-23 17:06:29 |
| 157.245.204.153 | attackbots | fail2ban/Jun 29 14:39:28 h1962932 sshd[29747]: Invalid user swa from 157.245.204.153 port 39364 Jun 29 14:39:28 h1962932 sshd[29747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.153 Jun 29 14:39:28 h1962932 sshd[29747]: Invalid user swa from 157.245.204.153 port 39364 Jun 29 14:39:30 h1962932 sshd[29747]: Failed password for invalid user swa from 157.245.204.153 port 39364 ssh2 Jun 29 14:45:56 h1962932 sshd[13271]: Invalid user asia from 157.245.204.153 port 9421 |
2020-06-29 22:27:56 |
| 157.245.204.153 | attack | Jun 24 14:00:23 roki-contabo sshd\[26326\]: Invalid user ts3srv from 157.245.204.153 Jun 24 14:00:23 roki-contabo sshd\[26326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.153 Jun 24 14:00:25 roki-contabo sshd\[26326\]: Failed password for invalid user ts3srv from 157.245.204.153 port 16258 ssh2 Jun 24 14:05:59 roki-contabo sshd\[26452\]: Invalid user admin from 157.245.204.153 Jun 24 14:05:59 roki-contabo sshd\[26452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.153 ... |
2020-06-25 00:01:22 |
| 157.245.204.153 | attack | Invalid user murai from 157.245.204.153 port 7556 |
2020-06-24 07:48:28 |
| 157.245.204.227 | attackbots | Unauthorized connection attempt detected from IP address 157.245.204.227 to port 2220 [J] |
2020-01-25 02:13:48 |
| 157.245.204.139 | attack | Jan 21 14:39:53 ns4 sshd[7762]: Invalid user dy from 157.245.204.139 Jan 21 14:39:53 ns4 sshd[7762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.139 Jan 21 14:39:55 ns4 sshd[7762]: Failed password for invalid user dy from 157.245.204.139 port 56190 ssh2 Jan 21 14:44:55 ns4 sshd[8987]: Invalid user marco from 157.245.204.139 Jan 21 14:44:55 ns4 sshd[8987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.204.139 Jan 21 14:44:57 ns4 sshd[8987]: Failed password for invalid user marco from 157.245.204.139 port 38930 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=157.245.204.139 |
2020-01-21 23:14:03 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.204.198
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10997
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.245.204.198. IN A
;; AUTHORITY SECTION:
. 483 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020033102 1800 900 604800 86400
;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 01 18:28:42 CST 2020
;; MSG SIZE rcvd: 119Host 198.204.245.157.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 198.204.245.157.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.237 | attackspambots | Apr 8 02:46:18 NPSTNNYC01T sshd[24889]: Failed password for root from 112.85.42.237 port 56823 ssh2 Apr 8 02:53:03 NPSTNNYC01T sshd[25196]: Failed password for root from 112.85.42.237 port 52681 ssh2 Apr 8 02:53:06 NPSTNNYC01T sshd[25196]: Failed password for root from 112.85.42.237 port 52681 ssh2 ... |
2020-04-08 14:54:42 |
| 119.196.108.58 | attack | 2020-04-08T03:54:35.562853abusebot-5.cloudsearch.cf sshd[23092]: Invalid user user5 from 119.196.108.58 port 51332 2020-04-08T03:54:35.570242abusebot-5.cloudsearch.cf sshd[23092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.196.108.58 2020-04-08T03:54:35.562853abusebot-5.cloudsearch.cf sshd[23092]: Invalid user user5 from 119.196.108.58 port 51332 2020-04-08T03:54:37.887815abusebot-5.cloudsearch.cf sshd[23092]: Failed password for invalid user user5 from 119.196.108.58 port 51332 ssh2 2020-04-08T03:57:14.707999abusebot-5.cloudsearch.cf sshd[23097]: Invalid user mumbleserver from 119.196.108.58 port 39328 2020-04-08T03:57:14.716161abusebot-5.cloudsearch.cf sshd[23097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.196.108.58 2020-04-08T03:57:14.707999abusebot-5.cloudsearch.cf sshd[23097]: Invalid user mumbleserver from 119.196.108.58 port 39328 2020-04-08T03:57:16.528009abusebot-5.cloudsearch.c ... |
2020-04-08 15:11:53 |
| 189.47.214.28 | attack | Apr 8 02:00:32 ny01 sshd[21393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.47.214.28 Apr 8 02:00:34 ny01 sshd[21393]: Failed password for invalid user zabbix from 189.47.214.28 port 58640 ssh2 Apr 8 02:05:14 ny01 sshd[21960]: Failed password for root from 189.47.214.28 port 39562 ssh2 |
2020-04-08 15:01:31 |
| 37.49.226.104 | attackspambots | Automatic report - Port Scan Attack |
2020-04-08 14:52:28 |
| 140.143.127.179 | attackbotsspam | Apr 7 22:38:07 server1 sshd\[31408\]: Failed password for invalid user update from 140.143.127.179 port 60952 ssh2 Apr 7 22:42:10 server1 sshd\[32602\]: Invalid user testftp from 140.143.127.179 Apr 7 22:42:10 server1 sshd\[32602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.127.179 Apr 7 22:42:11 server1 sshd\[32602\]: Failed password for invalid user testftp from 140.143.127.179 port 60272 ssh2 Apr 7 22:46:08 server1 sshd\[1288\]: Invalid user marcela from 140.143.127.179 ... |
2020-04-08 14:53:51 |
| 122.51.198.207 | attack | 5x Failed Password |
2020-04-08 15:13:09 |
| 112.169.152.105 | attack | Apr 8 11:30:47 webhost01 sshd[18621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.169.152.105 Apr 8 11:30:49 webhost01 sshd[18621]: Failed password for invalid user ts3srv from 112.169.152.105 port 53058 ssh2 ... |
2020-04-08 14:52:47 |
| 112.85.42.229 | attackspam | (sshd) Failed SSH login from 112.85.42.229 (CN/China/-): 5 in the last 3600 secs |
2020-04-08 14:59:59 |
| 186.139.218.8 | attackbotsspam | Apr 8 08:30:23 lock-38 sshd[729361]: Invalid user admin from 186.139.218.8 port 5011 Apr 8 08:30:23 lock-38 sshd[729361]: Failed password for invalid user admin from 186.139.218.8 port 5011 ssh2 Apr 8 08:35:33 lock-38 sshd[729526]: Invalid user admin from 186.139.218.8 port 62935 Apr 8 08:35:33 lock-38 sshd[729526]: Invalid user admin from 186.139.218.8 port 62935 Apr 8 08:35:33 lock-38 sshd[729526]: Failed password for invalid user admin from 186.139.218.8 port 62935 ssh2 ... |
2020-04-08 14:55:11 |
| 185.74.4.189 | attackspam | Apr 8 08:31:12 pkdns2 sshd\[8489\]: Invalid user ubuntu from 185.74.4.189Apr 8 08:31:14 pkdns2 sshd\[8489\]: Failed password for invalid user ubuntu from 185.74.4.189 port 39772 ssh2Apr 8 08:35:16 pkdns2 sshd\[8719\]: Invalid user admin from 185.74.4.189Apr 8 08:35:18 pkdns2 sshd\[8719\]: Failed password for invalid user admin from 185.74.4.189 port 49966 ssh2Apr 8 08:39:22 pkdns2 sshd\[8914\]: Invalid user mick from 185.74.4.189Apr 8 08:39:25 pkdns2 sshd\[8914\]: Failed password for invalid user mick from 185.74.4.189 port 60158 ssh2 ... |
2020-04-08 15:16:58 |
| 103.56.79.2 | attackbots | B: Abusive ssh attack |
2020-04-08 15:16:20 |
| 202.70.80.27 | attack | Apr 8 03:57:40 IngegnereFirenze sshd[12293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.70.80.27 user=mysql ... |
2020-04-08 14:50:39 |
| 190.166.83.203 | attack | 5x Failed Password |
2020-04-08 15:23:49 |
| 196.52.84.20 | attackspam | 3,11-03/04 [bc01/m06] PostRequest-Spammer scoring: zurich |
2020-04-08 15:13:38 |
| 183.134.66.112 | attack | Apr 8 04:38:30 *** sshd[24130]: Invalid user deploy from 183.134.66.112 |
2020-04-08 15:02:01 |