Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: North Bergen

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
157.245.252.34 attackspambots
Oct 12 15:08:42 localhost sshd[119500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34  user=root
Oct 12 15:08:44 localhost sshd[119500]: Failed password for root from 157.245.252.34 port 51008 ssh2
Oct 12 15:12:17 localhost sshd[119796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34  user=root
Oct 12 15:12:19 localhost sshd[119796]: Failed password for root from 157.245.252.34 port 54610 ssh2
Oct 12 15:15:42 localhost sshd[120098]: Invalid user carlo from 157.245.252.34 port 58214
...
2020-10-12 23:23:51
157.245.252.34 attack
2020-10-12T05:40:41.446305abusebot-6.cloudsearch.cf sshd[13097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34  user=root
2020-10-12T05:40:43.279740abusebot-6.cloudsearch.cf sshd[13097]: Failed password for root from 157.245.252.34 port 58976 ssh2
2020-10-12T05:44:19.665447abusebot-6.cloudsearch.cf sshd[13102]: Invalid user trade from 157.245.252.34 port 33580
2020-10-12T05:44:19.671738abusebot-6.cloudsearch.cf sshd[13102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34
2020-10-12T05:44:19.665447abusebot-6.cloudsearch.cf sshd[13102]: Invalid user trade from 157.245.252.34 port 33580
2020-10-12T05:44:21.434594abusebot-6.cloudsearch.cf sshd[13102]: Failed password for invalid user trade from 157.245.252.34 port 33580 ssh2
2020-10-12T05:46:58.749306abusebot-6.cloudsearch.cf sshd[13113]: Invalid user its from 157.245.252.34 port 55134
...
2020-10-12 14:48:42
157.245.252.154 attack
Failed password for root from 157.245.252.154 port 49176 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.154  user=root
Failed password for root from 157.245.252.154 port 53796 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.154  user=root
Failed password for root from 157.245.252.154 port 58412 ssh2
2020-10-11 05:14:45
157.245.252.154 attack
2020-10-10T17:01:44.232380paragon sshd[828487]: Failed password for invalid user nishant from 157.245.252.154 port 46958 ssh2
2020-10-10T17:05:59.208429paragon sshd[828613]: Invalid user ftpuser from 157.245.252.154 port 52192
2020-10-10T17:05:59.212667paragon sshd[828613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.154
2020-10-10T17:05:59.208429paragon sshd[828613]: Invalid user ftpuser from 157.245.252.154 port 52192
2020-10-10T17:06:01.535740paragon sshd[828613]: Failed password for invalid user ftpuser from 157.245.252.154 port 52192 ssh2
...
2020-10-10 21:18:42
157.245.252.34 attack
Oct  7 23:20:00 h2829583 sshd[21509]: Failed password for root from 157.245.252.34 port 43172 ssh2
2020-10-08 05:55:43
157.245.252.34 attackspambots
$f2bV_matches
2020-10-07 14:13:02
157.245.252.34 attackbots
(sshd) Failed SSH login from 157.245.252.34 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 26 13:23:21 server2 sshd[29761]: Invalid user manager from 157.245.252.34
Sep 26 13:23:21 server2 sshd[29761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34 
Sep 26 13:23:22 server2 sshd[29761]: Failed password for invalid user manager from 157.245.252.34 port 46372 ssh2
Sep 26 13:28:45 server2 sshd[3125]: Invalid user centos from 157.245.252.34
Sep 26 13:28:45 server2 sshd[3125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34
2020-09-27 05:24:32
157.245.252.34 attack
(sshd) Failed SSH login from 157.245.252.34 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 26 12:07:36 server2 sshd[957]: Invalid user victor from 157.245.252.34 port 39100
Sep 26 12:07:39 server2 sshd[957]: Failed password for invalid user victor from 157.245.252.34 port 39100 ssh2
Sep 26 12:17:54 server2 sshd[3901]: Invalid user admin from 157.245.252.34 port 54238
Sep 26 12:17:55 server2 sshd[3901]: Failed password for invalid user admin from 157.245.252.34 port 54238 ssh2
Sep 26 12:20:22 server2 sshd[4480]: Invalid user julia from 157.245.252.34 port 44052
2020-09-26 21:39:21
157.245.252.34 attack
157.245.252.34 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 26 00:21:07 idl1-dfw sshd[3681305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.49.9.210  user=root
Sep 26 00:21:09 idl1-dfw sshd[3681305]: Failed password for root from 178.49.9.210 port 60482 ssh2
Sep 26 00:18:04 idl1-dfw sshd[3679217]: Failed password for root from 157.245.252.34 port 49996 ssh2
Sep 26 00:18:02 idl1-dfw sshd[3679217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34  user=root
Sep 26 00:24:26 idl1-dfw sshd[3683747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.106.68  user=root
Sep 26 00:24:50 idl1-dfw sshd[3683920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.88.98  user=root

IP Addresses Blocked:

178.49.9.210 (RU/Russia/-)
2020-09-26 13:21:13
157.245.252.101 attackbotsspam
Sep 15 19:54:11 ip106 sshd[24092]: Failed password for root from 157.245.252.101 port 56486 ssh2
...
2020-09-16 02:50:04
157.245.252.101 attackspam
Sep 15 06:02:00 george sshd[21692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.101  user=root
Sep 15 06:02:01 george sshd[21692]: Failed password for root from 157.245.252.101 port 58270 ssh2
Sep 15 06:05:39 george sshd[21722]: Invalid user chenys from 157.245.252.101 port 41988
Sep 15 06:05:39 george sshd[21722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.101 
Sep 15 06:05:41 george sshd[21722]: Failed password for invalid user chenys from 157.245.252.101 port 41988 ssh2
...
2020-09-15 18:49:01
157.245.252.34 attackspambots
Sep 12 11:52:04 web8 sshd\[4307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34  user=root
Sep 12 11:52:07 web8 sshd\[4307\]: Failed password for root from 157.245.252.34 port 56234 ssh2
Sep 12 11:56:02 web8 sshd\[6382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34  user=root
Sep 12 11:56:05 web8 sshd\[6382\]: Failed password for root from 157.245.252.34 port 40066 ssh2
Sep 12 12:00:01 web8 sshd\[8280\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34  user=root
2020-09-12 20:06:34
157.245.252.34 attack
2020-09-12T04:03:52.899329shield sshd\[2074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34  user=root
2020-09-12T04:03:54.469188shield sshd\[2074\]: Failed password for root from 157.245.252.34 port 58936 ssh2
2020-09-12T04:07:57.776421shield sshd\[2842\]: Invalid user smbtesting from 157.245.252.34 port 44444
2020-09-12T04:07:57.788218shield sshd\[2842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34
2020-09-12T04:07:59.326846shield sshd\[2842\]: Failed password for invalid user smbtesting from 157.245.252.34 port 44444 ssh2
2020-09-12 12:09:59
157.245.252.34 attack
Sep 11 18:27:36 localhost sshd[3854918]: Failed password for invalid user hplip from 157.245.252.34 port 36320 ssh2
Sep 11 18:30:54 localhost sshd[3861796]: Invalid user bot from 157.245.252.34 port 40706
Sep 11 18:30:54 localhost sshd[3861796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.34 
Sep 11 18:30:54 localhost sshd[3861796]: Invalid user bot from 157.245.252.34 port 40706
Sep 11 18:30:56 localhost sshd[3861796]: Failed password for invalid user bot from 157.245.252.34 port 40706 ssh2
...
2020-09-12 03:57:40
157.245.252.34 attackbots
ssh intrusion attempt
2020-09-10 22:07:52
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.252.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49633
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.252.94.			IN	A

;; AUTHORITY SECTION:
.			380	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021802 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 13:09:32 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 94.252.245.157.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.252.245.157.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
35.190.133.215 attackbotsspam
Automated report (2020-01-01T15:09:39+00:00). Misbehaving bot detected at this address.
2020-01-02 06:20:07
144.217.24.121 attackbotsspam
Jan  1 09:41:14 web1 postfix/smtpd[16400]: warning: ip121.ip-144-217-24.net[144.217.24.121]: SASL LOGIN authentication failed: authentication failure
...
2020-01-02 06:13:05
123.194.252.4 attackbotsspam
Honeypot attack, port: 5555, PTR: 123-194-252-4.dynamic.kbronet.com.tw.
2020-01-02 06:14:13
202.162.221.174 attackbotsspam
Jan  1 11:41:19 vps46666688 sshd[8402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.162.221.174
Jan  1 11:41:21 vps46666688 sshd[8402]: Failed password for invalid user www from 202.162.221.174 port 46456 ssh2
...
2020-01-02 06:09:05
201.161.58.229 attack
SSH Bruteforce attempt
2020-01-02 06:19:35
45.43.50.196 attackspam
IP Blocked by DimIDS. Persistent RDP Attack!
2020-01-02 06:06:30
18.208.228.198 attackbotsspam
UTC: 2019-12-31 port: 84/tcp
2020-01-02 06:05:44
139.155.118.190 attackbotsspam
Invalid user vari from 139.155.118.190 port 60725
2020-01-02 06:26:47
85.209.0.243 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-01-02 06:09:56
54.36.232.55 attackbots
Jan  1 14:32:05 vps46666688 sshd[11360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.232.55
Jan  1 14:32:06 vps46666688 sshd[11360]: Failed password for invalid user salditt from 54.36.232.55 port 33054 ssh2
...
2020-01-02 06:39:26
42.115.14.123 attackspambots
Honeypot attack, port: 23, PTR: PTR record not found
2020-01-02 06:40:51
198.108.67.98 attack
Jan  1 17:34:07 debian-2gb-nbg1-2 kernel: \[155779.506388\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=198.108.67.98 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=37 ID=26610 PROTO=TCP SPT=39802 DPT=646 WINDOW=1024 RES=0x00 SYN URGP=0
2020-01-02 06:33:03
217.64.30.79 attackbotsspam
Jan  1 15:41:24 grey postfix/smtpd\[23590\]: NOQUEUE: reject: RCPT from unknown\[217.64.30.79\]: 554 5.7.1 Service unavailable\; Client host \[217.64.30.79\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?217.64.30.79\; from=\ to=\ proto=ESMTP helo=\
...
2020-01-02 06:08:18
110.87.148.141 attackbotsspam
Honeypot attack, port: 445, PTR: 141.148.87.110.broad.fj.dynamic.163data.com.cn.
2020-01-02 06:30:38
103.235.170.195 attackbotsspam
Jan  1 21:57:32 lnxmysql61 sshd[21431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.235.170.195
2020-01-02 06:27:01

Recently Reported IPs

157.245.246.235 157.245.32.53 157.245.53.178 157.245.71.137
157.245.92.156 159.138.142.253 159.138.44.212 218.213.38.15
231.237.18.65 159.223.112.78 159.223.116.173 159.223.116.71
159.223.116.75 159.223.131.10 159.223.149.254 159.223.178.231
159.223.24.4 159.223.37.14 159.223.79.49 159.223.89.144