159.203.42.157

Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	May 10 22:48:36 meumeu sshd[20945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.42.157 May 10 22:48:38 meumeu sshd[20945]: Failed password for invalid user q3 from 159.203.42.157 port 59352 ssh2 May 10 22:52:41 meumeu sshd[21771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.42.157 ...	2020-05-11 05:07:10

Type

Details

Datetime

attack

May 10 22:48:36 meumeu sshd[20945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.42.157 
May 10 22:48:38 meumeu sshd[20945]: Failed password for invalid user q3 from 159.203.42.157 port 59352 ssh2
May 10 22:52:41 meumeu sshd[21771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.42.157 
...

2020-05-11 05:07:10

Comments on same subnet:

IP	Type	Details	Datetime
159.203.42.143	attackspambots	From CCTV User Interface Log ...::ffff:159.203.42.143 - - [17/Apr/2020:06:55:06 +0000] "GET / HTTP/1.1" 200 955 ...	2020-04-17 23:09:30
159.203.42.130	attackspambots	firewall-block, port(s): 23/tcp	2020-02-18 19:40:47
159.203.42.130	attack	DATE:2020-02-17 20:36:03, IP:159.203.42.130, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2020-02-18 04:27:08
159.203.42.130	attackbotsspam	Unauthorized connection attempt detected from IP address 159.203.42.130 to port 23 [J]	2020-02-04 19:02:16
159.203.42.143	attackbots	Unauthorized connection attempt detected from IP address 159.203.42.143 to port 80 [J]	2020-01-16 07:36:19
159.203.42.143	attackbotsspam	Web Probe / Attack NCT	2019-07-16 05:56:36
159.203.42.143	attackspambots	Automatic report - Web App Attack	2019-07-07 12:09:30
159.203.42.75	attackbots	ports scanning	2019-06-23 13:42:53

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.203.42.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52541
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.203.42.157.			IN	A

;; AUTHORITY SECTION:
.			246	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051001 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 11 05:07:07 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 157.42.203.159.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 157.42.203.159.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
182.52.112.184	attackspambots	Unauthorized IMAP connection attempt	2020-06-18 00:53:51
46.38.150.191	attack	Jun 17 18:33:26 relay postfix/smtpd\[21661\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 17 18:33:38 relay postfix/smtpd\[22735\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 17 18:34:12 relay postfix/smtpd\[21670\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 17 18:34:24 relay postfix/smtpd\[22735\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 17 18:34:54 relay postfix/smtpd\[21617\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-06-18 00:40:19
111.161.66.251	attackspam	Jun 17 18:04:06 server sshd[4956]: Failed password for invalid user user from 111.161.66.251 port 48958 ssh2 Jun 17 18:19:02 server sshd[18797]: Failed password for invalid user informix from 111.161.66.251 port 42278 ssh2 Jun 17 18:22:18 server sshd[21847]: Failed password for invalid user miroslav from 111.161.66.251 port 48308 ssh2	2020-06-18 00:56:16
27.116.255.153	attackbots	2020-06-17T15:02:00.223028mail1.gph.lt auth[63545]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=warner@eivi.lt rhost=27.116.255.153 ...	2020-06-18 00:15:24
94.142.244.16	attackbotsspam	Jun 17 18:22:18 mellenthin sshd[27774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.142.244.16 user=root Jun 17 18:22:20 mellenthin sshd[27774]: Failed password for invalid user root from 94.142.244.16 port 47696 ssh2	2020-06-18 00:55:18
106.13.179.45	attackspam	SSH bruteforce	2020-06-18 00:16:42
222.186.52.39	attack	Automatic report BANNED IP	2020-06-18 00:56:46
212.70.149.34	attackspam	2020-06-17 19:26:31 dovecot_login authenticator failed for \(User\) \[212.70.149.34\]: 535 Incorrect authentication data \(set_id=tranny@org.ua\)2020-06-17 19:27:07 dovecot_login authenticator failed for \(User\) \[212.70.149.34\]: 535 Incorrect authentication data \(set_id=ib@org.ua\)2020-06-17 19:27:42 dovecot_login authenticator failed for \(User\) \[212.70.149.34\]: 535 Incorrect authentication data \(set_id=mysite@org.ua\) ...	2020-06-18 00:42:19
106.13.160.14	attackspam	"fail2ban match"	2020-06-18 00:12:28
85.209.0.101	attackspambots	Unauthorized connection attempt detected from IP address 85.209.0.101 to port 22	2020-06-18 00:53:22
36.155.115.72	attackbotsspam	Jun 17 15:28:27 home sshd[26271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.115.72 Jun 17 15:28:29 home sshd[26271]: Failed password for invalid user gts from 36.155.115.72 port 57296 ssh2 Jun 17 15:31:31 home sshd[26680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.115.72 ...	2020-06-18 00:13:04
194.180.224.130	attack	Jun 17 16:39:15 localhost sshd[29302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.180.224.130 user=root Jun 17 16:39:17 localhost sshd[29302]: Failed password for root from 194.180.224.130 port 33844 ssh2 Jun 17 16:39:37 localhost sshd[29344]: Invalid user admin from 194.180.224.130 port 37398 Jun 17 16:39:37 localhost sshd[29344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.180.224.130 Jun 17 16:39:37 localhost sshd[29344]: Invalid user admin from 194.180.224.130 port 37398 Jun 17 16:39:40 localhost sshd[29344]: Failed password for invalid user admin from 194.180.224.130 port 37398 ssh2 ...	2020-06-18 00:48:08
147.135.253.94	attackspambots	[2020-06-17 12:20:53] NOTICE[1273] chan_sip.c: Registration from '' failed for '147.135.253.94:59773' - Wrong password [2020-06-17 12:20:53] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-17T12:20:53.350-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1897",SessionID="0x7f31c02f7128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.253.94/59773",Challenge="16b19f7e",ReceivedChallenge="16b19f7e",ReceivedHash="058016c2285d3d6ba6b8bcf1a4a19b24" [2020-06-17 12:22:34] NOTICE[1273] chan_sip.c: Registration from '' failed for '147.135.253.94:60452' - Wrong password [2020-06-17 12:22:34] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-17T12:22:34.779-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9061",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.25 ...	2020-06-18 00:39:56
5.135.224.152	attackbotsspam	2020-06-17T18:19:37.056417 sshd[3396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.224.152 user=root 2020-06-17T18:19:38.909774 sshd[3396]: Failed password for root from 5.135.224.152 port 42920 ssh2 2020-06-17T18:22:38.892473 sshd[3468]: Invalid user mehdi from 5.135.224.152 port 41602 ...	2020-06-18 00:37:02
75.119.216.13	attackspambots	CMS (WordPress or Joomla) login attempt.	2020-06-18 00:46:59

Recently Reported IPs

178.234.77.145	171.15.4.163	178.21.55.88	140.143.122.13
97.103.2.218	63.82.52.100	93.81.217.30	36.22.110.140
36.32.134.128	211.75.161.29	87.222.12.172	128.88.62.153
87.61.83.163	14.186.167.164	117.242.248.64	89.36.84.3
73.244.32.128	185.126.192.65	218.73.99.171	87.117.63.70