5.157.8.12 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
5.157.82.169	attack	Trawling for 3rd-party CMS installations (0x337-U29-XvtJ0w86QeOsUeRhzhIRVwAAAM8)	2020-07-02 04:03:04
5.157.82.169	attack	Trawling for 3rd-party CMS installations (0x337-U29-XvtJ0w86QeOsUeRhzhIRVwAAAM8)	2020-07-01 00:06:33
5.157.85.64	attack	Apr 14 14:44:26 sticky sshd\[29386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.157.85.64 user=root Apr 14 14:44:28 sticky sshd\[29386\]: Failed password for root from 5.157.85.64 port 57400 ssh2 Apr 14 14:48:40 sticky sshd\[29394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.157.85.64 user=root Apr 14 14:48:42 sticky sshd\[29394\]: Failed password for root from 5.157.85.64 port 41360 ssh2 Apr 14 14:52:55 sticky sshd\[29414\]: Invalid user admin from 5.157.85.64 port 53552 Apr 14 14:52:55 sticky sshd\[29414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.157.85.64 ...	2020-04-14 21:09:58

Type

Details

Datetime

5.157.82.169

attack

Trawling for 3rd-party CMS installations (0x337-U29-XvtJ0w86QeOsUeRhzhIRVwAAAM8)

2020-07-02 04:03:04

5.157.82.169

attack

Trawling for 3rd-party CMS installations (0x337-U29-XvtJ0w86QeOsUeRhzhIRVwAAAM8)

2020-07-01 00:06:33

5.157.85.64

attack

Apr 14 14:44:26 sticky sshd\[29386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.157.85.64  user=root
Apr 14 14:44:28 sticky sshd\[29386\]: Failed password for root from 5.157.85.64 port 57400 ssh2
Apr 14 14:48:40 sticky sshd\[29394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.157.85.64  user=root
Apr 14 14:48:42 sticky sshd\[29394\]: Failed password for root from 5.157.85.64 port 41360 ssh2
Apr 14 14:52:55 sticky sshd\[29414\]: Invalid user admin from 5.157.85.64 port 53552
Apr 14 14:52:55 sticky sshd\[29414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.157.85.64
...

2020-04-14 21:09:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.157.8.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31057
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;5.157.8.12.			IN	A

;; AUTHORITY SECTION:
.			229	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 12:08:42 CST 2022
;; MSG SIZE  rcvd: 103

Host info

Host 12.8.157.5.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.8.157.5.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
58.87.78.80	attackspambots	Banned for a week because repeated abuses, for example SSH, but not only	2020-10-06 06:00:09
202.91.248.42	attackbots	SP-Scan 59556:1433 detected 2020.10.05 18:31:53 blocked until 2020.11.24 10:34:40	2020-10-06 06:03:53
171.231.17.136	attackspam	445/tcp [2020-10-04]1pkt	2020-10-06 06:26:37
120.53.27.233	attackspam	2020-10-05 09:50:05,778 fail2ban.actions: WARNING [ssh] Ban 120.53.27.233	2020-10-06 05:54:39
122.51.10.222	attackspam	Oct 5 23:15:22 router sshd[11173]: Failed password for root from 122.51.10.222 port 49318 ssh2 Oct 5 23:20:27 router sshd[11242]: Failed password for root from 122.51.10.222 port 48460 ssh2 ...	2020-10-06 06:16:31
123.125.21.125	attack	Oct 5 20:17:03 Ubuntu-1404-trusty-64-minimal sshd\[31773\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.125.21.125 user=root Oct 5 20:17:05 Ubuntu-1404-trusty-64-minimal sshd\[31773\]: Failed password for root from 123.125.21.125 port 44414 ssh2 Oct 5 20:24:28 Ubuntu-1404-trusty-64-minimal sshd\[4678\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.125.21.125 user=root Oct 5 20:24:30 Ubuntu-1404-trusty-64-minimal sshd\[4678\]: Failed password for root from 123.125.21.125 port 46334 ssh2 Oct 5 20:28:13 Ubuntu-1404-trusty-64-minimal sshd\[5729\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.125.21.125 user=root	2020-10-06 06:02:53
139.59.40.240	attackbotsspam	Oct 6 00:07:06 rancher-0 sshd[488183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.40.240 user=root Oct 6 00:07:08 rancher-0 sshd[488183]: Failed password for root from 139.59.40.240 port 56898 ssh2 ...	2020-10-06 06:15:31
200.91.27.230	attackspambots	$f2bV_matches	2020-10-06 06:16:13
95.252.8.106	attack	firewall-block, port(s): 445/tcp	2020-10-06 06:02:25
45.148.122.102	attackbotsspam	TCP (SYN) 45.148.122.102:51555 -> port 22, len 44	2020-10-06 06:09:44
59.42.37.213	attackspam	2020-10-05T01:12:24.004360mail.standpoint.com.ua sshd[7094]: Failed password for root from 59.42.37.213 port 6259 ssh2 2020-10-05T01:14:17.868094mail.standpoint.com.ua sshd[7343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.213 user=root 2020-10-05T01:14:19.552962mail.standpoint.com.ua sshd[7343]: Failed password for root from 59.42.37.213 port 7175 ssh2 2020-10-05T01:16:12.524068mail.standpoint.com.ua sshd[7608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.213 user=root 2020-10-05T01:16:14.329398mail.standpoint.com.ua sshd[7608]: Failed password for root from 59.42.37.213 port 7740 ssh2 ...	2020-10-06 06:05:31
109.110.51.31	attack	TCP (SYN) 109.110.51.31:56119 -> port 1433, len 44	2020-10-06 05:59:42
163.19.200.153	attack	2020-10-05 13:38:42.560833-0500 localhost screensharingd[20506]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 163.19.200.153 :: Type: VNC DES	2020-10-06 06:10:21
201.163.1.66	attack	Oct 5 12:43:52 Tower sshd[4550]: refused connect from 54.37.159.12 (54.37.159.12) Oct 5 17:02:00 Tower sshd[4550]: Connection from 201.163.1.66 port 45794 on 192.168.10.220 port 22 rdomain "" Oct 5 17:02:01 Tower sshd[4550]: Failed password for root from 201.163.1.66 port 45794 ssh2 Oct 5 17:02:01 Tower sshd[4550]: Received disconnect from 201.163.1.66 port 45794:11: Bye Bye [preauth] Oct 5 17:02:01 Tower sshd[4550]: Disconnected from authenticating user root 201.163.1.66 port 45794 [preauth]	2020-10-06 06:07:59
31.181.127.23	attackspam	445/tcp 445/tcp [2020-10-04]2pkt	2020-10-06 06:15:56

Recently Reported IPs

101.51.127.81	176.192.173.7	112.145.109.73	27.6.202.189
139.162.56.48	193.233.83.165	61.53.122.12	111.67.196.10
31.111.97.28	178.141.26.138	89.240.198.101	113.172.241.70
85.202.194.55	101.32.72.197	186.182.81.29	78.185.132.241
119.2.41.201	45.119.31.96	189.148.84.92	168.232.14.162