This IP address has been reported a total of
362
times from
114 distinct
sources.
157.173.100.92 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unwanted traffic detected by honeypot on May 20, 2026: brute force and hacking attacks (5 over ssh).
Port Scan
Brute-Force
SSH
Anonymous
2026-05-20T06:05:26.621884+00:00 UnitedStates1 sshd-session[2964221]: error: maximum authentication ...
show more2026-05-20T06:05:26.621884+00:00 UnitedStates1 sshd-session[2964221]: error: maximum authentication attempts exceeded for root from 157.173.100.92 port 43254 ssh2 [preauth]
2026-05-21T06:26:33.135748+00:00 UnitedStates1 sshd-session[891282]: error: maximum authentication attempts exceeded for root from 157.173.100.92 port 37974 ssh2 [preauth]
...
show less
2026-05-21T04:13:40.208198+00:00 thelemmy.club sshd-session[1705189]: Received disconnect from 157.1 ...
show more2026-05-21T04:13:40.208198+00:00 thelemmy.club sshd-session[1705189]: Received disconnect from 157.173.100.92 port 39784:11: disconnected by user [preauth]
2026-05-21T04:13:40.208221+00:00 thelemmy.club sshd-session[1705189]: Disconnected from invalid user root 157.173.100.92 port 39784 [preauth]
...
show less
This IP address carried out 20 port scanning attempts on 20-05-2026. For more information or to repo ...
show moreThis IP address carried out 20 port scanning attempts on 20-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-05-21T05:05:47.742847+02:00 Proxmox sshd-session[3661893]: Failed publickey for root from 157.1 ...
show more2026-05-21T05:05:47.742847+02:00 Proxmox sshd-session[3661893]: Failed publickey for root from 157.173.100.92 port 36206 ssh2: RSA SHA256:YBdNOzkHDJRQqI67dCMwtznwMfU4a/rGL9M87mYAPkI
2026-05-21T05:05:47.812817+02:00 Proxmox sshd-session[3661893]: Failed publickey for root from 157.173.100.92 port 36206 ssh2: RSA SHA256:98O2iJ8sszixdp4y6unK+5Ht1+7D1Vml/Rrp/5f1RjU
2026-05-21T05:05:47.843031+02:00 Proxmox sshd-session[3661893]: error: maximum authentication attempts exceeded for root from 157.173.100.92 port 36206 ssh2 [preauth]
...
show less
2026-05-21T10:30:00.802589+08:00 vps-ebd448c1 sshd-session[918724]: Connection from 157.173.100.92 p ...
show more2026-05-21T10:30:00.802589+08:00 vps-ebd448c1 sshd-session[918724]: Connection from 157.173.100.92 port 60396 on 51.79.161.204 port 22 rdomain ""
2026-05-21T10:30:02.717876+08:00 vps-ebd448c1 sshd-session[918724]: Failed publickey for root from 157.173.100.92 port 60396 ssh2: RSA SHA256:YBdNOzkHDJRQqI67dCMwtznwMfU4a/rGL9M87mYAPkI
2026-05-21T10:30:03.087942+08:00 vps-ebd448c1 sshd-session[918724]: Failed publickey for root from 157.173.100.92 port 60396 ssh2: RSA SHA256:98O2iJ8sszixdp4y6unK+5Ht1+7D1Vml/Rrp/5f1RjU
show less
Brute-Force
SSH
Anonymous
Large amount of failed SSH access attempts (brute-force)
May 14 12:12:23 racetecweb sshd[135131]: User root from 157.173.100.92 not allowed because not liste ...
show moreMay 14 12:12:23 racetecweb sshd[135131]: User root from 157.173.100.92 not allowed because not listed in AllowUsers
May 14 12:12:23 racetecweb sshd[135131]: error: maximum authentication attempts exceeded for invalid user root from 157.173.100.92 port 49108 ssh2 [preauth]
May 21 01:16:13 racetecweb sshd[235855]: User root from 157.173.100.92 not allowed because not listed in AllowUsers
...
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-05-20T23:02:19Z and 2026-05-2 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-05-20T23:02:19Z and 2026-05-20T23:02:19Z
show less