Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-06T05:27:20.206434-08:00 mvscweb sshd[452443]: Failed password for root from 157.173.114.201 port 58080 ssh2
2026-11-06T05:27:21.757281-08:00 mvscweb sshd[452445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus ...
show more2026-11-06T05:27:20.206434-08:00 mvscweb sshd[452443]: Failed password for root from 157.173.114.201 port 58080 ssh2
2026-11-06T05:27:21.757281-08:00 mvscweb sshd[452445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.173.114.201 user=root
2026-11-06T05:27:23.717233-08:00 mvscweb sshd[452445]: Failed password for root from 157.173.114.201 port 52398 ssh2
...
show less
2026-11-06T00:38:53.748272-07:00 b146-InstructorB sshd[89096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.173.114.201 user=root
2026-11-06T00:38:56.072322-07:00 b146-InstructorB sshd[89096]: Failed pa ...
show more2026-11-06T00:38:53.748272-07:00 b146-InstructorB sshd[89096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.173.114.201 user=root
2026-11-06T00:38:56.072322-07:00 b146-InstructorB sshd[89096]: Failed password for invalid user root from 157.173.114.201 port 59002 ssh2
2026-11-06T00:38:57.882054-07:00 b146-InstructorB sshd[89098]: User root from 157.173.114.201 not allowed because none of user's groups are listed in AllowGroups
...
show less
2026-11-03T17:49:02.853796+05:30 fr1-racknerd sshd[741589]: Failed password for root from 157.173.114.201 port 53402 ssh2
2026-11-03T17:49:03.199350+05:30 fr1-racknerd sshd[742540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ...
show more2026-11-03T17:49:02.853796+05:30 fr1-racknerd sshd[741589]: Failed password for root from 157.173.114.201 port 53402 ssh2
2026-11-03T17:49:03.199350+05:30 fr1-racknerd sshd[742540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.173.114.201 user=root
2026-11-03T17:49:05.600495+05:30 fr1-racknerd sshd[742540]: Failed password for root from 157.173.114.201 port 53412 ssh2
...
show less
SSH brute force attempt. User: root, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
2026-11-03T06:33:47.322093 prodWEB sshd-session[34648]: Connection from 157.173.114.201 port 35094 on 46.105.46.67 port 22 rdomain ""
2026-11-03T06:33:47.404987 prodWEB sshd-session[34648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show more2026-11-03T06:33:47.322093 prodWEB sshd-session[34648]: Connection from 157.173.114.201 port 35094 on 46.105.46.67 port 22 rdomain ""
2026-11-03T06:33:47.404987 prodWEB sshd-session[34648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.173.114.201 user=root
2026-11-03T06:33:48.973630 prodWEB sshd-session[34648]: Failed password for root from 157.173.114.201 port 35094 ssh2
...
show less
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
Anonymous
Nov 2 17:53:39 sftp-cognizant-san-jose-1 sshd[990065]: Failed password for root from 157.173.114.201 port 51682 ssh2
Nov 2 17:53:41 sftp-cognizant-san-jose-1 sshd[990067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh r ...
show moreNov 2 17:53:39 sftp-cognizant-san-jose-1 sshd[990065]: Failed password for root from 157.173.114.201 port 51682 ssh2
Nov 2 17:53:41 sftp-cognizant-san-jose-1 sshd[990067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.173.114.201 user=root
Nov 2 17:53:43 sftp-cognizant-san-jose-1 sshd[990067]: Failed password for root from 157.173.114.201 port 51694 ssh2
...
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:ubuntu, root:debian
• Number of login attempts: 2
• 1 command(s) were executed during the session
• Client: SSH-2.0-Go
• Uploaded files: sshd
Reported by: https://github.com/sefi ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:ubuntu, root:debian
• Number of login attempts: 2
• 1 command(s) were executed during the session
• Client: SSH-2.0-Go
• Uploaded files: sshd
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Brute-Force
SSH
Hacking
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
