Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
157.20.52.243 has been reported 24
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/157.20.52.243
SSH
Anonymous
2025-09-10T02:18:33.712412+02:00 dns2.mi-pietsch.de sshd-session[296778]: Invalid user hack from 157.20.52.243 port 60564
2025-09-10T02:38:19.313198+02:00 dns2.mi-pietsch.de sshd-session[296982]: Invalid user marc from 157.20.52.243 port 48768
2025-0 ...
show more2025-09-10T02:18:33.712412+02:00 dns2.mi-pietsch.de sshd-session[296778]: Invalid user hack from 157.20.52.243 port 60564
2025-09-10T02:38:19.313198+02:00 dns2.mi-pietsch.de sshd-session[296982]: Invalid user marc from 157.20.52.243 port 48768
2025-09-10T02:42:18.863298+02:00 dns2.mi-pietsch.de sshd-session[297094]: Invalid user userm from 157.20.52.243 port 42784
...
show less
2025-09-10T02:17:10.919044+02:00 mail.sebi.org sshd-session[85629]: Invalid user hack from 157.20.52.243 port 52734
2025-09-10T02:29:27.923916+02:00 mail.sebi.org sshd-session[85931]: Invalid user webadmin from 157.20.52.243 port 35342
2025-09-10T02: ...
show more2025-09-10T02:17:10.919044+02:00 mail.sebi.org sshd-session[85629]: Invalid user hack from 157.20.52.243 port 52734
2025-09-10T02:29:27.923916+02:00 mail.sebi.org sshd-session[85931]: Invalid user webadmin from 157.20.52.243 port 35342
2025-09-10T02:31:32.237814+02:00 mail.sebi.org sshd-session[86042]: Invalid user sqldba from 157.20.52.243 port 60602
2025-09-10T02:35:40.585056+02:00 mail.sebi.org sshd-session[86074]: Invalid user craft from 157.20.52.243 port 54580
2025-09-10T02:37:42.267143+02:00 mail.sebi.org sshd-session[86112]: Invalid user marc from 157.20.52.243 port 51576
show less
Sep 9 17:19:40 koala sshd[1861096]: Invalid user hack from 157.20.52.243 port 58738
Sep 9 17:36:41 koala sshd[1861631]: Invalid user craft from 157.20.52.243 port 41598
...
2025-09-10T01:04:27.955767+02:00 vps sshd-session[3143493]: Invalid user developer from 157.20.52.243 port 39716
2025-09-10T01:09:00.105924+02:00 vps sshd-session[3146482]: Invalid user vagrant from 157.20.52.243 port 41614
...
SSH Brute force: 11 attempts were recorded from 157.20.52.243
2025-09-09T23:53:59+02:00 Disconnected from authenticating user root 157.20.52.243 port 35412 [preauth]
2025-09-09T23:58:53+02:00 Connection from 157.20.52.243 port 40030 on <redacted> por ...
show moreSSH Brute force: 11 attempts were recorded from 157.20.52.243
2025-09-09T23:53:59+02:00 Disconnected from authenticating user root 157.20.52.243 port 35412 [preauth]
2025-09-09T23:58:53+02:00 Connection from 157.20.52.243 port 40030 on <redacted> port 22 rdomain ""
2025-09-09T23:59:04+02:00 Connection closed by 157.20.52.243 port 40030 [preauth]
2025-09-10T00:03:04+02:00 Disconnected from authenticating user root 157.20.52.243 port 33712 [preauth]
2025-09-10T00:05:01+02:00 Connection from 157.20.52.243 port 58780 on <redacted> port 22 rdomain ""
2025-09-10T00:05:18+02:00 Connection closed by 157.20.52.243 port 58780 [preauth]
2025-09-10T00:07:06+02:00 Disconnected from authenticating user root 157.20.52.243 port 55644 [preauth]
2025-09-10T00:09:08+02:00 Disconnected from authenticating user vnc 157.20.52.243 port 52534 [preauth]
2025-09-10T00:11:07+02:00 Connection from 157.20.52.243 por
show less
Sep 9 23:29:13 host2 sshd[3101077]: Invalid user userm from 157.20.52.243 port 55808
Sep 9 23:29:13 host2 sshd[3101077]: Invalid user userm from 157.20.52.243 port 55808
Sep 9 23:29:13 host2 sshd[3101077]: pam_unix(sshd:auth): authentication failu ...
show moreSep 9 23:29:13 host2 sshd[3101077]: Invalid user userm from 157.20.52.243 port 55808
Sep 9 23:29:13 host2 sshd[3101077]: Invalid user userm from 157.20.52.243 port 55808
Sep 9 23:29:13 host2 sshd[3101077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.20.52.243
Sep 9 23:29:13 host2 sshd[3101077]: Invalid user userm from 157.20.52.243 port 55808
Sep 9 23:29:15 host2 sshd[3101077]: Failed password for invalid user userm from 157.20.52.243 port 55808 ssh2
...
show less
2025-09-09T22:54:48.026994+02:00 Linux14 sshd[3624026]: Failed password for invalid user test from 157.20.52.243 port 43890 ssh2
2025-09-09T22:56:47.013519+02:00 Linux14 sshd[3628620]: Invalid user nexus from 157.20.52.243 port 41046
2025-09-09T22:56 ...
show more2025-09-09T22:54:48.026994+02:00 Linux14 sshd[3624026]: Failed password for invalid user test from 157.20.52.243 port 43890 ssh2
2025-09-09T22:56:47.013519+02:00 Linux14 sshd[3628620]: Invalid user nexus from 157.20.52.243 port 41046
2025-09-09T22:56:47.016937+02:00 Linux14 sshd[3628620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.20.52.243
2025-09-09T22:56:49.242028+02:00 Linux14 sshd[3628620]: Failed password for invalid user nexus from 157.20.52.243 port 41046 ssh2
2025-09-09T23:00:56.103950+02:00 Linux14 sshd[3637391]: Invalid user glassfish from 157.20.52.243 port 35412
2025-09-09T23:00:56.108526+02:00 Linux14 sshd[3637391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.20.52.243
2025-09-09T23:00:58.180967+02:00 Linux14 sshd[3637391]: Failed password for invalid user glassfish from 157.20.52.243 port 35412 ssh2
2025-09-09T23:07:06.577235+02:00 Linux14 sshd[3650732]: pam_unix(sshd:auth)
...
show less
SSH Brute Force Attack from 157.20.52.243
Threat Details:
- Type: SSH Brute Force Attack
- Target Service: sshd
- Target Server: openvpn.goline.ch
- Detection Time: 2025-09-09 23:02:07
- Source Country: IP Address not found
- Source ISP: Asia Pacifi ...
show moreSSH Brute Force Attack from 157.20.52.243
Threat Details:
- Type: SSH Brute Force Attack
- Target Service: sshd
- Target Server: openvpn.goline.ch
- Detection Time: 2025-09-09 23:02:07
- Source Country: IP Address not found
- Source ISP: Asia Pacific Network Information Centre
- Reverse DNS:
Description: Automated SSH login attempts detected from this IP address
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown