JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.206.57

157.22.206.57 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	JSC IOT
Usage Type	Data Center/Web Hosting/Transit
ASN	AS29182
Hostname(s)	wer12156.fvds.ru
Domain Name	aoiot.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.22.206.57

Whois 157.22.206.57

IP Abuse Reports for 157.22.206.57:

This IP address has been reported a total of 50 times from 45 distinct sources. 157.22.206.57 was first reported on July 11th 2026, and the most recent report was 42 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 frankpanduh.com	2026-07-11 11:09:58 (42 seconds ago)	Jul 11 04:04:50 panduh sshd[412534]: Invalid user admin from 157.22.206.57 port 52746 Jul 11 04:05:2 ... show more Jul 11 04:04:50 panduh sshd[412534]: Invalid user admin from 157.22.206.57 port 52746 Jul 11 04:05:24 panduh sshd[412754]: Invalid user orangepi from 157.22.206.57 port 53880 Jul 11 04:09:17 panduh sshd[413818]: Invalid user test from 157.22.206.57 port 59316 Jul 11 04:09:57 panduh sshd[413826]: Invalid user user from 157.22.206.57 port 52388 ... show less	Brute-Force SSH
🇸🇬 securejdprop	2026-07-11 11:09:49 (51 seconds ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ATTACK [PTsecurity ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ATTACK [PTsecurity] Likely Apache HTTP Server 2.4.49 Directory Traversal (CVE-2021-41773)). Ip 157.22.206.57 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-07-11 11:09:47.180528346 +0000 UTC show less	Hacking Web App Attack
🇧🇷 ItsClairton	2026-07-11 11:05:00 (5 minutes ago)	Jul 11 08:04:20 proxy-03 sshd[1140174]: Invalid user orangepi from 157.22.206.57 port 40092 Jul 11 0 ... show more Jul 11 08:04:20 proxy-03 sshd[1140174]: Invalid user orangepi from 157.22.206.57 port 40092 Jul 11 08:04:20 proxy-03 sshd[1140174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.206.57 Jul 11 08:04:22 proxy-03 sshd[1140174]: Failed password for invalid user orangepi from 157.22.206.57 port 40092 ssh2 Jul 11 08:04:57 proxy-03 sshd[1141004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.206.57 user=root Jul 11 08:04:59 proxy-03 sshd[1141004]: Failed password for root from 157.22.206.57 port 41396 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-11 11:04:21 (6 minutes ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇫🇷 HyperSpeeed	2026-07-11 10:55:44 (14 minutes ago)	2026-07-11T12:55:06.797257+02:00 vmd183731 sshd[1633976]: Invalid user orangepi from 157.22.206.57 p ... show more 2026-07-11T12:55:06.797257+02:00 vmd183731 sshd[1633976]: Invalid user orangepi from 157.22.206.57 port 34592 2026-07-11T12:55:06.803721+02:00 vmd183731 sshd[1633976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.206.57 2026-07-11T12:55:08.627683+02:00 vmd183731 sshd[1633976]: Failed password for invalid user orangepi from 157.22.206.57 port 34592 ssh2 2026-07-11T12:55:42.162892+02:00 vmd183731 sshd[1634095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.206.57 user=root 2026-07-11T12:55:43.928046+02:00 vmd183731 sshd[1634095]: Failed password for root from 157.22.206.57 port 37602 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-11 10:46:52 (23 minutes ago)	SSH BruteForce attack	SSH
🇨🇭 vftable	2026-07-11 09:32:32 (1 hour ago)	2026-07-11T10:32:27.546857+01:00 naomi sshd[20062]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-07-11T10:32:27.546857+01:00 naomi sshd[20062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.206.57 2026-07-11T10:32:29.252788+01:00 naomi sshd[20062]: Failed password for invalid user admin from 157.22.206.57 port 54388 ssh2 2026-07-11T10:32:31.294455+01:00 naomi sshd[20062]: Connection closed by invalid user admin 157.22.206.57 port 54388 [preauth] ... show less	Brute-Force SSH
🇺🇸 Moby	2026-07-11 09:29:06 (1 hour ago)	Sat Jul 11 04:28:58.845200 2026157.22.206.57 - - [11/Jul/2026:04:29:01 -0500] "POST /hello.world?%AD ... show more Sat Jul 11 04:28:58.845200 2026157.22.206.57 - - [11/Jul/2026:04:29:01 -0500] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 984 "-" "libredtail-http" "75.88.18.220" "75.88.18.220" Sat Jul 11 04:28:58.845200 2026157.22.206.57 - - [11/Jul/2026:04:29:03 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 984 "-" "libredtail-http" "75.88.18.220" "75.88.18.220" Sat Jul 11 04:28:58.845200 2026157.22.206.57 - - [11/Jul/2026:04:29:04 -0500] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 984 "-" "libredtail-http" "75.88.18.220" "75.88.18.220" ... show less	Web App Attack
🇺🇸 bigscoots.com	2026-07-11 08:51:51 (2 hours ago)	(sshd) Failed SSH login from 157.22.206.57 (RU/Russia/wer12156.fvds.ru): 5 in the last 3600 secs; Po ... show more (sshd) Failed SSH login from 157.22.206.57 (RU/Russia/wer12156.fvds.ru): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 11 03:44:42 14175 sshd[9104]: Invalid user admin from 157.22.206.57 port 50262 Jul 11 03:44:44 14175 sshd[9104]: Failed password for invalid user admin from 157.22.206.57 port 50262 ssh2 Jul 11 03:48:17 14175 sshd[11029]: Invalid user orangepi from 157.22.206.57 port 42676 Jul 11 03:48:19 14175 sshd[11029]: Failed password for invalid user orangepi from 157.22.206.57 port 42676 ssh2 Jul 11 03:51:47 14175 sshd[12680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.206.57 user=root show less	Brute-Force SSH
🇮🇹 gothaf	2026-07-11 08:33:46 (2 hours ago)	2026-07-11T11:23:30.612228 tradext sshd[2540062]: Invalid user test from 157.22.206.57 port 44656 20 ... show more 2026-07-11T11:23:30.612228 tradext sshd[2540062]: Invalid user test from 157.22.206.57 port 44656 2026-07-11T11:26:58.198205 tradext sshd[2541513]: Invalid user user from 157.22.206.57 port 42440 2026-07-11T11:33:45.648906 tradext sshd[2543481]: Invalid user admin from 157.22.206.57 port 56160 ... show less	Brute-Force SSH
🇬🇧 Marten Mark	2026-07-11 08:25:14 (2 hours ago)	2026-07-11T08:18:30.035207+00:00 mail.cfi.co sshd[1453427]: Invalid user user from 157.22.206.57 por ... show more 2026-07-11T08:18:30.035207+00:00 mail.cfi.co sshd[1453427]: Invalid user user from 157.22.206.57 port 57386 2026-07-11T08:25:09.433497+00:00 mail.cfi.co sshd[1453552]: Connection from 157.22.206.57 port 33726 on 206.189.122.172 port 22 rdomain "" 2026-07-11T08:25:13.882182+00:00 mail.cfi.co sshd[1453552]: Invalid user admin from 157.22.206.57 port 33726 ... show less	SSH Brute-Force
🇺🇸 donarev419	2026-07-11 07:39:05 (3 hours ago)	Connection to port 2222 with data transfer. Data preview: SSH-2.0-libssh2_1.11.1	Port Scan Hacking
🇺🇸 MPL	2026-07-11 07:27:39 (3 hours ago)	tcp/443 (4 or more attempts)	Port Scan
🇸🇪 sa0azs	2026-07-11 06:52:14 (4 hours ago)	2026-07-11T08:49:15.023162+02:00 JohnWayne sshd-session[23845]: pam_unix(sshd:auth): authentication ... show more 2026-07-11T08:49:15.023162+02:00 JohnWayne sshd-session[23845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.206.57 2026-07-11T08:49:17.040262+02:00 JohnWayne sshd-session[23845]: Failed password for invalid user admin from 157.22.206.57 port 49456 ssh2 2026-07-11T08:52:12.161673+02:00 JohnWayne sshd-session[23853]: Invalid user orangepi from 157.22.206.57 port 36716 ... show less	Brute-Force SSH
🇮🇪 AutosOnShow	2026-07-11 06:29:05 (4 hours ago)	blocked for webapp attack \| path requested: / \| seen at 2026-07-11 06:28:34.493 \|	Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.107

🇧🇷 205.210.31.175

🇩🇪 140.248.75.78

🇳🇱 91.92.40.200

🇩🇪 69.5.169.234

🇱🇹 45.227.254.170

🇿🇦 20.87.219.67

🇲🇽 187.140.189.78

🇺🇸 147.185.132.45

🇩🇪 91.192.10.83

🇳🇱 91.92.40.204

🇮🇩 69.5.0.120

🇳🇱 23.109.177.50

🇺🇸 2607:f8b0:4001:c22::12a

🇧🇪 198.235.24.215

🇵🇱 176.53.159.198

🇨🇳 112.46.212.217

🇮🇹 93.43.232.42

🇺🇸 44.215.219.236

🇸🇬 43.153.206.227