This IP address has been reported a total of
24
times from
22 distinct
sources.
157.245.109.11 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Mar 1 12:27:16 nervous-edison8 sshd[1907857]: Failed password for root from 157.245.109.11 port 460 ...
show moreMar 1 12:27:16 nervous-edison8 sshd[1907857]: Failed password for root from 157.245.109.11 port 46090 ssh2
Mar 1 12:27:55 nervous-edison8 sshd[1908160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.109.11 user=root
Mar 1 12:27:56 nervous-edison8 sshd[1908160]: Failed password for root from 157.245.109.11 port 43628 ssh2
Mar 1 12:28:34 nervous-edison8 sshd[1908443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.109.11 user=root
Mar 1 12:28:37 nervous-edison8 sshd[1908443]: Failed password for root from 157.245.109.11 port 47540 ssh2
...
show less
2026-03-01T12:25:18.251316+00:00 localhost sshd[98262]: Connection closed by authenticating user roo ...
show more2026-03-01T12:25:18.251316+00:00 localhost sshd[98262]: Connection closed by authenticating user root 157.245.109.11 port 39430 [preauth]
2026-03-01T12:25:58.748542+00:00 localhost sshd[98266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.109.11 user=root
2026-03-01T12:26:00.631126+00:00 localhost sshd[98266]: Failed password for root from 157.245.109.11 port 55698 ssh2
...
show less
2026-03-01T05:25:43.933097[redacted] sshd[242654]: Connection closed by authenticating user root 157 ...
show more2026-03-01T05:25:43.933097[redacted] sshd[242654]: Connection closed by authenticating user root 157.245.109.11 port 49966 [preauth]
show less
ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/157.245.109.11
2025-03-28 02 ...
show moreThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/157.245.109.11
2025-03-28 02:23:18 /
show less
Web App Attack
Showing 1 to
15
of 24 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ