JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.245.109.18

157.245.109.18 was found in our database!

This IP was reported 249 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇮🇳 India
City	Bashettihalli, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.245.109.18

Whois 157.245.109.18

IP Abuse Reports for 157.245.109.18:

This IP address has been reported a total of 249 times from 70 distinct sources. 157.245.109.18 was first reported on February 3rd 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 LZ Servicios Digitales	2026-07-27 20:16:22 (1 day ago)	Reportado automáticamente desde LiquidaZona Cloud WAF.	Brute-Force
🇮🇳 evicky2002	2026-07-27 06:00:00 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇪🇸 DXC-0	2026-07-27 03:00:18 (2 days ago)	Multiple attacks on Honeypot servers	Web Spam Brute-Force Web App Attack Hacking
🇺🇸 kot	2026-07-27 01:02:17 (2 days ago)	scan port 22, 157.245.109.18 block	Port Scan
🇦🇹 urnilxfgbez	2026-07-26 22:45:00 (2 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇷🇺 RuVeR	2026-07-26 21:20:36 (2 days ago)	2026-07-27T00:13:56.779622pantelemone.ru sshd[3579719]: Failed password for invalid user ftpuser fro ... show more 2026-07-27T00:13:56.779622pantelemone.ru sshd[3579719]: Failed password for invalid user ftpuser from 157.245.109.18 port 48482 ssh2 2026-07-27T00:17:16.723509pantelemone.ru sshd[3580297]: Invalid user ftpuser from 157.245.109.18 port 48512 2026-07-27T00:17:16.969020pantelemone.ru sshd[3580297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.109.18 2026-07-27T00:17:18.780341pantelemone.ru sshd[3580297]: Failed password for invalid user ftpuser from 157.245.109.18 port 48512 ssh2 2026-07-27T00:20:35.473193pantelemone.ru sshd[3580803]: Invalid user ubutnu from 157.245.109.18 port 56436 ... show less	Brute-Force SSH
Anonymous	2026-07-26 21:20:22 (2 days ago)	Jul 26 21:13:42 portainer-be sshd[558627]: Failed password for invalid user ftpuser from 157.245.109 ... show more Jul 26 21:13:42 portainer-be sshd[558627]: Failed password for invalid user ftpuser from 157.245.109.18 port 60716 ssh2 Jul 26 21:17:02 portainer-be sshd[569959]: Invalid user ftpuser from 157.245.109.18 port 59282 Jul 26 21:17:02 portainer-be sshd[569959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.109.18 Jul 26 21:17:04 portainer-be sshd[569959]: Failed password for invalid user ftpuser from 157.245.109.18 port 59282 ssh2 Jul 26 21:20:21 portainer-be sshd[580913]: Invalid user ubutnu from 157.245.109.18 port 56216 ... show less	Brute-Force SSH
🇦🇺 Powston	2026-07-26 21:05:00 (2 days ago)	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-07-26T20:36:02Z and 2026-07- ... show more Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-07-26T20:36:02Z and 2026-07-26T21:05:00Z show less	Brute-Force SSH
🇷🇺 RuVeR	2026-07-26 21:01:08 (2 days ago)	2026-07-26T23:54:34.270867pantelemone.ru sshd[3575644]: Failed password for invalid user erp from 15 ... show more 2026-07-26T23:54:34.270867pantelemone.ru sshd[3575644]: Failed password for invalid user erp from 157.245.109.18 port 39566 ssh2 2026-07-26T23:57:52.843228pantelemone.ru sshd[3576021]: Invalid user erp from 157.245.109.18 port 38044 2026-07-26T23:57:53.030134pantelemone.ru sshd[3576021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.109.18 2026-07-26T23:57:55.179215pantelemone.ru sshd[3576021]: Failed password for invalid user erp from 157.245.109.18 port 38044 ssh2 2026-07-27T00:01:08.190342pantelemone.ru sshd[3578123]: Invalid user software from 157.245.109.18 port 36910 ... show less	Brute-Force SSH
Anonymous	2026-07-26 21:00:55 (2 days ago)	Jul 26 20:54:19 portainer-be sshd[493815]: Failed password for invalid user erp from 157.245.109.18 ... show more Jul 26 20:54:19 portainer-be sshd[493815]: Failed password for invalid user erp from 157.245.109.18 port 44572 ssh2 Jul 26 20:57:38 portainer-be sshd[505086]: Invalid user erp from 157.245.109.18 port 52888 Jul 26 20:57:39 portainer-be sshd[505086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.109.18 Jul 26 20:57:40 portainer-be sshd[505086]: Failed password for invalid user erp from 157.245.109.18 port 52888 ssh2 Jul 26 21:00:54 portainer-be sshd[516022]: Invalid user software from 157.245.109.18 port 53114 ... show less	Brute-Force SSH
🇳🇱 Cloud86 B.V.	2026-07-26 21:00:03 (2 days ago)	categories: Brute-Force	Brute-Force
🇱🇻 alliance	2026-07-26 20:52:08 (2 days ago)	Jul 26 23:52:06 ***** sshd[699972]: Invalid user erp from 157.245.109.18 port 53078	Brute-Force SSH
🇩🇪 ghostwarriors	2026-07-26 20:50:28 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇨🇿 lp	2026-07-26 20:48:53 (2 days ago)	SSH Brute force: 11 attempts were recorded from 157.245.109.18 2026-07-26T22:32:37+02:00 Connection ... show more SSH Brute force: 11 attempts were recorded from 157.245.109.18 2026-07-26T22:32:37+02:00 Connection from 157.245.109.18 port 56306 on <redacted> port 22 rdomain "" 2026-07-26T22:32:37+02:00 kex_exchange_identification: Connection closed by remote host 2026-07-26T22:35:59+02:00 Connection from 157.245.109.18 port 46626 on <redacted> port 22 rdomain "" 2026-07-26T22:35:59+02:00 Invalid user erp from 157.245.109.18 port 46626 2026-07-26T22:36:00+02:00 Connection closed by invalid user erp 157.245.109.18 port 46626 [preauth] 2026-07-26T22:39:20+02:00 Connection from 157.245.109.18 port 59898 on <redacted> port 22 rdomain "" 2026-07-26T22:39:21+02:00 Invalid user erp123 from 157.245.109.18 port 59898 2026-07-26T22:39:21+02:00 Connection closed by invalid user erp123 157.245.109.18 port 59898 [preauth] 2026-07-26T22:42:38+02:00 Connection from 157.245.109.18 port 59400 on <redacted> port 22 rd show less	Brute-Force SSH
🇺🇸 psh-ack	2026-07-26 20:48:12 (2 days ago)	SSH brute-force using Go-based client. Attempted logins: darwin/darwin, erp/erp, erp123/erp123, frap ... show more SSH brute-force using Go-based client. Attempted logins: darwin/darwin, erp/erp, erp123/erp123, frappe/frappe across 4 sessions in 10min. Successful recon cmds executed: uname, lspci VGA count, lspci awk parsing, nvidia-smi query, uptime. Pattern indicates automated reconnaissance toolkit targeting GPU detection/capabilities. Consistent with botnet enrollment or crypto-miner reconnaissance. Weak creds (dict words, service names) typical credential stuffing. No persistence, file dl, lateral movement observed. Custom Go SSH tooling suggests modified infrastructure. GPU focus indicates intent assess suitability for compute tasks (mining/ML). Activity correlates with hardware capability scanning for resource exploitation. show less	Brute-Force SSH

Showing 1 to 15 of 249 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 198.163.193.139

🇳🇱 195.178.110.30

🇺🇦 185.5.254.44

🇨🇳 182.119.225.18

🇫🇷 172.68.234.96

🇨🇳 123.145.9.92

🇺🇸 107.175.135.2

🇺🇦 94.178.208.24

🇺🇸 65.49.1.56

🇨🇳 43.248.108.130

🇪🇸 212.121.235.167

🇦🇷 200.63.168.90

🇺🇸 195.184.76.123

🇺🇸 195.184.76.120

🇧🇷 190.89.136.166

🇸🇬 152.32.218.149

🇺🇸 136.70.121.203

🇺🇸 103.234.62.71

🇵🇰 103.82.120.214

🇬🇧 86.19.62.53