JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

157.245.68.252

Neutral Activity

Abuse confidence score ?

0% Low Risk

1,659 reports

491 reporters · latest 3 years ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

157.245.68.252 has been reported 1,659 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 157.245.68.252

Export CSV

This IP address has been reported a total of 1,659 times from 491 distinct sources. 157.245.68.252 was first reported on January 31st 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 JA	2023-07-12 14:00:37 (3 years ago)	ssh login attempt	Brute-Force SSH
🇺🇸 roki.ovh	2023-03-22 16:22:15 (3 years ago)	Mar 16 20:35:12 roki2 sshd\[17033\]: Invalid user nadmin from 157.245.68.252 Mar 16 20:35:12 roki2 s ... show more Mar 16 20:35:12 roki2 sshd\[17033\]: Invalid user nadmin from 157.245.68.252 Mar 16 20:35:12 roki2 sshd\[17033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.68.252 Mar 16 20:35:14 roki2 sshd\[17033\]: Failed password for invalid user nadmin from 157.245.68.252 port 48728 ssh2 Mar 16 20:40:15 roki2 sshd\[18048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.68.252 user=root Mar 16 20:40:17 roki2 sshd\[18048\]: Failed password for root from 157.245.68.252 port 39486 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-03-19 23:42:44 (3 years ago)	ThreatBook Intelligence: Brute Force,Dynamic IP more details on https://threatbook.io/ip/157.245.68. ... show more ThreatBook Intelligence: Brute Force,Dynamic IP more details on https://threatbook.io/ip/157.245.68.252 show less	Brute-Force
🇺🇸 bigscoots.com	2023-03-19 10:11:27 (3 years ago)	(sshd) Failed SSH login from 157.245.68.252 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 157.245.68.252 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Mar 19 05:04:55 11038 sshd[18119]: Invalid user test from 157.245.68.252 port 33736 Mar 19 05:04:58 11038 sshd[18119]: Failed password for invalid user test from 157.245.68.252 port 33736 ssh2 Mar 19 05:09:58 11038 sshd[18576]: Invalid user testuser from 157.245.68.252 port 50954 Mar 19 05:10:00 11038 sshd[18576]: Failed password for invalid user testuser from 157.245.68.252 port 50954 ssh2 Mar 19 05:11:07 11038 sshd[18819]: Invalid user user from 157.245.68.252 port 48046 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-19 09:24:11 (3 years ago)	(sshd) Failed SSH login from 157.245.68.252 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 157.245.68.252 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Mar 19 04:17:04 16447 sshd[15807]: Invalid user cacti from 157.245.68.252 port 36406 Mar 19 04:17:06 16447 sshd[15807]: Failed password for invalid user cacti from 157.245.68.252 port 36406 ssh2 Mar 19 04:22:43 16447 sshd[16031]: Invalid user rke from 157.245.68.252 port 60426 Mar 19 04:22:45 16447 sshd[16031]: Failed password for invalid user rke from 157.245.68.252 port 60426 ssh2 Mar 19 04:23:54 16447 sshd[16073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.68.252 user=root show less	Brute-Force SSH
🇩🇪 ipcop.net	2023-03-19 09:24:03 (3 years ago)	Mar 19 10:17:53 gw-de15-01.guestgw.net sshd[98986]: Invalid user cacti from 157.245.68.252 port 4533 ... show more Mar 19 10:17:53 gw-de15-01.guestgw.net sshd[98986]: Invalid user cacti from 157.245.68.252 port 45330 Mar 19 10:17:53 gw-de15-01.guestgw.net sshd[98986]: Disconnected from invalid user cacti 157.245.68.252 port 45330 [preauth] Mar 19 10:22:52 gw-de15-01.guestgw.net sshd[99607]: Invalid user rke from 157.245.68.252 port 46508 Mar 19 10:22:52 gw-de15-01.guestgw.net sshd[99607]: Disconnected from invalid user rke 157.245.68.252 port 46508 [preauth] Mar 19 10:24:02 gw-de15-01.guestgw.net sshd[99736]: Disconnected from authenticating user root 157.245.68.252 port 51240 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-03-19 09:24:03 (3 years ago)	Mar 19 10:17:53 gw-de15-01.guestgw.net sshd[98986]: Invalid user cacti from 157.245.68.252 port 4533 ... show more Mar 19 10:17:53 gw-de15-01.guestgw.net sshd[98986]: Invalid user cacti from 157.245.68.252 port 45330 Mar 19 10:17:53 gw-de15-01.guestgw.net sshd[98986]: Disconnected from invalid user cacti 157.245.68.252 port 45330 [preauth] Mar 19 10:22:52 gw-de15-01.guestgw.net sshd[99607]: Invalid user rke from 157.245.68.252 port 46508 Mar 19 10:22:52 gw-de15-01.guestgw.net sshd[99607]: Disconnected from invalid user rke 157.245.68.252 port 46508 [preauth] Mar 19 10:24:02 gw-de15-01.guestgw.net sshd[99736]: Disconnected from authenticating user root 157.245.68.252 port 51240 [preauth] show less	Brute-Force
🇩🇪 chenzw	2023-03-19 09:22:37 (3 years ago)	Mar 19 09:16:29 neptune sshd[27421]: Invalid user cacti from 157.245.68.252 port 60638 Mar 19 09:16: ... show more Mar 19 09:16:29 neptune sshd[27421]: Invalid user cacti from 157.245.68.252 port 60638 Mar 19 09:16:29 neptune sshd[27421]: Disconnected from invalid user cacti 157.245.68.252 port 60638 [preauth] Mar 19 09:22:37 neptune sshd[27457]: Invalid user rke from 157.245.68.252 port 33264 Mar 19 09:22:37 neptune sshd[27457]: Disconnected from invalid user rke 157.245.68.252 port 33264 [preauth] ... show less	Brute-Force SSH
🇩🇪 sebaro11	2023-03-19 08:17:48 (3 years ago)	SSH login failed	Brute-Force SSH
🇫🇷 phoenix1jl96	2023-03-19 08:17:17 (3 years ago)	Mar 19 09:12:38 box sshd[2331404]: Invalid user ad from 157.245.68.252 port 56658 Mar 19 09:12:38 bo ... show more Mar 19 09:12:38 box sshd[2331404]: Invalid user ad from 157.245.68.252 port 56658 Mar 19 09:12:38 box sshd[2331404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.68.252 Mar 19 09:12:40 box sshd[2331404]: Failed password for invalid user ad from 157.245.68.252 port 56658 ssh2 Mar 19 09:13:51 box sshd[2331583]: Invalid user jeremiah from 157.245.68.252 port 55884 Mar 19 09:13:51 box sshd[2331583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.68.252 Mar 19 09:13:53 box sshd[2331583]: Failed password for invalid user jeremiah from 157.245.68.252 port 55884 ssh2 Mar 19 09:17:17 box sshd[2333070]: Invalid user hongkai from 157.245.68.252 port 34500 ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
🇵🇱 IROK	2023-03-19 08:16:14 (3 years ago)	2023-03-19T09:10:26.588226pclab24.pl sshd[655675]: Failed password for invalid user escaner from 157 ... show more 2023-03-19T09:10:26.588226pclab24.pl sshd[655675]: Failed password for invalid user escaner from 157.245.68.252 port 47348 ssh2 2023-03-19T09:13:15.233267pclab24.pl sshd[656270]: Invalid user ad from 157.245.68.252 port 56368 2023-03-19T09:13:15.238660pclab24.pl sshd[656270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.68.252 2023-03-19T09:13:17.188036pclab24.pl sshd[656270]: Failed password for invalid user ad from 157.245.68.252 port 56368 ssh2 2023-03-19T09:14:26.175781pclab24.pl sshd[656370]: Invalid user jeremiah from 157.245.68.252 port 45788 ... show less	Brute-Force SSH
🇵🇱 JesionZ	2023-03-19 08:13:03 (3 years ago)	Mar 19 09:09:17 s1 sshd[27272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more Mar 19 09:09:17 s1 sshd[27272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.68.252 Mar 19 09:09:19 s1 sshd[27272]: Failed password for invalid user escaner from 157.245.68.252 port 60574 ssh2 Mar 19 09:13:03 s1 sshd[27742]: Invalid user ad from 157.245.68.252 port 51518 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-19 08:08:10 (3 years ago)	157.245.68.252 (NL/Netherlands/-), 5 distributed sshd attacks on account [escaner] in the last 3600 ... show more 157.245.68.252 (NL/Netherlands/-), 5 distributed sshd attacks on account [escaner] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 19 03:07:20 14161 sshd[19536]: Invalid user escaner from 157.245.68.252 port 46310 Mar 19 03:07:22 14161 sshd[19536]: Failed password for invalid user escaner from 157.245.68.252 port 46310 ssh2 Mar 19 03:07:41 14161 sshd[19544]: Invalid user escaner from 84.201.172.56 port 47964 Mar 19 03:07:43 14161 sshd[19544]: Failed password for invalid user escaner from 84.201.172.56 port 47964 ssh2 Mar 19 03:08:04 14161 sshd[19617]: Invalid user escaner from 159.65.124.66 port 52962 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 pr0vieh	2023-03-19 07:40:42 (3 years ago)	Mar 19 08:36:48 Linux14 sshd[2323837]: Failed password for invalid user gz from 157.245.68.252 port ... show more Mar 19 08:36:48 Linux14 sshd[2323837]: Failed password for invalid user gz from 157.245.68.252 port 55084 ssh2 Mar 19 08:37:58 Linux14 sshd[2327649]: Invalid user chenxinnuo from 157.245.68.252 port 37882 Mar 19 08:37:58 Linux14 sshd[2327649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.68.252 Mar 19 08:37:59 Linux14 sshd[2327649]: Failed password for invalid user chenxinnuo from 157.245.68.252 port 37882 ssh2 Mar 19 08:39:23 Linux14 sshd[2332408]: Invalid user zhangge from 157.245.68.252 port 42376 Mar 19 08:39:23 Linux14 sshd[2332408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.68.252 Mar 19 08:39:24 Linux14 sshd[2332408]: Failed password for invalid user zhangge from 157.245.68.252 port 42376 ssh2 Mar 19 08:40:38 Linux14 sshd[2336931]: Invalid user mimisuke from 157.245.68.252 port 55750 Mar 19 08:40:38 Linux14 sshd[2336931]: pam_unix(sshd:auth): authentication failure; logname ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-19 06:56:08 (3 years ago)	(sshd) Failed SSH login from 157.245.68.252 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 157.245.68.252 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Mar 19 01:49:12 13217 sshd[18703]: Invalid user qwerty from 157.245.68.252 port 50264 Mar 19 01:49:14 13217 sshd[18703]: Failed password for invalid user qwerty from 157.245.68.252 port 50264 ssh2 Mar 19 01:54:47 13217 sshd[19036]: Invalid user smart from 157.245.68.252 port 45420 Mar 19 01:54:49 13217 sshd[19036]: Failed password for invalid user smart from 157.245.68.252 port 45420 ssh2 Mar 19 01:55:56 13217 sshd[19122]: Invalid user awais from 157.245.68.252 port 52890 show less	Brute-Force SSH

Showing 1 to 15 of 1659 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.236.58.204

🇩🇪 178.27.90.142

🇮🇳 122.165.56.162

🇨🇦 85.217.149.51

🇫🇷 85.217.140.31

🇧🇬 79.124.56.142

🇱🇹 77.90.185.122

🇺🇸 74.209.100.246

🇻🇳 42.1.65.123

🇺🇸 20.115.209.228

🇬🇭 2605:59c0:1f34:2e08:e846:e2ac:bfc7:cc93

🇧🇷 200.150.163.108

🇲🇦 196.206.161.67

🇬🇧 195.96.139.27

🇭🇷 188.252.197.219

🇦🇷 181.45.133.132

🇻🇳 103.195.236.35

🇪🇸 83.165.118.65

🇭🇰 58.152.45.167

🇬🇧 35.203.210.161