157.245.119.48

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
157.245.119.144	attack	WordPress login Brute force / Web App Attack on client site.	2020-04-07 13:49:35
157.245.119.144	attackspambots	xmlrpc attack	2020-04-07 03:58:54
157.245.119.144	attack	CMS (WordPress or Joomla) login attempt.	2020-03-26 05:20:37
157.245.119.138	attackspam	Trying ports that it shouldn't be.	2020-03-13 22:57:39
157.245.119.144	attackspam	CMS (WordPress or Joomla) login attempt.	2020-03-04 22:46:01
157.245.119.144	attackbotsspam	Automatic report - XMLRPC Attack	2020-02-22 17:01:39
157.245.119.57	attackbots	FICKT EUCH SCAM BASTARDE! BLACKMAILER RATS Wed Feb 05 @ 2:20pm SPAM[ip_blacklist] 157.245.119.57 gm-..=...@gmail.com	2020-02-06 03:31:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.119.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26446
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.119.48.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 13:28:17 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 48.119.245.157.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.119.245.157.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
164.132.165.20	attackspam	Auto reported by IDS	2019-08-01 19:07:42
189.91.7.44	attackbots	failed_logins	2019-08-01 18:47:04
144.217.166.59	attack	" "	2019-08-01 18:53:54
216.244.66.234	attackspambots	login attempts	2019-08-01 19:21:58
162.243.144.193	attack	01.08.2019 03:21:38 SMTPs access blocked by firewall	2019-08-01 19:31:48
218.9.54.243	attackspambots	Aug 1 09:05:56 site1 sshd\[11343\]: Invalid user project from 218.9.54.243Aug 1 09:05:57 site1 sshd\[11343\]: Failed password for invalid user project from 218.9.54.243 port 64682 ssh2Aug 1 09:10:16 site1 sshd\[11835\]: Invalid user javed from 218.9.54.243Aug 1 09:10:19 site1 sshd\[11835\]: Failed password for invalid user javed from 218.9.54.243 port 31114 ssh2Aug 1 09:14:37 site1 sshd\[12072\]: Invalid user moizur from 218.9.54.243Aug 1 09:14:39 site1 sshd\[12072\]: Failed password for invalid user moizur from 218.9.54.243 port 59568 ssh2 ...	2019-08-01 19:16:47
125.167.58.136	attack	Unauthorised access (Aug 1) SRC=125.167.58.136 LEN=52 TTL=116 ID=8925 DF TCP DPT=445 WINDOW=8192 SYN	2019-08-01 19:03:12
148.66.135.173	attackspam	$f2bV_matches_ltvn	2019-08-01 19:34:15
192.241.159.27	attackspambots	Aug 1 12:35:46 * sshd[21600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.159.27 Aug 1 12:35:48 * sshd[21600]: Failed password for invalid user copier from 192.241.159.27 port 53906 ssh2	2019-08-01 19:36:41
119.200.186.168	attackspam	Aug 1 13:27:38 yabzik sshd[4482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.200.186.168 Aug 1 13:27:40 yabzik sshd[4482]: Failed password for invalid user system from 119.200.186.168 port 42872 ssh2 Aug 1 13:32:35 yabzik sshd[7261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.200.186.168	2019-08-01 18:49:40
70.45.243.146	attackspam	Jun 30 21:13:32 dallas01 sshd[13778]: Failed password for invalid user jfbrard from 70.45.243.146 port 50364 ssh2 Jun 30 21:18:59 dallas01 sshd[14488]: Failed password for root from 70.45.243.146 port 39180 ssh2 Jun 30 21:20:47 dallas01 sshd[14805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.45.243.146	2019-08-01 19:08:08
81.163.57.167	attack	[munged]::443 81.163.57.167 - - [01/Aug/2019:05:23:04 +0200] "POST /[munged]: HTTP/1.1" 200 6318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 81.163.57.167 - - [01/Aug/2019:05:23:06 +0200] "POST /[munged]: HTTP/1.1" 200 6290 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 81.163.57.167 - - [01/Aug/2019:05:23:06 +0200] "POST /[munged]: HTTP/1.1" 200 6290 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 81.163.57.167 - - [01/Aug/2019:05:23:07 +0200] "POST /[munged]: HTTP/1.1" 200 6288 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 81.163.57.167 - - [01/Aug/2019:05:23:07 +0200] "POST /[munged]: HTTP/1.1" 200 6288 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 81.163.57.167 - - [01/Aug/2019:05:23:08 +0200] "POST /[munged]: HTTP/1.1" 200 6287 "-" "Mozilla/5.0 (X11; Ubun	2019-08-01 18:52:06
94.236.26.118	attackbots	Aug 1 01:12:59 penfold sshd[3641]: Invalid user piotr from 94.236.26.118 port 34030 Aug 1 01:12:59 penfold sshd[3641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.236.26.118 Aug 1 01:13:00 penfold sshd[3641]: Failed password for invalid user piotr from 94.236.26.118 port 34030 ssh2 Aug 1 01:13:00 penfold sshd[3641]: Received disconnect from 94.236.26.118 port 34030:11: Bye Bye [preauth] Aug 1 01:13:00 penfold sshd[3641]: Disconnected from 94.236.26.118 port 34030 [preauth] Aug 1 01:22:30 penfold sshd[3976]: Invalid user user2 from 94.236.26.118 port 36196 Aug 1 01:22:30 penfold sshd[3976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.236.26.118 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=94.236.26.118	2019-08-01 19:16:12
5.62.41.134	attack	\[2019-08-01 07:04:43\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:12321' - Wrong password \[2019-08-01 07:04:43\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-01T07:04:43.568-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="87161",SessionID="0x7ff4d004fe18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134/51758",Challenge="7dbc15e8",ReceivedChallenge="7dbc15e8",ReceivedHash="d967b4a55c8d09b21370882b62020eec" \[2019-08-01 07:05:31\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:12355' - Wrong password \[2019-08-01 07:05:31\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-01T07:05:31.459-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="60532",SessionID="0x7ff4d09250c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134	2019-08-01 19:11:21
91.121.101.61	attackbotsspam	firewall-block, port(s): 3614/tcp	2019-08-01 19:34:45

Recently Reported IPs

157.245.113.153	157.245.116.238	157.245.131.81	157.245.130.151
157.245.12.131	157.245.129.78	157.245.129.99	157.245.133.63
157.245.136.104	157.245.136.63	157.245.134.93	157.245.132.205
157.245.137.225	157.245.137.74	157.245.139.54	157.245.141.147
157.245.139.245	157.245.142.156	157.245.138.211	157.245.141.218