Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
157.245.139.32 attack
Automatic report - Banned IP Access
2020-09-13 23:41:00
157.245.139.32 attack
Automatic report - Banned IP Access
2020-09-13 15:33:24
157.245.139.32 attackspam
Automatic report - Banned IP Access
2020-09-13 07:18:04
157.245.139.32 attackbots
157.245.139.32 - - [30/Jul/2020:05:39:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.139.32 - - [30/Jul/2020:05:39:33 +0100] "POST /wp-login.php HTTP/1.1" 200 2234 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.139.32 - - [30/Jul/2020:05:39:34 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-30 15:25:03
157.245.139.32 attackspambots
157.245.139.32 - - [26/Jul/2020:21:16:25 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.139.32 - - [26/Jul/2020:21:16:27 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.139.32 - - [26/Jul/2020:21:16:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-27 03:41:48
157.245.139.159 attackspambots
DATE:2019-11-21 23:57:31, IP:157.245.139.159, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-11-22 08:20:01
157.245.139.186 attackspam
Nov  5 21:41:34 MK-Soft-Root1 sshd[11065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.139.186 
Nov  5 21:41:37 MK-Soft-Root1 sshd[11065]: Failed password for invalid user Rupesh from 157.245.139.186 port 52698 ssh2
...
2019-11-06 04:50:24
157.245.139.37 attackspam
(from noreply@business-loan-funding.pro) Hi, letting you know that http://Business-Loan-Funding.pro?url=ocfrw.org can find your business a SBA or private loan for $2,000 - $350K Without high credit or collateral. 
 
Find Out how much you qualify for by clicking here: 
 
http://Business-Loan-Funding.pro?url=ocfrw.org 
 
Minimum requirements include your company being established for at least a year and with current gross revenue of at least 120K. Eligibility and funding can be completed in as fast as 48hrs. Terms are personalized for each business so I suggest applying to find out exactly how much you can get on various terms. 
 
This is a free service from a qualified lender and the approval will be based on the annual revenue of your business. These funds are Non-Restrictive, allowing you to spend the full amount in any way you require including business debt consolidation, hiring, marketing, or Absolutely Any Other expense. 
 
If you need fast and easy business funding take a look at these program
2019-10-08 23:12:17
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.139.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23741
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.139.245.		IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 13:28:22 CST 2022
;; MSG SIZE  rcvd: 108
Host info
245.139.245.157.in-addr.arpa domain name pointer 391740.cloudwaysapps.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
245.139.245.157.in-addr.arpa	name = 391740.cloudwaysapps.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
210.245.33.77 attack
Dec 12 20:48:00 SilenceServices sshd[4920]: Failed password for root from 210.245.33.77 port 33579 ssh2
Dec 12 20:55:03 SilenceServices sshd[11061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.245.33.77
Dec 12 20:55:05 SilenceServices sshd[11061]: Failed password for invalid user ud from 210.245.33.77 port 17222 ssh2
2019-12-13 06:22:02
91.106.193.72 attackspam
Invalid user eugen from 91.106.193.72 port 54392
2019-12-13 06:30:57
202.51.110.214 attackbots
fail2ban
2019-12-13 06:19:46
176.219.208.230 attack
port scan and connect, tcp 23 (telnet)
2019-12-13 06:37:36
45.95.32.222 attack
Autoban   45.95.32.222 AUTH/CONNECT
2019-12-13 06:20:54
210.212.194.113 attackspam
Dec 12 23:14:01 loxhost sshd\[20451\]: Invalid user camelia from 210.212.194.113 port 38112
Dec 12 23:14:01 loxhost sshd\[20451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.212.194.113
Dec 12 23:14:03 loxhost sshd\[20451\]: Failed password for invalid user camelia from 210.212.194.113 port 38112 ssh2
Dec 12 23:20:19 loxhost sshd\[20644\]: Invalid user nfs from 210.212.194.113 port 46654
Dec 12 23:20:19 loxhost sshd\[20644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.212.194.113
...
2019-12-13 06:23:51
45.95.32.248 attackspam
Autoban   45.95.32.248 AUTH/CONNECT
2019-12-13 06:17:43
195.154.108.203 attack
Dec 12 22:40:22 nextcloud sshd\[10938\]: Invalid user alivado from 195.154.108.203
Dec 12 22:40:22 nextcloud sshd\[10938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.203
Dec 12 22:40:24 nextcloud sshd\[10938\]: Failed password for invalid user alivado from 195.154.108.203 port 34498 ssh2
...
2019-12-13 06:12:38
139.59.4.63 attackspam
Dec 12 16:47:43 h2177944 sshd\[21351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.4.63
Dec 12 16:47:45 h2177944 sshd\[21351\]: Failed password for invalid user tota from 139.59.4.63 port 49987 ssh2
Dec 12 17:47:54 h2177944 sshd\[24015\]: Invalid user remember from 139.59.4.63 port 37654
Dec 12 17:47:54 h2177944 sshd\[24015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.4.63
...
2019-12-13 06:11:44
79.124.62.27 attackbots
Dec 12 23:17:36 debian-2gb-nbg1-2 kernel: \[24470592.959662\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=79.124.62.27 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=57364 PROTO=TCP SPT=40503 DPT=21004 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-13 06:31:30
45.95.32.238 attackspam
Autoban   45.95.32.238 AUTH/CONNECT
2019-12-13 06:19:11
114.237.188.123 attackspam
Dec 12 15:36:27 grey postfix/smtpd\[23833\]: NOQUEUE: reject: RCPT from unknown\[114.237.188.123\]: 554 5.7.1 Service unavailable\; Client host \[114.237.188.123\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[114.237.188.123\]\; from=\ to=\ proto=SMTP helo=\
...
2019-12-13 06:27:05
45.82.34.90 attack
Autoban   45.82.34.90 AUTH/CONNECT
2019-12-13 06:42:12
23.94.136.115 attack
Dec 11 20:48:46 mailrelay sshd[30310]: Invalid user morearty from 23.94.136.115 port 58463
Dec 11 20:48:46 mailrelay sshd[30310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.136.115
Dec 11 20:48:48 mailrelay sshd[30310]: Failed password for invalid user morearty from 23.94.136.115 port 58463 ssh2
Dec 11 20:48:48 mailrelay sshd[30310]: Received disconnect from 23.94.136.115 port 58463:11: Bye Bye [preauth]
Dec 11 20:48:48 mailrelay sshd[30310]: Disconnected from 23.94.136.115 port 58463 [preauth]
Dec 11 21:17:16 mailrelay sshd[30955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.136.115  user=sshd
Dec 11 21:17:17 mailrelay sshd[30955]: Failed password for sshd from 23.94.136.115 port 44354 ssh2
Dec 11 21:17:17 mailrelay sshd[30955]: Received disconnect from 23.94.136.115 port 44354:11: Bye Bye [preauth]
Dec 11 21:17:17 mailrelay sshd[30955]: Disconnected from 23.94.136.115 ........
-------------------------------
2019-12-13 06:30:27
51.83.249.63 attackbotsspam
Dec 12 22:34:29 h2177944 sshd\[3877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.249.63  user=root
Dec 12 22:34:32 h2177944 sshd\[3877\]: Failed password for root from 51.83.249.63 port 32952 ssh2
Dec 12 22:39:48 h2177944 sshd\[3991\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.249.63  user=root
Dec 12 22:39:50 h2177944 sshd\[3991\]: Failed password for root from 51.83.249.63 port 42352 ssh2
...
2019-12-13 06:36:15

Recently Reported IPs

157.245.141.147 157.245.142.156 157.245.138.211 157.245.141.218
157.245.139.114 157.245.142.40 157.245.148.145 157.245.143.188
157.245.163.238 157.245.145.14 157.245.15.100 157.245.164.66
157.245.165.176 157.245.152.183 157.245.160.161 157.245.16.49
157.245.15.48 157.245.166.0 157.245.161.59 157.245.166.160