157.245.14.89 - IPInfo

Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
157.245.144.229	spambotsattackproxynormal	Yuda	2023-06-10 04:11:00
157.245.144.229	spambotsattackproxynormal	Yuda	2023-06-10 04:10:49
157.245.141.105	attack	[f2b] sshd bruteforce, retries: 1	2020-09-28 01:32:01
157.245.141.105	attackspambots	Found on Block List de / proto=6 . srcport=58414 . dstport=22 . (301)	2020-09-27 17:36:00
157.245.144.70	attack	[Sun Sep 13 22:20:34.467933 2020] [access_compat:error] [pid 357864] [client 157.245.144.70:52240] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php, referer: http://learnargentinianspanish.com/wp-login.php ...	2020-09-22 22:43:19
157.245.144.70	attackbotsspam	157.245.144.70 - - [21/Sep/2020:20:21:13 +0100] "POST /wp-login.php HTTP/1.1" 200 2113 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.144.70 - - [21/Sep/2020:20:21:14 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.144.70 - - [21/Sep/2020:20:28:11 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-22 14:48:03
157.245.144.70	attack	157.245.144.70 - - [21/Sep/2020:20:21:13 +0100] "POST /wp-login.php HTTP/1.1" 200 2113 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.144.70 - - [21/Sep/2020:20:21:14 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.144.70 - - [21/Sep/2020:20:28:11 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-22 06:50:30
157.245.142.218	attack	Aug 15 22:43:05 ns381471 sshd[7565]: Failed password for root from 157.245.142.218 port 37624 ssh2	2020-08-16 05:18:20
157.245.142.218	attack	Port scan denied	2020-08-15 15:08:21
157.245.142.218	attackbots	Aug 10 23:06:14 abendstille sshd\[24717\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.142.218 user=root Aug 10 23:06:15 abendstille sshd\[24717\]: Failed password for root from 157.245.142.218 port 34218 ssh2 Aug 10 23:10:33 abendstille sshd\[29164\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.142.218 user=root Aug 10 23:10:35 abendstille sshd\[29164\]: Failed password for root from 157.245.142.218 port 43558 ssh2 Aug 10 23:15:00 abendstille sshd\[1642\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.142.218 user=root ...	2020-08-11 05:35:05
157.245.141.87	attackspambots	Automatic report generated by Wazuh	2020-08-08 14:23:02
157.245.141.87	attackbots	Automatic report - XMLRPC Attack	2020-08-07 00:46:51
157.245.142.218	attackbots	Bruteforce detected by fail2ban	2020-08-05 05:31:23
157.245.141.29	attackbots	Wordpress_xmlrpc_attack	2020-08-05 01:03:11
157.245.142.218	attackspambots	Aug 2 12:56:48 vps-51d81928 sshd[394133]: Failed password for root from 157.245.142.218 port 36314 ssh2 Aug 2 12:58:04 vps-51d81928 sshd[394156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.142.218 user=root Aug 2 12:58:06 vps-51d81928 sshd[394156]: Failed password for root from 157.245.142.218 port 54280 ssh2 Aug 2 12:59:22 vps-51d81928 sshd[394174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.142.218 user=root Aug 2 12:59:24 vps-51d81928 sshd[394174]: Failed password for root from 157.245.142.218 port 44014 ssh2 ...	2020-08-02 22:55:46

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.14.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52740
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.14.89.			IN	A

;; AUTHORITY SECTION:
.			595	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022053100 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 31 15:47:16 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 89.14.245.157.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 89.14.245.157.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
189.14.50.50	attack	Unauthorized connection attempt from IP address 189.14.50.50 on Port 445(SMB)	2019-12-07 04:25:12
136.228.150.175	attackbots	2019-12-06 08:46:34 H=(134.68.9.96.sinet.com.kh) [136.228.150.175]:35834 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/136.228.150.175) 2019-12-06 08:46:34 H=(134.68.9.96.sinet.com.kh) [136.228.150.175]:35834 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-12-06 08:46:35 H=(134.68.9.96.sinet.com.kh) [136.228.150.175]:35834 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/136.228.150.175) ...	2019-12-07 04:28:55
2.179.51.87	attack	Unauthorized connection attempt from IP address 2.179.51.87 on Port 445(SMB)	2019-12-07 04:33:36
139.155.151.50	attackbotsspam	Dec 5 08:41:38 amida sshd[964796]: Invalid user Joni from 139.155.151.50 Dec 5 08:41:38 amida sshd[964796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.151.50 Dec 5 08:41:40 amida sshd[964796]: Failed password for invalid user Joni from 139.155.151.50 port 48700 ssh2 Dec 5 08:41:40 amida sshd[964796]: Received disconnect from 139.155.151.50: 11: Bye Bye [preauth] Dec 5 08:57:38 amida sshd[969019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.151.50 user=backup Dec 5 08:57:40 amida sshd[969019]: Failed password for backup from 139.155.151.50 port 44750 ssh2 Dec 5 08:57:40 amida sshd[969019]: Received disconnect from 139.155.151.50: 11: Bye Bye [preauth] Dec 5 09:05:49 amida sshd[971072]: Invalid user leodora from 139.155.151.50 Dec 5 09:05:49 amida sshd[971072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.15........ -------------------------------	2019-12-07 04:26:06
82.196.14.222	attackspam	2019-12-06T20:15:18.101496abusebot-5.cloudsearch.cf sshd\[29846\]: Invalid user mis from 82.196.14.222 port 41309	2019-12-07 04:16:21
89.133.103.216	attackspam	Failed password for root from 89.133.103.216 port 51328 ssh2	2019-12-07 04:30:18
134.249.127.233	attackbots	Dec 6 15:46:30 lnxweb62 sshd[25562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.249.127.233 Dec 6 15:46:31 lnxweb62 sshd[25569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.249.127.233 Dec 6 15:46:32 lnxweb62 sshd[25562]: Failed password for invalid user pi from 134.249.127.233 port 57238 ssh2	2019-12-07 04:29:47
79.137.35.70	attackspam	$f2bV_matches	2019-12-07 04:27:45
37.106.170.170	attackspam	Unauthorized connection attempt from IP address 37.106.170.170 on Port 445(SMB)	2019-12-07 04:46:09
45.227.255.48	attackbots	Dec 5 15:44:08 sinope sshd[16677]: reveeclipse mapping checking getaddrinfo for hostby.SEIMO98net.org [45.227.255.48] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 5 15:44:08 sinope sshd[16677]: Invalid user PlcmSpIp from 45.227.255.48 Dec 5 15:44:08 sinope sshd[16677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.227.255.48 Dec 5 15:44:09 sinope sshd[16677]: Failed password for invalid user PlcmSpIp from 45.227.255.48 port 8591 ssh2 Dec 5 15:44:09 sinope sshd[16677]: Received disconnect from 45.227.255.48: 11: Client disconnecting normally [preauth] Dec 5 15:44:09 sinope sshd[16679]: reveeclipse mapping checking getaddrinfo for hostby.SEIMO98net.org [45.227.255.48] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 5 15:44:09 sinope sshd[16679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.227.255.48 user=r.r Dec 5 15:44:11 sinope sshd[16679]: Failed password for r.r from 45.227.255.48........ -------------------------------	2019-12-07 04:50:18
1.52.173.204	attack	Unauthorized connection attempt from IP address 1.52.173.204 on Port 445(SMB)	2019-12-07 04:30:46
177.70.167.44	attackspambots	Unauthorized connection attempt from IP address 177.70.167.44 on Port 445(SMB)	2019-12-07 04:09:24
201.242.199.170	attackbotsspam	Unauthorized connection attempt from IP address 201.242.199.170 on Port 445(SMB)	2019-12-07 04:32:26
222.186.175.140	attackbotsspam	Dec 6 17:10:30 firewall sshd[18236]: Failed password for root from 222.186.175.140 port 26978 ssh2 Dec 6 17:10:43 firewall sshd[18236]: error: maximum authentication attempts exceeded for root from 222.186.175.140 port 26978 ssh2 [preauth] Dec 6 17:10:43 firewall sshd[18236]: Disconnecting: Too many authentication failures [preauth] ...	2019-12-07 04:18:04
190.218.194.51	attackspambots	Telnet Server BruteForce Attack	2019-12-07 04:36:43

Recently Reported IPs

96.76.117.68	176.35.215.69	246.11.235.74	15.25.10.73
231.231.216.59	54.157.253.189	32.242.48.119	24.34.247.183
10.165.80.89	227.43.75.216	114.125.117.132	194.116.54.1
179.211.205.77	219.25.176.147	170.221.17.214	97.133.49.90
121.201.222.185	50.63.35.25	64.246.204.48	206.9.153.4