Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Singapore

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
157.245.149.219 attackbotsspam
157.245.149.219 - - [07/May/2020:16:59:51 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [07/May/2020:16:59:53 +0200] "POST /wp-login.php HTTP/1.1" 200 5953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [07/May/2020:16:59:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-05-08 01:17:37
157.245.149.127 attack
$f2bV_matches
2020-04-21 03:08:58
157.245.149.219 attackspambots
157.245.149.219 - - [10/Apr/2020:10:23:21 +0200] "GET /wp-login.php HTTP/1.1" 200 6463 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [10/Apr/2020:10:23:23 +0200] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [10/Apr/2020:10:23:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-04-10 17:14:16
157.245.149.219 attack
CMS (WordPress or Joomla) login attempt.
2020-04-05 13:08:26
157.245.149.219 attackspambots
Automatic report - XMLRPC Attack
2020-02-27 06:22:26
157.245.149.5 attackspam
Feb 11 10:03:14 v22018076622670303 sshd\[29636\]: Invalid user yrd from 157.245.149.5 port 55568
Feb 11 10:03:14 v22018076622670303 sshd\[29636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5
Feb 11 10:03:16 v22018076622670303 sshd\[29636\]: Failed password for invalid user yrd from 157.245.149.5 port 55568 ssh2
...
2020-02-11 17:39:03
157.245.149.110 attackbots
Feb  3 02:42:37 firewall sshd[23656]: Failed password for invalid user foswiki from 157.245.149.110 port 45478 ssh2
Feb  3 02:45:57 firewall sshd[23787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.110  user=root
Feb  3 02:45:59 firewall sshd[23787]: Failed password for root from 157.245.149.110 port 53094 ssh2
...
2020-02-03 14:41:38
157.245.149.110 attackspam
$f2bV_matches
2020-02-02 19:28:13
157.245.149.241 attackspam
RDP Bruteforce
2020-01-29 16:09:40
157.245.149.5 attack
$f2bV_matches
2020-01-26 02:59:12
157.245.149.5 attackspam
Unauthorized connection attempt detected from IP address 157.245.149.5 to port 2220 [J]
2020-01-25 15:14:43
157.245.149.5 attackbotsspam
Jan 22 23:48:42 hcbbdb sshd\[31125\]: Invalid user alejandro from 157.245.149.5
Jan 22 23:48:42 hcbbdb sshd\[31125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5
Jan 22 23:48:44 hcbbdb sshd\[31125\]: Failed password for invalid user alejandro from 157.245.149.5 port 53226 ssh2
Jan 22 23:50:59 hcbbdb sshd\[31468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5  user=root
Jan 22 23:51:01 hcbbdb sshd\[31468\]: Failed password for root from 157.245.149.5 port 45358 ssh2
2020-01-23 08:16:00
157.245.149.5 attackspambots
Unauthorized connection attempt detected from IP address 157.245.149.5 to port 2220 [J]
2020-01-22 05:23:50
157.245.149.93 attackbots
xmlrpc attack
2019-12-04 13:14:35
157.245.149.124 attackbots
Nov  5 17:37:28 icinga sshd[24535]: Failed password for root from 157.245.149.124 port 59272 ssh2
Nov  5 17:42:02 icinga sshd[25018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.124
...
2019-11-06 04:06:08
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.149.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12569
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.149.105.		IN	A

;; AUTHORITY SECTION:
.			348	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024052000 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 20 16:03:55 CST 2024
;; MSG SIZE  rcvd: 108
Host info
Host 105.149.245.157.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 105.149.245.157.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
221.213.40.114 attack
Persistent port scanning [22 denied]
2020-09-11 02:12:50
119.28.132.211 attackspambots
$f2bV_matches
2020-09-11 01:59:54
89.248.167.141 attackbotsspam
Found on   CINS badguys     / proto=6  .  srcport=8080  .  dstport=4491  .     (752)
2020-09-11 01:50:19
117.242.147.93 attack
Sep  9 18:42:56 xeon cyrus/imaps[34233]: badlogin: [117.242.147.93] plaintext szabo.abel@taylor.hu SASL(-13): authentication failure: checkpass failed
2020-09-11 01:55:48
138.197.171.79 attack
2020-09-10T20:22:57.284259lavrinenko.info sshd[29533]: Failed password for invalid user celia from 138.197.171.79 port 53040 ssh2
2020-09-10T20:26:31.591344lavrinenko.info sshd[29595]: Invalid user admin from 138.197.171.79 port 57166
2020-09-10T20:26:31.599944lavrinenko.info sshd[29595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.171.79
2020-09-10T20:26:31.591344lavrinenko.info sshd[29595]: Invalid user admin from 138.197.171.79 port 57166
2020-09-10T20:26:33.797165lavrinenko.info sshd[29595]: Failed password for invalid user admin from 138.197.171.79 port 57166 ssh2
...
2020-09-11 01:45:04
219.239.47.66 attack
Sep 10 08:41:15 root sshd[3637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.239.47.66 
...
2020-09-11 01:55:01
111.229.58.152 attack
...
2020-09-11 01:58:11
203.172.66.222 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-11 01:54:18
222.186.175.202 attack
Sep 10 19:30:39 santamaria sshd\[5572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.202  user=root
Sep 10 19:30:41 santamaria sshd\[5572\]: Failed password for root from 222.186.175.202 port 29478 ssh2
Sep 10 19:30:44 santamaria sshd\[5572\]: Failed password for root from 222.186.175.202 port 29478 ssh2
...
2020-09-11 01:32:41
119.45.0.9 attack
Invalid user antonio from 119.45.0.9 port 38846
2020-09-11 02:06:42
31.163.178.77 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-09-11 02:02:49
89.248.168.108 attack
Sep  9 20:43:57 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.108, lip=144.91.77.193, session=<6RN01eWuruBZ+Khs>
Sep 10 18:13:09 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.108, lip=144.91.77.193, session=
Sep 10 18:45:27 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.108, lip=144.91.77.193, session=
Sep 10 19:18:11 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.108, lip=144.91.77.193, session=
Sep 10 19:51:05 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.108, lip=144.91.77.193, session=
2020-09-11 02:16:44
139.198.18.230 attackbots
Sep 10 16:42:53 h2829583 sshd[24490]: Failed password for root from 139.198.18.230 port 37335 ssh2
2020-09-11 01:38:30
218.104.198.139 attack
" "
2020-09-11 02:00:46
194.190.93.136 attackspam
Dovecot Invalid User Login Attempt.
2020-09-11 02:09:39

Recently Reported IPs

98.142.139.60 10.22.245.1 186.175.67.246 154.195.10.37
110.52.98.104 5.160.52.179 105.172.227.198 176.29.244.40
107.148.20.200 144.119.199.127 128.199.175.249 234.162.103.176
23.225.121.54 23.225.121.226 10.112.48.38 23.225.121.186
23.225.121.149 23.225.121.123 188.113.150.15 67.166.217.140