City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | Feb 11 10:03:14 v22018076622670303 sshd\[29636\]: Invalid user yrd from 157.245.149.5 port 55568 Feb 11 10:03:14 v22018076622670303 sshd\[29636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5 Feb 11 10:03:16 v22018076622670303 sshd\[29636\]: Failed password for invalid user yrd from 157.245.149.5 port 55568 ssh2 ... |
2020-02-11 17:39:03 |
| attack | $f2bV_matches |
2020-01-26 02:59:12 |
| attackspam | Unauthorized connection attempt detected from IP address 157.245.149.5 to port 2220 [J] |
2020-01-25 15:14:43 |
| attackbotsspam | Jan 22 23:48:42 hcbbdb sshd\[31125\]: Invalid user alejandro from 157.245.149.5 Jan 22 23:48:42 hcbbdb sshd\[31125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5 Jan 22 23:48:44 hcbbdb sshd\[31125\]: Failed password for invalid user alejandro from 157.245.149.5 port 53226 ssh2 Jan 22 23:50:59 hcbbdb sshd\[31468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5 user=root Jan 22 23:51:01 hcbbdb sshd\[31468\]: Failed password for root from 157.245.149.5 port 45358 ssh2 |
2020-01-23 08:16:00 |
| attackspambots | Unauthorized connection attempt detected from IP address 157.245.149.5 to port 2220 [J] |
2020-01-22 05:23:50 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 157.245.149.219 | attackbotsspam | 157.245.149.219 - - [07/May/2020:16:59:51 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.149.219 - - [07/May/2020:16:59:53 +0200] "POST /wp-login.php HTTP/1.1" 200 5953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.149.219 - - [07/May/2020:16:59:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-05-08 01:17:37 |
| 157.245.149.127 | attack | $f2bV_matches |
2020-04-21 03:08:58 |
| 157.245.149.219 | attackspambots | 157.245.149.219 - - [10/Apr/2020:10:23:21 +0200] "GET /wp-login.php HTTP/1.1" 200 6463 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.149.219 - - [10/Apr/2020:10:23:23 +0200] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.149.219 - - [10/Apr/2020:10:23:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-04-10 17:14:16 |
| 157.245.149.219 | attack | CMS (WordPress or Joomla) login attempt. |
2020-04-05 13:08:26 |
| 157.245.149.219 | attackspambots | Automatic report - XMLRPC Attack |
2020-02-27 06:22:26 |
| 157.245.149.110 | attackbots | Feb 3 02:42:37 firewall sshd[23656]: Failed password for invalid user foswiki from 157.245.149.110 port 45478 ssh2 Feb 3 02:45:57 firewall sshd[23787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.110 user=root Feb 3 02:45:59 firewall sshd[23787]: Failed password for root from 157.245.149.110 port 53094 ssh2 ... |
2020-02-03 14:41:38 |
| 157.245.149.110 | attackspam | $f2bV_matches |
2020-02-02 19:28:13 |
| 157.245.149.241 | attackspam | RDP Bruteforce |
2020-01-29 16:09:40 |
| 157.245.149.93 | attackbots | xmlrpc attack |
2019-12-04 13:14:35 |
| 157.245.149.124 | attackbots | Nov 5 17:37:28 icinga sshd[24535]: Failed password for root from 157.245.149.124 port 59272 ssh2 Nov 5 17:42:02 icinga sshd[25018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.124 ... |
2019-11-06 04:06:08 |
| 157.245.149.124 | attackbotsspam | Nov 3 05:58:29 minden010 sshd[32576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.124 Nov 3 05:58:31 minden010 sshd[32576]: Failed password for invalid user discovery from 157.245.149.124 port 58166 ssh2 Nov 3 06:02:42 minden010 sshd[4080]: Failed password for root from 157.245.149.124 port 40744 ssh2 ... |
2019-11-03 13:24:10 |
| 157.245.149.62 | attackspam | Nov 2 04:32:27 h2022099 sshd[21829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.62 user=r.r Nov 2 04:32:29 h2022099 sshd[21829]: Failed password for r.r from 157.245.149.62 port 46636 ssh2 Nov 2 04:32:30 h2022099 sshd[21829]: Received disconnect from 157.245.149.62: 11: Bye Bye [preauth] Nov 2 04:36:46 h2022099 sshd[22456]: Invalid user bradley from 157.245.149.62 Nov 2 04:36:46 h2022099 sshd[22456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.62 Nov 2 04:36:48 h2022099 sshd[22456]: Failed password for invalid user bradley from 157.245.149.62 port 59096 ssh2 Nov 2 04:36:48 h2022099 sshd[22456]: Received disconnect from 157.245.149.62: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=157.245.149.62 |
2019-11-02 14:03:20 |
| 157.245.149.114 | attackspam | Oct 31 22:18:12 h2177944 sshd\[5201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.114 user=root Oct 31 22:18:14 h2177944 sshd\[5201\]: Failed password for root from 157.245.149.114 port 46376 ssh2 Oct 31 22:22:26 h2177944 sshd\[5473\]: Invalid user user1 from 157.245.149.114 port 57700 Oct 31 22:22:26 h2177944 sshd\[5473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.114 ... |
2019-11-01 05:35:07 |
| 157.245.149.93 | attack | fail2ban honeypot |
2019-10-25 20:53:53 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.149.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5224
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.245.149.5. IN A
;; AUTHORITY SECTION:
. 568 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020012101 1800 900 604800 86400
;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 05:23:47 CST 2020
;; MSG SIZE rcvd: 117Host 5.149.245.157.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 5.149.245.157.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.165.12.155 | attack | Unauthorized connection attempt from IP address 14.165.12.155 on Port 445(SMB) |
2019-11-05 02:25:52 |
| 2.187.105.147 | attackspam | Unauthorized connection attempt from IP address 2.187.105.147 on Port 445(SMB) |
2019-11-05 02:43:54 |
| 77.42.113.97 | attackspambots | Automatic report - Port Scan Attack |
2019-11-05 03:07:27 |
| 189.13.38.244 | attackspam | Unauthorized connection attempt from IP address 189.13.38.244 on Port 445(SMB) |
2019-11-05 03:03:40 |
| 189.79.119.47 | attackspam | Nov 4 15:31:07 www sshd\[23784\]: Invalid user admin from 189.79.119.47 port 50336 ... |
2019-11-05 02:48:38 |
| 103.40.235.233 | attackbots | 2019-11-04T17:18:57.018668abusebot-2.cloudsearch.cf sshd\[21998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.40.235.233 user=root |
2019-11-05 02:43:14 |
| 89.219.222.239 | attackspambots | Unauthorized connection attempt from IP address 89.219.222.239 on Port 445(SMB) |
2019-11-05 02:25:24 |
| 51.75.52.195 | attack | " " |
2019-11-05 02:27:48 |
| 190.199.185.61 | attackbots | Unauthorized connection attempt from IP address 190.199.185.61 on Port 445(SMB) |
2019-11-05 02:59:04 |
| 77.42.121.24 | attackspam | Automatic report - Port Scan Attack |
2019-11-05 03:01:39 |
| 94.191.81.131 | attackbots | Nov 4 18:47:04 localhost sshd\[100252\]: Invalid user 123456 from 94.191.81.131 port 32920 Nov 4 18:47:04 localhost sshd\[100252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.81.131 Nov 4 18:47:06 localhost sshd\[100252\]: Failed password for invalid user 123456 from 94.191.81.131 port 32920 ssh2 Nov 4 18:51:56 localhost sshd\[100406\]: Invalid user Antibes@123 from 94.191.81.131 port 42988 Nov 4 18:51:56 localhost sshd\[100406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.81.131 ... |
2019-11-05 03:03:23 |
| 46.10.161.57 | attack | Nov 4 16:31:07 game-panel sshd[2338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.10.161.57 Nov 4 16:31:08 game-panel sshd[2338]: Failed password for invalid user Qwerty#9ijn from 46.10.161.57 port 48778 ssh2 Nov 4 16:35:29 game-panel sshd[2446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.10.161.57 |
2019-11-05 02:57:24 |
| 180.165.131.93 | attackspambots | Honeypot attack, port: 445, PTR: PTR record not found |
2019-11-05 02:24:25 |
| 106.12.2.26 | attackbots | frenzy |
2019-11-05 02:56:54 |
| 128.14.134.170 | attackbots | Malicious brute force vulnerability hacking attacks |
2019-11-05 03:04:00 |