Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Singapore

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
157.245.149.219 attackbotsspam
157.245.149.219 - - [07/May/2020:16:59:51 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [07/May/2020:16:59:53 +0200] "POST /wp-login.php HTTP/1.1" 200 5953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [07/May/2020:16:59:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-05-08 01:17:37
157.245.149.127 attack
$f2bV_matches
2020-04-21 03:08:58
157.245.149.219 attackspambots
157.245.149.219 - - [10/Apr/2020:10:23:21 +0200] "GET /wp-login.php HTTP/1.1" 200 6463 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [10/Apr/2020:10:23:23 +0200] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [10/Apr/2020:10:23:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-04-10 17:14:16
157.245.149.219 attack
CMS (WordPress or Joomla) login attempt.
2020-04-05 13:08:26
157.245.149.219 attackspambots
Automatic report - XMLRPC Attack
2020-02-27 06:22:26
157.245.149.5 attackspam
Feb 11 10:03:14 v22018076622670303 sshd\[29636\]: Invalid user yrd from 157.245.149.5 port 55568
Feb 11 10:03:14 v22018076622670303 sshd\[29636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5
Feb 11 10:03:16 v22018076622670303 sshd\[29636\]: Failed password for invalid user yrd from 157.245.149.5 port 55568 ssh2
...
2020-02-11 17:39:03
157.245.149.110 attackbots
Feb  3 02:42:37 firewall sshd[23656]: Failed password for invalid user foswiki from 157.245.149.110 port 45478 ssh2
Feb  3 02:45:57 firewall sshd[23787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.110  user=root
Feb  3 02:45:59 firewall sshd[23787]: Failed password for root from 157.245.149.110 port 53094 ssh2
...
2020-02-03 14:41:38
157.245.149.110 attackspam
$f2bV_matches
2020-02-02 19:28:13
157.245.149.241 attackspam
RDP Bruteforce
2020-01-29 16:09:40
157.245.149.5 attack
$f2bV_matches
2020-01-26 02:59:12
157.245.149.5 attackspam
Unauthorized connection attempt detected from IP address 157.245.149.5 to port 2220 [J]
2020-01-25 15:14:43
157.245.149.5 attackbotsspam
Jan 22 23:48:42 hcbbdb sshd\[31125\]: Invalid user alejandro from 157.245.149.5
Jan 22 23:48:42 hcbbdb sshd\[31125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5
Jan 22 23:48:44 hcbbdb sshd\[31125\]: Failed password for invalid user alejandro from 157.245.149.5 port 53226 ssh2
Jan 22 23:50:59 hcbbdb sshd\[31468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5  user=root
Jan 22 23:51:01 hcbbdb sshd\[31468\]: Failed password for root from 157.245.149.5 port 45358 ssh2
2020-01-23 08:16:00
157.245.149.5 attackspambots
Unauthorized connection attempt detected from IP address 157.245.149.5 to port 2220 [J]
2020-01-22 05:23:50
157.245.149.93 attackbots
xmlrpc attack
2019-12-04 13:14:35
157.245.149.124 attackbots
Nov  5 17:37:28 icinga sshd[24535]: Failed password for root from 157.245.149.124 port 59272 ssh2
Nov  5 17:42:02 icinga sshd[25018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.124
...
2019-11-06 04:06:08
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.149.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50800
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.149.85.			IN	A

;; AUTHORITY SECTION:
.			122	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061102 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 12 08:18:24 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 85.149.245.157.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 85.149.245.157.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.175.154 attack
Mar  2 19:54:59 dedicated sshd[7778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154  user=root
Mar  2 19:55:01 dedicated sshd[7778]: Failed password for root from 222.186.175.154 port 63938 ssh2
2020-03-03 02:59:46
211.72.239.243 attack
Mar  2 18:51:40 localhost sshd[73543]: Invalid user laravel from 211.72.239.243 port 35056
Mar  2 18:51:40 localhost sshd[73543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=office2.trunksys.com
Mar  2 18:51:40 localhost sshd[73543]: Invalid user laravel from 211.72.239.243 port 35056
Mar  2 18:51:42 localhost sshd[73543]: Failed password for invalid user laravel from 211.72.239.243 port 35056 ssh2
Mar  2 19:00:51 localhost sshd[74428]: Invalid user cod from 211.72.239.243 port 42750
...
2020-03-03 03:06:06
118.32.217.60 attackbots
Unauthorized connection attempt detected from IP address 118.32.217.60 to port 8080 [J]
2020-03-03 03:03:29
14.226.235.19 attackbotsspam
2020-03-0214:31:441j8lAK-000891-G3\<=info@whatsup2013.chH=\(localhost\)[220.180.123.198]:40333P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3040id=887ec89b90bb91990500b61afd09233fd1f526@whatsup2013.chT="RecentlikefromTel"forwes.flickinger@yahoo.comaaronh63097@gmail.com2020-03-0214:32:511j8lBi-0008H3-8x\<=info@whatsup2013.chH=\(localhost\)[183.89.212.170]:56408P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3078id=a267d18289a288801c19af03e4103a26d354cb@whatsup2013.chT="fromRyleytolakshaysangwan17"forlakshaysangwan17@gmail.comluisearebalo@gmail.com2020-03-0214:32:581j8lBq-0008KD-2V\<=info@whatsup2013.chH=\(localhost\)[14.226.235.19]:34153P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3044id=2a72c4979cb79d95090cba16f1052f3384552d@whatsup2013.chT="fromSeratomlkane600"formlkane600@hotmail.comleebuddy1@msn.com2020-03-0214:30:491j8l9k-00087k-Ne\<=info@whatsup2013.chH=171-103-139-8
2020-03-03 03:11:16
14.177.150.18 attack
2020-03-0214:31:441j8lAK-000891-G3\<=info@whatsup2013.chH=\(localhost\)[220.180.123.198]:40333P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3040id=887ec89b90bb91990500b61afd09233fd1f526@whatsup2013.chT="RecentlikefromTel"forwes.flickinger@yahoo.comaaronh63097@gmail.com2020-03-0214:32:511j8lBi-0008H3-8x\<=info@whatsup2013.chH=\(localhost\)[183.89.212.170]:56408P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3078id=a267d18289a288801c19af03e4103a26d354cb@whatsup2013.chT="fromRyleytolakshaysangwan17"forlakshaysangwan17@gmail.comluisearebalo@gmail.com2020-03-0214:32:581j8lBq-0008KD-2V\<=info@whatsup2013.chH=\(localhost\)[14.226.235.19]:34153P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3044id=2a72c4979cb79d95090cba16f1052f3384552d@whatsup2013.chT="fromSeratomlkane600"formlkane600@hotmail.comleebuddy1@msn.com2020-03-0214:30:491j8l9k-00087k-Ne\<=info@whatsup2013.chH=171-103-139-8
2020-03-03 03:11:44
221.221.138.218 attack
Fail2Ban Ban Triggered
2020-03-03 02:39:49
35.195.189.67 attack
Unauthorized connection attempt detected from IP address 35.195.189.67 to port 873 [J]
2020-03-03 02:36:41
181.94.68.180 attackspam
Unauthorized connection attempt detected from IP address 181.94.68.180 to port 23 [J]
2020-03-03 02:43:58
176.119.28.197 attack
Unauthorized connection attempt detected from IP address 176.119.28.197 to port 23 [J]
2020-03-03 02:44:58
117.157.15.27 attackbotsspam
Unauthorized connection attempt detected from IP address 117.157.15.27 to port 1433 [J]
2020-03-03 02:48:27
37.49.227.202 attackbotsspam
Unauthorized connection attempt detected from IP address 37.49.227.202 to port 81 [J]
2020-03-03 02:35:47
183.89.212.170 attackspambots
2020-03-0214:31:441j8lAK-000891-G3\<=info@whatsup2013.chH=\(localhost\)[220.180.123.198]:40333P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3040id=887ec89b90bb91990500b61afd09233fd1f526@whatsup2013.chT="RecentlikefromTel"forwes.flickinger@yahoo.comaaronh63097@gmail.com2020-03-0214:32:511j8lBi-0008H3-8x\<=info@whatsup2013.chH=\(localhost\)[183.89.212.170]:56408P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3078id=a267d18289a288801c19af03e4103a26d354cb@whatsup2013.chT="fromRyleytolakshaysangwan17"forlakshaysangwan17@gmail.comluisearebalo@gmail.com2020-03-0214:32:581j8lBq-0008KD-2V\<=info@whatsup2013.chH=\(localhost\)[14.226.235.19]:34153P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3044id=2a72c4979cb79d95090cba16f1052f3384552d@whatsup2013.chT="fromSeratomlkane600"formlkane600@hotmail.comleebuddy1@msn.com2020-03-0214:30:491j8l9k-00087k-Ne\<=info@whatsup2013.chH=171-103-139-8
2020-03-03 03:10:36
223.10.247.196 attackspambots
Unauthorized connection attempt detected from IP address 223.10.247.196 to port 23 [J]
2020-03-03 02:38:43
185.143.223.171 attackspam
Mar  2 19:56:24 grey postfix/smtpd\[7315\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.171\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.171\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.171\]\; from=\<5y645weddntvgk@dumdee.com\> to=\ proto=ESMTP helo=\<\[185.143.223.170\]\>Mar  2 19:56:24 grey postfix/smtpd\[7315\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.171\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.171\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.171\]\; from=\<5y645weddntvgk@dumdee.com\> to=\ proto=ESMTP helo=\<\[185.143.223.170\]\>Mar  2 19:56:24 grey postfix/smtpd\[7315\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.171\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.171\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.171\]\; from=\<5y645weddntvgk@dumdee.com
...
2020-03-03 03:14:39
158.69.110.31 attack
Mar  2 17:47:21 vpn01 sshd[4168]: Failed password for root from 158.69.110.31 port 36470 ssh2
...
2020-03-03 03:04:16

Recently Reported IPs

180.250.82.3 209.141.59.69 5.167.67.218 5.167.67.150
5.167.67.156 5.167.67.133 5.167.67.251 5.167.67.176
189.45.78.175 137.226.45.169 137.226.45.227 137.226.46.214
137.226.46.246 137.226.47.5 137.226.47.109 216.151.138.151
216.151.138.191 216.152.249.10 216.151.138.227 137.226.72.170