Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Singapore

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
157.245.149.219 attackbotsspam
157.245.149.219 - - [07/May/2020:16:59:51 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [07/May/2020:16:59:53 +0200] "POST /wp-login.php HTTP/1.1" 200 5953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [07/May/2020:16:59:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-05-08 01:17:37
157.245.149.127 attack
$f2bV_matches
2020-04-21 03:08:58
157.245.149.219 attackspambots
157.245.149.219 - - [10/Apr/2020:10:23:21 +0200] "GET /wp-login.php HTTP/1.1" 200 6463 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [10/Apr/2020:10:23:23 +0200] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.149.219 - - [10/Apr/2020:10:23:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-04-10 17:14:16
157.245.149.219 attack
CMS (WordPress or Joomla) login attempt.
2020-04-05 13:08:26
157.245.149.219 attackspambots
Automatic report - XMLRPC Attack
2020-02-27 06:22:26
157.245.149.5 attackspam
Feb 11 10:03:14 v22018076622670303 sshd\[29636\]: Invalid user yrd from 157.245.149.5 port 55568
Feb 11 10:03:14 v22018076622670303 sshd\[29636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5
Feb 11 10:03:16 v22018076622670303 sshd\[29636\]: Failed password for invalid user yrd from 157.245.149.5 port 55568 ssh2
...
2020-02-11 17:39:03
157.245.149.110 attackbots
Feb  3 02:42:37 firewall sshd[23656]: Failed password for invalid user foswiki from 157.245.149.110 port 45478 ssh2
Feb  3 02:45:57 firewall sshd[23787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.110  user=root
Feb  3 02:45:59 firewall sshd[23787]: Failed password for root from 157.245.149.110 port 53094 ssh2
...
2020-02-03 14:41:38
157.245.149.110 attackspam
$f2bV_matches
2020-02-02 19:28:13
157.245.149.241 attackspam
RDP Bruteforce
2020-01-29 16:09:40
157.245.149.5 attack
$f2bV_matches
2020-01-26 02:59:12
157.245.149.5 attackspam
Unauthorized connection attempt detected from IP address 157.245.149.5 to port 2220 [J]
2020-01-25 15:14:43
157.245.149.5 attackbotsspam
Jan 22 23:48:42 hcbbdb sshd\[31125\]: Invalid user alejandro from 157.245.149.5
Jan 22 23:48:42 hcbbdb sshd\[31125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5
Jan 22 23:48:44 hcbbdb sshd\[31125\]: Failed password for invalid user alejandro from 157.245.149.5 port 53226 ssh2
Jan 22 23:50:59 hcbbdb sshd\[31468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.5  user=root
Jan 22 23:51:01 hcbbdb sshd\[31468\]: Failed password for root from 157.245.149.5 port 45358 ssh2
2020-01-23 08:16:00
157.245.149.5 attackspambots
Unauthorized connection attempt detected from IP address 157.245.149.5 to port 2220 [J]
2020-01-22 05:23:50
157.245.149.93 attackbots
xmlrpc attack
2019-12-04 13:14:35
157.245.149.124 attackbots
Nov  5 17:37:28 icinga sshd[24535]: Failed password for root from 157.245.149.124 port 59272 ssh2
Nov  5 17:42:02 icinga sshd[25018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.149.124
...
2019-11-06 04:06:08
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.149.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50800
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.149.85.			IN	A

;; AUTHORITY SECTION:
.			122	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061102 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 12 08:18:24 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 85.149.245.157.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 85.149.245.157.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
188.92.77.12 attack
SSH Brute-Force reported by Fail2Ban
2019-08-04 13:40:59
171.229.153.111 attackbotsspam
Aug  4 03:47:40 srv-4 sshd\[23337\]: Invalid user admin from 171.229.153.111
Aug  4 03:47:40 srv-4 sshd\[23337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.229.153.111
Aug  4 03:47:42 srv-4 sshd\[23337\]: Failed password for invalid user admin from 171.229.153.111 port 51768 ssh2
...
2019-08-04 13:26:52
31.41.154.18 attack
Invalid user apps from 31.41.154.18 port 42302
2019-08-04 13:51:37
176.221.2.59 attackbotsspam
Honeypot attack, port: 23, PTR: PTR record not found
2019-08-04 13:25:13
177.87.68.239 attackspambots
$f2bV_matches
2019-08-04 13:57:18
81.22.45.29 attack
Port scan on 13 port(s): 9128 9187 9226 9302 9319 9337 9399 9569 9643 9737 9747 9810 9828
2019-08-04 14:13:09
131.0.245.2 attack
SSH bruteforce (Triggered fail2ban)
2019-08-04 14:27:51
37.187.127.201 attack
Aug  4 06:13:50 *** sshd[24574]: Invalid user readonly from 37.187.127.201
2019-08-04 14:22:26
106.12.78.161 attack
Aug  4 00:47:31 unicornsoft sshd\[22423\]: User root from 106.12.78.161 not allowed because not listed in AllowUsers
Aug  4 00:47:31 unicornsoft sshd\[22423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.161  user=root
Aug  4 00:47:33 unicornsoft sshd\[22423\]: Failed password for invalid user root from 106.12.78.161 port 59190 ssh2
2019-08-04 13:39:51
171.118.73.15 attackspam
SSH-BruteForce
2019-08-04 14:07:21
188.166.34.129 attackspam
Invalid user hduser from 188.166.34.129 port 53078
2019-08-04 13:43:10
110.156.98.93 attack
Honeypot attack, port: 23, PTR: PTR record not found
2019-08-04 13:24:07
62.110.229.5 attack
Automatic report - Port Scan Attack
2019-08-04 13:23:16
218.161.23.152 attack
Aug  4 02:39:13 h2022099 sshd[5890]: Invalid user admin from 218.161.23.152
Aug  4 02:39:13 h2022099 sshd[5890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218-161-23-152.hinet-ip.hinet.net 
Aug  4 02:39:15 h2022099 sshd[5890]: Failed password for invalid user admin from 218.161.23.152 port 1285 ssh2
Aug  4 02:39:17 h2022099 sshd[5890]: Failed password for invalid user admin from 218.161.23.152 port 1285 ssh2
Aug  4 02:39:19 h2022099 sshd[5890]: Failed password for invalid user admin from 218.161.23.152 port 1285 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=218.161.23.152
2019-08-04 14:03:17
129.144.9.88 attack
Jan  3 10:49:51 motanud sshd\[26431\]: Invalid user teamspeak from 129.144.9.88 port 48527
Jan  3 10:49:51 motanud sshd\[26431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.144.9.88
Jan  3 10:49:53 motanud sshd\[26431\]: Failed password for invalid user teamspeak from 129.144.9.88 port 48527 ssh2
2019-08-04 14:36:55

Recently Reported IPs

180.250.82.3 209.141.59.69 5.167.67.218 5.167.67.150
5.167.67.156 5.167.67.133 5.167.67.251 5.167.67.176
189.45.78.175 137.226.45.169 137.226.45.227 137.226.46.214
137.226.46.246 137.226.47.5 137.226.47.109 216.151.138.151
216.151.138.191 216.152.249.10 216.151.138.227 137.226.72.170