157.245.150.217

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
157.245.150.99	attack	Automatic report - WordPress Brute Force	2020-05-04 21:10:22
157.245.150.99	attackbots	157.245.150.99 - - [28/Apr/2020:22:46:19 +0200] "GET /wp-login.php HTTP/1.1" 200 5686 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.150.99 - - [28/Apr/2020:22:46:22 +0200] "POST /wp-login.php HTTP/1.1" 200 5937 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.150.99 - - [28/Apr/2020:22:46:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-29 06:16:29
157.245.150.99	attackspambots	xmlrpc attack	2020-04-16 14:27:40
157.245.150.99	attackspambots	xmlrpc attack	2020-03-22 21:51:36
157.245.150.99	attack	[munged]::443 157.245.150.99 - - [09/Mar/2020:13:26:06 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 157.245.150.99 - - [09/Mar/2020:13:26:10 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 157.245.150.99 - - [09/Mar/2020:13:26:10 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 157.245.150.99 - - [09/Mar/2020:13:26:13 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 157.245.150.99 - - [09/Mar/2020:13:26:13 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 157.245.150.99 - - [09/Mar/2020:13:26:18 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11	2020-03-10 01:50:27
157.245.150.223	attackbotsspam	Unauthorized connection attempt detected from IP address 157.245.150.223 to port 2220 [J]	2020-01-14 15:40:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.150.217
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52315
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.150.217.		IN	A

;; AUTHORITY SECTION:
.			261	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 13:13:57 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 217.150.245.157.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 217.150.245.157.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.70.217.142	attackbots	Nov 6 21:53:05 lcl-usvr-01 sshd[31404]: refused connect from 118.70.217.142 (118.70.217.142) Nov 6 21:53:05 lcl-usvr-01 sshd[31405]: refused connect from 118.70.217.142 (118.70.217.142) Nov 6 22:01:02 lcl-usvr-01 sshd[1185]: refused connect from 118.70.217.142 (118.70.217.142) Nov 6 22:01:02 lcl-usvr-01 sshd[1186]: refused connect from 118.70.217.142 (118.70.217.142)	2019-11-07 05:52:20
104.236.61.100	attack	Nov 6 14:45:52 firewall sshd[6262]: Failed password for invalid user freund from 104.236.61.100 port 47207 ssh2 Nov 6 14:50:10 firewall sshd[6393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.61.100 user=root Nov 6 14:50:11 firewall sshd[6393]: Failed password for root from 104.236.61.100 port 39172 ssh2 ...	2019-11-07 05:51:26
220.249.112.150	attackbotsspam	SSH bruteforce	2019-11-07 05:59:08
118.68.71.60	attackspambots	Unauthorized connection attempt from IP address 118.68.71.60 on Port 445(SMB)	2019-11-07 06:22:00
185.209.0.32	attackspam	firewall-block, port(s): 35700/tcp, 35900/tcp, 36200/tcp, 39000/tcp	2019-11-07 06:13:59
212.64.27.53	attack	Nov 6 18:14:26 ns41 sshd[20368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.27.53	2019-11-07 06:13:39
177.36.200.16	attackbotsspam	Unauthorized connection attempt from IP address 177.36.200.16 on Port 445(SMB)	2019-11-07 05:44:05
222.217.21.64	attackbots	" "	2019-11-07 05:43:25
200.24.255.93	attackspam	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-11-07 06:21:38
183.83.171.54	attack	Unauthorized connection attempt from IP address 183.83.171.54 on Port 445(SMB)	2019-11-07 06:02:03
176.110.126.55	attack	Unauthorized connection attempt from IP address 176.110.126.55 on Port 445(SMB)	2019-11-07 05:56:01
218.92.0.191	attackbotsspam	Nov 6 16:02:49 dcd-gentoo sshd[11530]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 6 16:02:51 dcd-gentoo sshd[11530]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Nov 6 16:02:49 dcd-gentoo sshd[11530]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 6 16:02:51 dcd-gentoo sshd[11530]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Nov 6 16:02:49 dcd-gentoo sshd[11530]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 6 16:02:51 dcd-gentoo sshd[11530]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Nov 6 16:02:51 dcd-gentoo sshd[11530]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 58065 ssh2 ...	2019-11-07 05:59:41
93.34.159.7	attack	Nov 6 15:31:51 server postfix/smtpd[11563]: NOQUEUE: reject: RCPT from 93-34-159-7.ip50.fastwebnet.it[93.34.159.7]: 554 5.7.1 Service unavailable; Client host [93.34.159.7] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/93.34.159.7; from= to= proto=ESMTP helo=<93-34-159-7.ip50.fastwebnet.it>	2019-11-07 05:48:07
111.231.201.103	attackspambots	Nov 6 23:04:09 sd-53420 sshd\[25637\]: Invalid user gatt from 111.231.201.103 Nov 6 23:04:09 sd-53420 sshd\[25637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.201.103 Nov 6 23:04:11 sd-53420 sshd\[25637\]: Failed password for invalid user gatt from 111.231.201.103 port 58148 ssh2 Nov 6 23:08:18 sd-53420 sshd\[26756\]: Invalid user \#EDC@WSX1qaz from 111.231.201.103 Nov 6 23:08:18 sd-53420 sshd\[26756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.201.103 ...	2019-11-07 06:20:58
46.107.230.156	attack	Chat Spam	2019-11-07 05:46:18

Recently Reported IPs

180.121.64.98	177.242.159.47	45.138.74.170	5.135.160.213
177.52.25.7	164.177.60.173	5.160.227.157	45.124.171.145
110.52.195.55	60.170.224.9	41.251.249.88	187.162.59.81
176.104.184.57	76.232.68.33	58.186.216.30	27.131.186.74
178.48.235.133	116.252.235.77	222.128.108.199	36.68.8.140