Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
157.245.42.25 attack
Scan port
2022-09-26 12:24:49
157.245.45.99 attackspambots
Fail2Ban Ban Triggered
2020-08-30 17:44:47
157.245.43.135 attackspam
port scan and connect, tcp 8000 (http-alt)
2020-08-29 02:00:12
157.245.40.76 attack
Automatic report generated by Wazuh
2020-08-25 13:55:25
157.245.42.253 attack
157.245.42.253 - - [23/Aug/2020:15:07:54 +0200] "GET /wp-login.php HTTP/1.1" 200 8691 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.42.253 - - [23/Aug/2020:15:08:00 +0200] "POST /wp-login.php HTTP/1.1" 200 8921 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.42.253 - - [23/Aug/2020:15:08:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-24 02:28:43
157.245.42.253 attackspambots
[Wed Aug 19 11:43:40.116539 2020] [php7:error] [pid 1400] [client 157.245.42.253:51238] script /Library/Server/Web/Data/Sites/interfaithministryservices.com/wp-login.php not found or unable to stat, referer: http://reverendrhonda.com/wp-login.php
2020-08-20 01:51:48
157.245.43.52 attackbotsspam
SSH/22 MH Probe, BF, Hack -
2020-08-17 15:27:58
157.245.40.76 attackspam
157.245.40.76 - - [16/Aug/2020:13:50:13 +0100] "POST /wp-login.php HTTP/1.1" 200 2264 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.40.76 - - [16/Aug/2020:13:50:18 +0100] "POST /wp-login.php HTTP/1.1" 200 2195 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.40.76 - - [16/Aug/2020:13:50:23 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-17 00:14:10
157.245.42.253 attackspambots
157.245.42.253 - - [15/Aug/2020:15:42:24 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.42.253 - - [15/Aug/2020:15:42:26 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.42.253 - - [15/Aug/2020:15:42:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-15 22:08:31
157.245.42.253 attackspambots
157.245.42.253 - - \[07/Aug/2020:14:08:23 +0200\] "POST /wp-login.php HTTP/1.0" 200 6462 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
157.245.42.253 - - \[07/Aug/2020:14:08:34 +0200\] "POST /wp-login.php HTTP/1.0" 200 6431 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
157.245.42.253 - - \[07/Aug/2020:14:08:35 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-08-07 20:32:16
157.245.40.76 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-07-31 18:37:44
157.245.48.44 attackspambots
ET COMPROMISED Known Compromised or Hostile Host Traffic group 9 - port: 22 proto: tcp cat: Misc Attackbytes: 60
2020-07-30 15:50:21
157.245.40.76 attackbotsspam
157.245.40.76 has been banned for [WebApp Attack]
...
2020-07-30 14:53:13
157.245.42.253 attackspam
157.245.42.253 - - [29/Jul/2020:13:54:43 +0200] "POST /xmlrpc.php HTTP/1.1" 403 10684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.42.253 - - [29/Jul/2020:14:12:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 20980 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-29 21:45:25
157.245.40.76 attackspambots
Attempt to hack Wordpress Login, XMLRPC or other login
2020-07-28 14:32:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.4.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6663
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.4.53.			IN	A

;; AUTHORITY SECTION:
.			564	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400

;; Query time: 49 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 03:41:15 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 53.4.245.157.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 53.4.245.157.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
95.187.221.32 attackbots
20/9/15@15:00:59: FAIL: Alarm-Network address from=95.187.221.32
...
2020-09-16 05:13:55
164.90.229.36 attack
Automatic report - Banned IP Access
2020-09-16 05:05:20
125.31.189.245 attackbots
Sep 15 22:02:42 root sshd[16971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.31.189.245  user=root
Sep 15 22:02:45 root sshd[16971]: Failed password for root from 125.31.189.245 port 35112 ssh2
...
2020-09-16 05:19:53
189.112.123.157 attack
Unauthorized connection attempt from IP address 189.112.123.157 on Port 445(SMB)
2020-09-16 04:56:50
81.68.128.31 attack
prod6
...
2020-09-16 05:15:57
150.109.57.43 attack
Sep 15 19:49:12 vlre-nyc-1 sshd\[26211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.57.43  user=root
Sep 15 19:49:14 vlre-nyc-1 sshd\[26211\]: Failed password for root from 150.109.57.43 port 52454 ssh2
Sep 15 19:55:27 vlre-nyc-1 sshd\[26336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.57.43  user=root
Sep 15 19:55:29 vlre-nyc-1 sshd\[26336\]: Failed password for root from 150.109.57.43 port 46724 ssh2
Sep 15 19:57:40 vlre-nyc-1 sshd\[26376\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.57.43  user=root
...
2020-09-16 04:54:26
112.85.42.67 attackspam
September 15 2020, 16:58:26 [sshd] - Banned from the Mad Pony WordPress hosting platform by Fail2ban.
2020-09-16 05:05:59
2804:14d:5c50:815f:291b:894:b287:7164 attackbots
Wordpress attack
2020-09-16 04:58:55
178.207.242.216 attack
Unauthorized connection attempt from IP address 178.207.242.216 on Port 445(SMB)
2020-09-16 05:02:25
187.60.95.193 attack
2020-09-15T19:01:01.735781Z d79f2ab476e9 New connection: 187.60.95.193:53276 (172.17.0.2:2222) [session: d79f2ab476e9]
2020-09-15T19:01:24.076568Z 6a7a3a5740d5 New connection: 187.60.95.193:53536 (172.17.0.2:2222) [session: 6a7a3a5740d5]
2020-09-16 05:06:50
190.145.162.138 attack
Sep 14 18:36:41 cumulus sshd[26418]: Invalid user file from 190.145.162.138 port 46101
Sep 14 18:36:41 cumulus sshd[26418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.162.138
Sep 14 18:36:43 cumulus sshd[26418]: Failed password for invalid user file from 190.145.162.138 port 46101 ssh2
Sep 14 18:36:43 cumulus sshd[26418]: Received disconnect from 190.145.162.138 port 46101:11: Bye Bye [preauth]
Sep 14 18:36:43 cumulus sshd[26418]: Disconnected from 190.145.162.138 port 46101 [preauth]
Sep 14 18:44:45 cumulus sshd[27204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.162.138  user=r.r
Sep 14 18:44:47 cumulus sshd[27204]: Failed password for r.r from 190.145.162.138 port 46210 ssh2
Sep 14 18:44:47 cumulus sshd[27204]: Received disconnect from 190.145.162.138 port 46210:11: Bye Bye [preauth]
Sep 14 18:44:47 cumulus sshd[27204]: Disconnected from 190.145.162.138 port 46210........
-------------------------------
2020-09-16 05:12:26
165.22.69.147 attackbotsspam
Sep 15 23:23:50 ns381471 sshd[5421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.69.147
Sep 15 23:23:53 ns381471 sshd[5421]: Failed password for invalid user ubnt from 165.22.69.147 port 37650 ssh2
2020-09-16 05:24:48
193.228.91.123 attack
Failed password for invalid user from 193.228.91.123 port 50288 ssh2
2020-09-16 05:06:16
36.110.228.254 attack
Sep 15 19:00:38 h2646465 sshd[5270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.110.228.254  user=root
Sep 15 19:00:40 h2646465 sshd[5270]: Failed password for root from 36.110.228.254 port 63892 ssh2
Sep 15 19:00:43 h2646465 sshd[5270]: Failed password for root from 36.110.228.254 port 63892 ssh2
Sep 15 19:00:38 h2646465 sshd[5270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.110.228.254  user=root
Sep 15 19:00:40 h2646465 sshd[5270]: Failed password for root from 36.110.228.254 port 63892 ssh2
Sep 15 19:00:43 h2646465 sshd[5270]: Failed password for root from 36.110.228.254 port 63892 ssh2
Sep 15 19:00:38 h2646465 sshd[5270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.110.228.254  user=root
Sep 15 19:00:40 h2646465 sshd[5270]: Failed password for root from 36.110.228.254 port 63892 ssh2
Sep 15 19:00:43 h2646465 sshd[5270]: Failed password for root from 36.110.228.254
2020-09-16 05:24:31
64.202.189.187 attackbotsspam
64.202.189.187 - - [15/Sep/2020:19:00:54 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.202.189.187 - - [15/Sep/2020:19:00:59 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.202.189.187 - - [15/Sep/2020:19:01:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-16 05:08:32

Recently Reported IPs

157.245.245.215 157.245.255.195 157.245.81.59 157.245.60.57
157.245.78.177 157.245.78.178 157.245.75.7 157.245.99.89
157.90.108.234 157.90.105.112 157.90.129.108 157.90.108.244
157.90.171.125 157.90.205.234 157.90.209.248 157.90.223.105
157.90.10.9 157.90.220.207 157.90.241.85 157.90.214.237