157.245.42.142

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
157.245.42.25	attack	Scan port	2022-09-26 12:24:49
157.245.42.253	attack	157.245.42.253 - - [23/Aug/2020:15:07:54 +0200] "GET /wp-login.php HTTP/1.1" 200 8691 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - [23/Aug/2020:15:08:00 +0200] "POST /wp-login.php HTTP/1.1" 200 8921 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - [23/Aug/2020:15:08:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-24 02:28:43
157.245.42.253	attackspambots	[Wed Aug 19 11:43:40.116539 2020] [php7:error] [pid 1400] [client 157.245.42.253:51238] script /Library/Server/Web/Data/Sites/interfaithministryservices.com/wp-login.php not found or unable to stat, referer: http://reverendrhonda.com/wp-login.php	2020-08-20 01:51:48
157.245.42.253	attackspambots	157.245.42.253 - - [15/Aug/2020:15:42:24 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - [15/Aug/2020:15:42:26 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - [15/Aug/2020:15:42:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-15 22:08:31
157.245.42.253	attackspambots	157.245.42.253 - - \[07/Aug/2020:14:08:23 +0200\] "POST /wp-login.php HTTP/1.0" 200 6462 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 157.245.42.253 - - \[07/Aug/2020:14:08:34 +0200\] "POST /wp-login.php HTTP/1.0" 200 6431 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 157.245.42.253 - - \[07/Aug/2020:14:08:35 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-08-07 20:32:16
157.245.42.253	attackspam	157.245.42.253 - - [29/Jul/2020:13:54:43 +0200] "POST /xmlrpc.php HTTP/1.1" 403 10684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - [29/Jul/2020:14:12:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 20980 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-29 21:45:25
157.245.42.253	attackspam	Automatic report - Banned IP Access	2020-07-21 12:20:11
157.245.42.253	attackspambots	xmlrpc attack	2020-06-15 17:10:59
157.245.42.253	attackspambots	Attempt to log in with non-existing username	2020-05-17 04:18:58
157.245.42.253	attackspam	Apr 29 19:45:56 wordpress[]: XML-RPC authentication failure [host:] [remote:157.245.42.253] May 1 00:43:19 wordpress[]: blocked authentication attempt for [] [host:] [remote:157.245.42.253] May 1 14:17:26 wordpress[]: blocked authentication attempt for [] [host:] [remote:157.245.42.253] May 2 00:22:55 wordpress[]: blocked authentication attempt for [] [host:] [remote:157.245.42.253] May 2 14:49:42 wordpress[]: XML-RPC authentication failure [host:] [remote:157.245.42.253] May 3 14:06:56 wordpress[]: authentication attempt for unknown user []] [host:] [remote:157.245.42.253] May 3 14:06:56 wordpress[]: XML-RPC authentication failure [host:] [remote:157.245.42.253]	2020-05-04 02:30:49
157.245.42.253	attack	05/03/2020-08:37:19.081794 157.245.42.253 Protocol: 6 ET POLICY Cleartext WordPress Login	2020-05-03 17:25:46
157.245.42.253	attackbots	157.245.42.253 - - \[21/Apr/2020:21:48:26 +0200\] "POST /wp-login.php HTTP/1.0" 200 6811 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 157.245.42.253 - - \[21/Apr/2020:21:48:37 +0200\] "POST /wp-login.php HTTP/1.0" 200 6626 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 157.245.42.253 - - \[21/Apr/2020:21:48:43 +0200\] "POST /wp-login.php HTTP/1.0" 200 6623 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-04-22 06:14:15
157.245.42.253	attackspam	157.245.42.253 - - [28/Mar/2020:15:42:51 +0300] "POST /wp-login.php HTTP/1.1" 200 2790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-03-28 23:51:58
157.245.42.171	attackspambots	Sep 16 01:14:01 nextcloud sshd\[6673\]: Invalid user dev from 157.245.42.171 Sep 16 01:14:01 nextcloud sshd\[6673\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.42.171 Sep 16 01:14:02 nextcloud sshd\[6673\]: Failed password for invalid user dev from 157.245.42.171 port 55994 ssh2 ...	2019-09-16 13:28:34
157.245.42.171	attack	Sep 15 19:04:14 [host] sshd[18805]: Invalid user ian from 157.245.42.171 Sep 15 19:04:14 [host] sshd[18805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.42.171 Sep 15 19:04:15 [host] sshd[18805]: Failed password for invalid user ian from 157.245.42.171 port 34738 ssh2	2019-09-16 04:03:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.42.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51940
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.42.142.			IN	A

;; AUTHORITY SECTION:
.			149	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 18:31:53 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 142.42.245.157.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.42.245.157.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
80.245.115.153	attack	Request: "GET / HTTP/1.1"	2019-06-22 11:35:09
218.92.0.193	attackbotsspam	2019-06-22T03:02:12.485509Z fb17f61aac73 New connection: 218.92.0.193:3573 (172.17.0.2:2222) [session: fb17f61aac73] 2019-06-22T03:02:36.921989Z 1d8c7de4eb54 New connection: 218.92.0.193:12281 (172.17.0.2:2222) [session: 1d8c7de4eb54]	2019-06-22 12:04:00
79.167.182.129	attackspam	Request: "GET / HTTP/1.1"	2019-06-22 11:56:02
51.38.152.200	attackbotsspam	Jun 21 21:36:11 [munged] sshd[2478]: Invalid user mpiuser from 51.38.152.200 port 34465 Jun 21 21:36:11 [munged] sshd[2478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.152.200	2019-06-22 11:26:44
45.115.176.254	attack	Request: "GET / HTTP/1.1"	2019-06-22 11:31:56
164.132.54.215	attackbotsspam	Jun 21 21:31:58 MainVPS sshd[28160]: Invalid user deploy from 164.132.54.215 port 47268 Jun 21 21:31:58 MainVPS sshd[28160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.54.215 Jun 21 21:31:58 MainVPS sshd[28160]: Invalid user deploy from 164.132.54.215 port 47268 Jun 21 21:32:00 MainVPS sshd[28160]: Failed password for invalid user deploy from 164.132.54.215 port 47268 ssh2 Jun 21 21:35:20 MainVPS sshd[28376]: Invalid user samba from 164.132.54.215 port 56764 ...	2019-06-22 11:55:19
178.168.146.30	attackspam	Bad Request: "GET / HTTP/1.0"	2019-06-22 11:47:41
128.14.166.72	attack	Bad Request: "HEAD / HTTP/1.1"	2019-06-22 12:07:38
64.90.186.102	attackspam	Request: "GET /user/register/ HTTP/1.1" Request: "GET /user/register/ HTTP/1.1" Request: "GET /user/register/ HTTP/1.1" Request: "GET /user/register/ HTTP/1.1" Request: "GET /user/register/ HTTP/1.1" Request: "GET /user/register/ HTTP/1.1" Request: "GET /user/register/ HTTP/1.1"	2019-06-22 11:52:00
218.92.0.156	attackbotsspam	$f2bV_matches	2019-06-22 12:00:52
192.198.90.198	attackbots	Request: "GET /wp-content/themes/twentyfourteen/404.php HTTP/1.1" Request: "GET /wp-content/themes/twentyfourteen/404.php HTTP/1.1" Request: "GET /wp-content/plugins/media-admin.php HTTP/1.1"	2019-06-22 12:10:14
178.122.94.205	attackspam	Request: "GET /server/login HTTP/2.0" Request: "GET /favicon.ico HTTP/2.0" Request: "GET /server/login?lastpage= HTTP/1.1"	2019-06-22 12:05:03
216.218.206.67	attackspambots	GET / HTTP/1.1	2019-06-22 11:34:20
185.234.217.9	attack	[munged]::80 185.234.217.9 - - [22/Jun/2019:05:14:59 +0200] "POST /[munged]: HTTP/1.1" 200 4444 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0" [munged]::80 185.234.217.9 - - [22/Jun/2019:05:14:59 +0200] "POST /[munged]: HTTP/1.1" 200 4444 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0" [munged]::80 185.234.217.9 - - [22/Jun/2019:05:14:59 +0200] "POST /[munged]: HTTP/1.1" 200 4444 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0" [munged]::80 185.234.217.9 - - [22/Jun/2019:05:15:00 +0200] "POST /[munged]: HTTP/1.1" 200 4444 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0" [munged]::80 185.234.217.9 - - [22/Jun/2019:05:15:00 +0200] "POST /[munged]: HTTP/1.1" 200 4444 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0" [munged]::80 185.234.217.9 - - [22/Jun/2019:05:15:00 +0200] "POST /[munged]: HTTP/1.1" 200 4444 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gec	2019-06-22 11:44:58
66.172.211.151	attack	Request: "GET / HTTP/1.1"	2019-06-22 11:50:29

Recently Reported IPs

123.13.17.22	177.38.5.171	159.65.0.116	139.255.58.94
27.45.34.184	217.219.35.105	39.33.14.109	114.203.30.200
135.23.42.79	43.154.74.76	190.97.247.148	164.90.197.2
120.243.99.228	122.116.9.88	79.24.213.106	212.170.195.84
103.166.254.67	111.251.89.95	188.235.36.2	202.107.194.251