157.245.42.95 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
157.245.42.25	attack	Scan port	2022-09-26 12:24:49
157.245.42.253	attack	157.245.42.253 - - [23/Aug/2020:15:07:54 +0200] "GET /wp-login.php HTTP/1.1" 200 8691 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - [23/Aug/2020:15:08:00 +0200] "POST /wp-login.php HTTP/1.1" 200 8921 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - [23/Aug/2020:15:08:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-24 02:28:43
157.245.42.253	attackspambots	[Wed Aug 19 11:43:40.116539 2020] [php7:error] [pid 1400] [client 157.245.42.253:51238] script /Library/Server/Web/Data/Sites/interfaithministryservices.com/wp-login.php not found or unable to stat, referer: http://reverendrhonda.com/wp-login.php	2020-08-20 01:51:48
157.245.42.253	attackspambots	157.245.42.253 - - [15/Aug/2020:15:42:24 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - [15/Aug/2020:15:42:26 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - [15/Aug/2020:15:42:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-15 22:08:31
157.245.42.253	attackspambots	157.245.42.253 - - \[07/Aug/2020:14:08:23 +0200\] "POST /wp-login.php HTTP/1.0" 200 6462 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - \[07/Aug/2020:14:08:34 +0200\] "POST /wp-login.php HTTP/1.0" 200 6431 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - \[07/Aug/2020:14:08:35 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-08-07 20:32:16
157.245.42.253	attackspam	157.245.42.253 - - [29/Jul/2020:13:54:43 +0200] "POST /xmlrpc.php HTTP/1.1" 403 10684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - [29/Jul/2020:14:12:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 20980 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-29 21:45:25
157.245.42.253	attackspam	Automatic report - Banned IP Access	2020-07-21 12:20:11
157.245.42.253	attackspambots	xmlrpc attack	2020-06-15 17:10:59
157.245.42.253	attackspambots	Attempt to log in with non-existing username	2020-05-17 04:18:58
157.245.42.253	attackspam	Apr 29 19:45:56 wordpress[]: XML-RPC authentication failure [host:] [remote:157.245.42.253] May 1 00:43:19 wordpress[]: blocked authentication attempt for [] [host:] [remote:157.245.42.253] May 1 14:17:26 wordpress[]: blocked authentication attempt for [] [host:] [remote:157.245.42.253] May 2 00:22:55 wordpress[]: blocked authentication attempt for [] [host:] [remote:157.245.42.253] May 2 14:49:42 wordpress[]: XML-RPC authentication failure [host:] [remote:157.245.42.253] May 3 14:06:56 wordpress[]: authentication attempt for unknown user []] [host:] [remote:157.245.42.253] May 3 14:06:56 wordpress[]: XML-RPC authentication failure [host:] [remote:157.245.42.253]	2020-05-04 02:30:49
157.245.42.253	attack	05/03/2020-08:37:19.081794 157.245.42.253 Protocol: 6 ET POLICY Cleartext WordPress Login	2020-05-03 17:25:46
157.245.42.253	attackbots	157.245.42.253 - - \[21/Apr/2020:21:48:26 +0200\] "POST /wp-login.php HTTP/1.0" 200 6811 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - \[21/Apr/2020:21:48:37 +0200\] "POST /wp-login.php HTTP/1.0" 200 6626 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 157.245.42.253 - - \[21/Apr/2020:21:48:43 +0200\] "POST /wp-login.php HTTP/1.0" 200 6623 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-04-22 06:14:15
157.245.42.253	attackspam	157.245.42.253 - - [28/Mar/2020:15:42:51 +0300] "POST /wp-login.php HTTP/1.1" 200 2790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-03-28 23:51:58
157.245.42.171	attackspambots	Sep 16 01:14:01 nextcloud sshd\[6673\]: Invalid user dev from 157.245.42.171 Sep 16 01:14:01 nextcloud sshd\[6673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.42.171 Sep 16 01:14:02 nextcloud sshd\[6673\]: Failed password for invalid user dev from 157.245.42.171 port 55994 ssh2 ...	2019-09-16 13:28:34
157.245.42.171	attack	Sep 15 19:04:14 [host] sshd[18805]: Invalid user ian from 157.245.42.171 Sep 15 19:04:14 [host] sshd[18805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.42.171 Sep 15 19:04:15 [host] sshd[18805]: Failed password for invalid user ian from 157.245.42.171 port 34738 ssh2	2019-09-16 04:03:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.42.95
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26312
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.42.95.			IN	A

;; AUTHORITY SECTION:
.			226	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 76 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 13:28:56 CST 2022
;; MSG SIZE  rcvd: 106

Host info

95.42.245.157.in-addr.arpa domain name pointer cloud.mileagehost.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
95.42.245.157.in-addr.arpa	name = cloud.mileagehost.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
42.52.0.160	attackbots	Seq 2995002506	2019-08-22 15:14:44
122.142.29.61	attack	Seq 2995002506	2019-08-22 15:28:13
119.115.51.178	attackbots	Seq 2995002506	2019-08-22 14:54:36
61.137.148.108	attackbots	Seq 2995002506	2019-08-22 15:11:39
114.235.2.170	attack	Seq 2995002506	2019-08-22 15:02:30
119.50.141.245	attackspam	Seq 2995002506	2019-08-22 15:34:05
123.190.186.149	attackbots	Seq 2995002506	2019-08-22 14:49:07
222.187.175.165	attack	Seq 2995002506	2019-08-22 15:18:55
42.237.223.10	attack	Seq 2995002506	2019-08-22 15:13:09
175.165.161.87	attack	Seq 2995002506	2019-08-22 15:24:54
60.6.157.214	attack	Seq 2995002506	2019-08-22 15:12:14
218.19.158.231	attack	Seq 2995002506	2019-08-22 15:20:52
221.182.20.248	attackbots	Seq 2995002506	2019-08-22 15:20:11
42.200.130.155	attackspam	Splunk® : port scan detected: Aug 22 00:40:06 testbed kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=42.200.130.155 DST=104.248.11.191 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=62698 PROTO=TCP SPT=10115 DPT=52869 WINDOW=44295 RES=0x00 SYN URGP=0	2019-08-22 15:14:21
175.169.158.39	attackspam	Seq 2995002506	2019-08-22 14:46:21

Recently Reported IPs

157.245.32.21	157.245.38.180	157.245.4.227	157.245.42.82
157.245.42.94	157.245.33.27	157.245.33.156	157.245.38.152
157.245.47.159	157.245.46.249	157.245.48.221	157.245.56.250
157.245.56.91	157.245.53.42	157.245.47.175	157.245.56.150
157.245.63.51	157.245.53.173	157.245.65.101	157.245.66.73