157.245.48.18 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
157.245.48.44	attackspambots	ET COMPROMISED Known Compromised or Hostile Host Traffic group 9 - port: 22 proto: tcp cat: Misc Attackbytes: 60	2020-07-30 15:50:21
157.245.48.44	attack	$f2bV_matches	2020-07-25 04:53:00
157.245.48.44	attackspam	TCP ports : 22 / 2211 / 7788 / 7997 / 8877 / 8899 / 9988 / 40022	2020-07-11 18:28:12
157.245.48.116	attack	UTC: 2019-12-25 port: 123/udp	2019-12-26 14:24:03

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.48.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35412
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.48.18.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 07:28:27 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 18.48.245.157.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 18.48.245.157.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.77.237.167	attackspam	CMS (WordPress or Joomla) login attempt.	2020-03-08 19:42:24
129.226.134.112	attackspam	Feb 9 06:56:12 ms-srv sshd[1519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.134.112 Feb 9 06:56:14 ms-srv sshd[1519]: Failed password for invalid user oie from 129.226.134.112 port 37892 ssh2	2020-03-08 19:24:02
195.54.166.249	attackspambots	Mar 8 12:16:19 debian-2gb-nbg1-2 kernel: \[5925336.139231\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.166.249 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=9988 PROTO=TCP SPT=58557 DPT=49695 WINDOW=1024 RES=0x00 SYN URGP=0	2020-03-08 19:37:29
54.38.36.56	attack	k+ssh-bruteforce	2020-03-08 19:11:38
109.229.248.206	attackspambots	Unauthorised access (Mar 8) SRC=109.229.248.206 LEN=40 PREC=0x20 TTL=53 ID=27908 TCP DPT=8080 WINDOW=15616 SYN	2020-03-08 19:24:47
104.168.218.121	attackspam	Mar 8 01:14:27 hanapaa sshd\[19640\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.218.121 user=root Mar 8 01:14:29 hanapaa sshd\[19640\]: Failed password for root from 104.168.218.121 port 36299 ssh2 Mar 8 01:18:57 hanapaa sshd\[20049\]: Invalid user test2 from 104.168.218.121 Mar 8 01:18:57 hanapaa sshd\[20049\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.218.121 Mar 8 01:18:59 hanapaa sshd\[20049\]: Failed password for invalid user test2 from 104.168.218.121 port 35152 ssh2	2020-03-08 19:21:07
190.64.204.140	attack	Mar 8 06:42:05 ift sshd\[44225\]: Failed password for root from 190.64.204.140 port 39148 ssh2Mar 8 06:46:20 ift sshd\[44762\]: Invalid user user from 190.64.204.140Mar 8 06:46:22 ift sshd\[44762\]: Failed password for invalid user user from 190.64.204.140 port 55302 ssh2Mar 8 06:50:32 ift sshd\[46301\]: Invalid user smmsp from 190.64.204.140Mar 8 06:50:34 ift sshd\[46301\]: Failed password for invalid user smmsp from 190.64.204.140 port 43227 ssh2 ...	2020-03-08 19:11:19
182.110.16.227	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-08 19:23:03
194.146.50.58	attack	Mar 8 05:50:13 grey postfix/smtpd\[1176\]: NOQUEUE: reject: RCPT from stale.isefardi.com\[194.146.50.58\]: 554 5.7.1 Service unavailable\; Client host \[194.146.50.58\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[194.146.50.58\]\; from=\ to=\ proto=ESMTP helo=\Mar 8 05:50:13 grey postfix/smtpd\[1336\]: NOQUEUE: reject: RCPT from stale.isefardi.com\[194.146.50.58\]: 554 5.7.1 Service unavailable\; Client host \[194.146.50.58\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[194.146.50.58\]\; from=\ to=\ proto=ESMTP helo=\Mar 8 05:50:13 grey postfix/smtpd\[28174\]: NOQUEUE: reject: RCPT from stale.isefardi.com\[194.146.50.58\]: 554 5.7.1 Service unavailable\; Client host \[194.146.50.58\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[194.146.50.58\]\; from=\	2020-03-08 19:22:46
58.246.68.6	attack	Mar 8 11:30:20 hosting sshd[11308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.68.6 user=admin Mar 8 11:30:22 hosting sshd[11308]: Failed password for admin from 58.246.68.6 port 4378 ssh2 ...	2020-03-08 19:38:54
51.38.238.87	attackspambots	Mar 6 11:13:40 master sshd[19768]: Failed password for root from 51.38.238.87 port 47560 ssh2 Mar 8 06:09:29 master sshd[7258]: Failed password for root from 51.38.238.87 port 55744 ssh2	2020-03-08 19:33:24
132.232.73.142	attackbots	2020-03-07 UTC: (30x) - 123,123456,123456789,ADM1N122,Ahmet1999,Asd@12345,P@$$w0rdzaq1,P@$$word,P@sswOrd,TestWebServer,[password],aikido,aws,bitnami,hr123,jiangqianhu123,nproc,p4ssw0rds001,password,password123,qweASD!@#,qwerty,root(5x),root*q1w2e3r4,rootmeg,text	2020-03-08 19:46:01
222.186.175.216	attackspam	2020-03-08T12:44:45.632057scmdmz1 sshd[29069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root 2020-03-08T12:44:47.688112scmdmz1 sshd[29069]: Failed password for root from 222.186.175.216 port 28638 ssh2 2020-03-08T12:44:51.421710scmdmz1 sshd[29069]: Failed password for root from 222.186.175.216 port 28638 ssh2 ...	2020-03-08 19:45:31
107.150.7.213	attackspam	firewall-block, port(s): 445/tcp	2020-03-08 19:30:18
2.39.21.184	attackbots	port scan and connect, tcp 23 (telnet)	2020-03-08 19:10:55

Recently Reported IPs

69.49.99.153	112.94.99.88	42.6.125.111	14.155.155.131
115.87.217.57	37.232.43.162	62.148.145.161	109.56.153.188
120.38.65.164	170.106.168.129	154.83.43.104	147.182.163.185
222.92.47.105	223.90.39.124	113.200.158.7	94.137.31.250
219.77.18.161	146.242.62.24	46.70.130.80	125.235.235.19