157.245.74.121

Basic Info

City: Amsterdam

Region: Noord Holland

Country: The Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
157.245.74.244	attackspambots	157.245.74.244 - - \[19/Sep/2020:13:40:31 +0200\] "POST /wp-login.php HTTP/1.0" 200 8625 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - \[19/Sep/2020:13:40:32 +0200\] "POST /wp-login.php HTTP/1.0" 200 8409 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - \[19/Sep/2020:13:40:32 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-09-20 03:35:05
157.245.74.244	attackspambots	xmlrpc attack	2020-09-19 19:38:02
157.245.74.244	attackbots	157.245.74.244 - - [04/Sep/2020:09:58:43 +0100] "POST /wp-login.php HTTP/1.1" 200 1834 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [04/Sep/2020:09:58:43 +0100] "POST /wp-login.php HTTP/1.1" 200 1812 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [04/Sep/2020:09:58:43 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-05 00:11:59
157.245.74.244	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-04 15:38:13
157.245.74.244	attackspambots	157.245.74.244 - - [04/Sep/2020:00:39:54 +0100] "POST /wp-login.php HTTP/1.1" 200 1948 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [04/Sep/2020:00:39:55 +0100] "POST /wp-login.php HTTP/1.1" 200 1912 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [04/Sep/2020:00:39:56 +0100] "POST /wp-login.php HTTP/1.1" 200 1909 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-04 07:59:48
157.245.74.244	attackbotsspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-08-30 16:47:23
157.245.74.244	attack	157.245.74.244 - - [29/Aug/2020:06:16:40 +0100] "POST /wp-login.php HTTP/1.1" 200 1965 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [29/Aug/2020:06:16:42 +0100] "POST /wp-login.php HTTP/1.1" 200 1950 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [29/Aug/2020:06:16:42 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-29 13:22:00
157.245.74.244	attackspam	www.villaromeo.de 157.245.74.244 [01/Aug/2020:11:55:08 +0200] "POST /wp-login.php HTTP/1.1" 200 2385 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.villaromeo.de 157.245.74.244 [01/Aug/2020:11:55:09 +0200] "POST /wp-login.php HTTP/1.1" 200 2360 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-05 19:22:52
157.245.74.244	attackbotsspam	157.245.74.244 - - [04/Aug/2020:00:35:21 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [04/Aug/2020:00:35:22 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [04/Aug/2020:00:35:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-04 07:55:56
157.245.74.244	attackspambots	157.245.74.244 - - [30/Jul/2020:21:23:40 +0100] "POST /wp-login.php HTTP/1.1" 200 1791 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [30/Jul/2020:21:23:41 +0100] "POST /wp-login.php HTTP/1.1" 200 1772 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [30/Jul/2020:21:23:41 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-31 04:29:07
157.245.74.244	attackspam	157.245.74.244 - - [26/Jul/2020:21:58:47 +0100] "POST /wp-login.php HTTP/1.1" 200 1834 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [26/Jul/2020:21:58:48 +0100] "POST /wp-login.php HTTP/1.1" 200 1812 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [26/Jul/2020:21:58:48 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-27 05:53:49
157.245.74.244	attackbots	157.245.74.244 - - [05/Jul/2020:11:40:50 +0200] "GET /wp-login.php HTTP/1.1" 200 6398 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [05/Jul/2020:11:40:53 +0200] "POST /wp-login.php HTTP/1.1" 200 6649 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [05/Jul/2020:11:40:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-05 20:09:36
157.245.74.244	attackbotsspam	GET /2020/wp-login.php HTTP/1.1	2020-06-12 15:55:06
157.245.74.244	attackspam	157.245.74.244 - - [05/Jun/2020:23:14:43 +0200] "GET /wp-login.php HTTP/1.1" 200 6433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [05/Jun/2020:23:14:44 +0200] "POST /wp-login.php HTTP/1.1" 200 6684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [05/Jun/2020:23:14:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-06 09:28:56
157.245.74.244	attackbots	WordPress login Brute force / Web App Attack on client site.	2020-05-08 23:19:00

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#


NetRange:       157.245.0.0 - 157.245.255.255
CIDR:           157.245.0.0/16
NetName:        DIGITALOCEAN-157-245-0-0
NetHandle:      NET-157-245-0-0-1
Parent:         NET157 (NET-157-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   DigitalOcean, LLC (DO-13)
RegDate:        2019-05-09
Updated:        2020-04-03
Comment:        Routing and Peering Policy can be found at https://www.as14061.net
Comment:        
Comment:        Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref:            https://rdap.arin.net/registry/ip/157.245.0.0



OrgName:        DigitalOcean, LLC
OrgId:          DO-13
Address:        105 Edgeview Drive, Suite 425
City:           Broomfield
StateProv:      CO
PostalCode:     80021
Country:        US
RegDate:        2012-05-14
Updated:        2025-04-11
Ref:            https://rdap.arin.net/registry/entity/DO-13


OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName:   DigitalOcean Abuse
OrgAbusePhone:  +1-646-827-4366 
OrgAbuseEmail:  abuse@digitalocean.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/DIGIT19-ARIN

OrgNOCHandle: NOC32014-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-646-827-4366 
OrgNOCEmail:  noc@digitalocean.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN

OrgTechHandle: NOC32014-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-646-827-4366 
OrgTechEmail:  noc@digitalocean.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.74.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13274
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.245.74.121.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025100900 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 10 01:30:21 CST 2025
;; MSG SIZE  rcvd: 107

Host info

Host 121.74.245.157.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 121.74.245.157.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
181.46.9.140	attackbots	TCP (SYN) 181.46.9.140:14156 -> port 445, len 52	2020-05-20 06:25:06
188.247.91.78	attackspam	Unauthorized connection attempt detected from IP address 188.247.91.78 to port 445	2020-05-20 05:50:00
194.38.2.64	attackbots	TCP (SYN) 194.38.2.64:55794 -> port 445, len 52	2020-05-20 06:24:02
87.117.56.174	attackspambots	1589880553 - 05/19/2020 11:29:13 Host: 87.117.56.174/87.117.56.174 Port: 445 TCP Blocked	2020-05-20 05:48:33
171.239.181.140	attackspam	Attempted connection to port 2323.	2020-05-20 06:00:21
58.210.180.180	attackbotsspam	503. On May 19 2020 experienced a Brute Force SSH login attempt -> 3 unique times by 58.210.180.180.	2020-05-20 06:17:23
114.32.172.170	attackspambots	TCP (SYN) 114.32.172.170:63233 -> port 23, len 40	2020-05-20 06:04:04
114.32.174.176	attackbots	TCP (SYN) 114.32.174.176:15635 -> port 80, len 40	2020-05-20 06:09:35
111.42.103.6	attackspambots	TCP (SYN) 111.42.103.6:39245 -> port 2323, len 40	2020-05-20 05:45:18
118.166.198.24	attack	TCP (SYN) 118.166.198.24:41801 -> port 23, len 40	2020-05-20 05:51:16
200.46.203.19	attackspambots	SMB Server BruteForce Attack	2020-05-20 05:54:06
220.133.125.81	attackbots	Honeypot attack, port: 81, PTR: 220-133-125-81.HINET-IP.hinet.net.	2020-05-20 06:12:15
84.205.181.148	attackspam	TCP (SYN) 84.205.181.148:42566 -> port 25, len 60	2020-05-20 06:22:41
43.224.130.146	attack	May 19 07:07:30 kapalua sshd\[17148\]: Invalid user rno from 43.224.130.146 May 19 07:07:30 kapalua sshd\[17148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.130.146 May 19 07:07:32 kapalua sshd\[17148\]: Failed password for invalid user rno from 43.224.130.146 port 45455 ssh2 May 19 07:11:59 kapalua sshd\[17698\]: Invalid user ukz from 43.224.130.146 May 19 07:11:59 kapalua sshd\[17698\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.130.146	2020-05-20 06:23:38
45.142.195.8	attackspam	May 19 23:02:46 mail.srvfarm.net postfix/smtps/smtpd[807275]: warning: unknown[45.142.195.8]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 19 23:02:58 mail.srvfarm.net postfix/smtps/smtpd[807275]: lost connection after AUTH from unknown[45.142.195.8] May 19 23:05:40 mail.srvfarm.net postfix/smtps/smtpd[807643]: warning: unknown[45.142.195.8]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 19 23:05:53 mail.srvfarm.net postfix/smtps/smtpd[807643]: lost connection after AUTH from unknown[45.142.195.8] May 19 23:08:35 mail.srvfarm.net postfix/smtps/smtpd[807280]: warning: unknown[45.142.195.8]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-05-20 05:53:54

Recently Reported IPs

8.219.158.93	8.219.182.10	167.172.220.71	121.229.185.160
87.236.176.171	118.109.187.92	118.109.187.233	52.30.66.214
114.43.146.215	5.187.35.21	40.80.200.216	180.110.203.108
103.214.44.59	10.1.214.36	181.118.42.75	10.20.74.26
1.225.85.168	64.23.196.172	143.110.156.43	196.251.115.78