148.72.1.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
148.72.168.23	attackspam	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 457	2020-10-14 05:35:21
148.72.153.223	attackbotsspam	Fraud VOIP	2020-10-09 02:40:40
148.72.158.192	attackspambots	[2020-10-08 04:11:48] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:58355' - Wrong password [2020-10-08 04:11:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T04:11:48.450-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000000",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/148.72.158.192/58355",Challenge="7ba74d30",ReceivedChallenge="7ba74d30",ReceivedHash="48c949f61c9d64cd98c26241f3e4eee7" [2020-10-08 04:12:42] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:56110' - Wrong password ...	2020-10-09 01:24:24
148.72.153.223	attackspambots	Port scan denied	2020-10-08 18:40:33
148.72.158.192	attackbotsspam	[2020-10-08 04:11:48] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:58355' - Wrong password [2020-10-08 04:11:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T04:11:48.450-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000000",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/148.72.158.192/58355",Challenge="7ba74d30",ReceivedChallenge="7ba74d30",ReceivedHash="48c949f61c9d64cd98c26241f3e4eee7" [2020-10-08 04:12:42] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:56110' - Wrong password ...	2020-10-08 17:21:21
148.72.168.23	attackbotsspam	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 456	2020-10-01 06:38:16
148.72.168.23	attack	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 456	2020-09-30 23:01:10
148.72.168.23	attackspam	UDP 148.72.168.23:5337 -> port 5060, len 439	2020-09-30 15:34:43
148.72.168.23	attackspambots	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 457	2020-09-28 04:24:21
148.72.168.23	attackspambots	UDP port : 5060	2020-09-27 20:40:58
148.72.168.23	attack	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 454	2020-09-27 12:18:14
148.72.158.151	attackbots	Automatic report - Port Scan	2020-09-06 01:30:53
148.72.158.151	attackspambots	port	2020-09-05 17:02:37
148.72.132.87	attackbotsspam	Unauthorized connection attempt detected from IP address 148.72.132.87 to port 4443 [T]	2020-09-04 03:46:04
148.72.158.192	attack	[Tue Sep 01 13:46:55 2020] - DDoS Attack From IP: 148.72.158.192 Port: 40815	2020-09-03 23:36:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.72.1.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52467
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.72.1.13.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 78 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 04:32:26 CST 2022
;; MSG SIZE  rcvd: 104

Host info

13.1.72.148.in-addr.arpa domain name pointer ip-148-72-1-13.ip.secureserver.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.1.72.148.in-addr.arpa	name = ip-148-72-1-13.ip.secureserver.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
162.243.50.8	attack	2020-08-11T23:33:36.175101afi-git.jinr.ru sshd[19952]: Failed password for root from 162.243.50.8 port 53125 ssh2 2020-08-11T23:35:11.670891afi-git.jinr.ru sshd[20395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.50.8 user=root 2020-08-11T23:35:13.451482afi-git.jinr.ru sshd[20395]: Failed password for root from 162.243.50.8 port 35454 ssh2 2020-08-11T23:36:44.787783afi-git.jinr.ru sshd[20741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.50.8 user=root 2020-08-11T23:36:47.004604afi-git.jinr.ru sshd[20741]: Failed password for root from 162.243.50.8 port 46018 ssh2 ...	2020-08-12 05:38:21
218.92.0.184	attack	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-08-12 05:07:29
74.124.24.114	attackbotsspam	Aug 11 22:27:11 serwer sshd\[2012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.124.24.114 user=root Aug 11 22:27:12 serwer sshd\[2012\]: Failed password for root from 74.124.24.114 port 45370 ssh2 Aug 11 22:36:34 serwer sshd\[2965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.124.24.114 user=root ...	2020-08-12 05:47:24
91.104.29.16	attackspam	leo_www	2020-08-12 05:13:46
92.14.62.33	attackbotsspam	Automatic report - Banned IP Access	2020-08-12 05:37:30
134.175.78.233	attackspambots	(sshd) Failed SSH login from 134.175.78.233 (CN/China/-): 5 in the last 3600 secs	2020-08-12 05:26:10
54.37.65.3	attackbotsspam	2020-08-11T22:42:59.929843n23.at sshd[2525652]: Failed password for root from 54.37.65.3 port 41108 ssh2 2020-08-11T22:47:51.066383n23.at sshd[2529169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.65.3 user=root 2020-08-11T22:47:53.183329n23.at sshd[2529169]: Failed password for root from 54.37.65.3 port 50878 ssh2 ...	2020-08-12 05:11:48
203.130.255.2	attackbotsspam	Aug 11 22:31:50 vpn01 sshd[11988]: Failed password for root from 203.130.255.2 port 49158 ssh2 ...	2020-08-12 05:21:10
112.15.38.248	attackbotsspam	Attempted Brute Force (dovecot)	2020-08-12 05:19:29
106.13.48.122	attack	Aug 11 22:32:14 Ubuntu-1404-trusty-64-minimal sshd\[13632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 user=root Aug 11 22:32:16 Ubuntu-1404-trusty-64-minimal sshd\[13632\]: Failed password for root from 106.13.48.122 port 42005 ssh2 Aug 11 22:35:19 Ubuntu-1404-trusty-64-minimal sshd\[14456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 user=root Aug 11 22:35:21 Ubuntu-1404-trusty-64-minimal sshd\[14456\]: Failed password for root from 106.13.48.122 port 61109 ssh2 Aug 11 22:36:39 Ubuntu-1404-trusty-64-minimal sshd\[14851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 user=root	2020-08-12 05:44:27
112.21.191.244	attackspam	2020-08-11T23:52:09.886084lavrinenko.info sshd[1009]: Invalid user qwerty@123321 from 112.21.191.244 port 45178 2020-08-11T23:52:09.895605lavrinenko.info sshd[1009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.244 2020-08-11T23:52:09.886084lavrinenko.info sshd[1009]: Invalid user qwerty@123321 from 112.21.191.244 port 45178 2020-08-11T23:52:12.428334lavrinenko.info sshd[1009]: Failed password for invalid user qwerty@123321 from 112.21.191.244 port 45178 ssh2 2020-08-11T23:55:45.895410lavrinenko.info sshd[1097]: Invalid user demo from 112.21.191.244 port 49762 ...	2020-08-12 05:09:03
45.129.33.14	attackbots	port	2020-08-12 05:33:09
1.71.129.108	attackbotsspam	Aug 11 22:31:39 serwer sshd\[2452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.71.129.108 user=root Aug 11 22:31:42 serwer sshd\[2452\]: Failed password for root from 1.71.129.108 port 45231 ssh2 Aug 11 22:36:38 serwer sshd\[2976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.71.129.108 user=root ...	2020-08-12 05:41:16
111.34.118.214	attackbots	Telnetd brute force attack detected by fail2ban	2020-08-12 05:26:36
157.231.80.46	attackspam	20/8/11@16:37:22: FAIL: Alarm-Network address from=157.231.80.46 ...	2020-08-12 05:07:52

Recently Reported IPs

148.72.101.255	148.72.105.75	148.66.57.11	148.72.100.116
148.72.104.238	148.72.105.245	148.72.113.210	148.72.114.21
148.72.117.152	148.72.117.160	148.72.117.84	148.72.119.17
148.72.123.121	148.72.120.29	148.72.125.216	148.72.14.212
148.72.122.182	148.72.123.82	148.72.124.42	148.72.13.113