148.72.1.21 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
148.72.168.23	attackspam	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 457	2020-10-14 05:35:21
148.72.153.223	attackbotsspam	Fraud VOIP	2020-10-09 02:40:40
148.72.158.192	attackspambots	[2020-10-08 04:11:48] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:58355' - Wrong password [2020-10-08 04:11:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T04:11:48.450-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000000",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/148.72.158.192/58355",Challenge="7ba74d30",ReceivedChallenge="7ba74d30",ReceivedHash="48c949f61c9d64cd98c26241f3e4eee7" [2020-10-08 04:12:42] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:56110' - Wrong password ...	2020-10-09 01:24:24
148.72.153.223	attackspambots	Port scan denied	2020-10-08 18:40:33
148.72.158.192	attackbotsspam	[2020-10-08 04:11:48] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:58355' - Wrong password [2020-10-08 04:11:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T04:11:48.450-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000000",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/148.72.158.192/58355",Challenge="7ba74d30",ReceivedChallenge="7ba74d30",ReceivedHash="48c949f61c9d64cd98c26241f3e4eee7" [2020-10-08 04:12:42] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:56110' - Wrong password ...	2020-10-08 17:21:21
148.72.168.23	attackbotsspam	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 456	2020-10-01 06:38:16
148.72.168.23	attack	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 456	2020-09-30 23:01:10
148.72.168.23	attackspam	UDP 148.72.168.23:5337 -> port 5060, len 439	2020-09-30 15:34:43
148.72.168.23	attackspambots	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 457	2020-09-28 04:24:21
148.72.168.23	attackspambots	UDP port : 5060	2020-09-27 20:40:58
148.72.168.23	attack	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 454	2020-09-27 12:18:14
148.72.158.151	attackbots	Automatic report - Port Scan	2020-09-06 01:30:53
148.72.158.151	attackspambots	port	2020-09-05 17:02:37
148.72.132.87	attackbotsspam	Unauthorized connection attempt detected from IP address 148.72.132.87 to port 4443 [T]	2020-09-04 03:46:04
148.72.158.192	attack	[Tue Sep 01 13:46:55 2020] - DDoS Attack From IP: 148.72.158.192 Port: 40815	2020-09-03 23:36:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.72.1.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50333
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.72.1.21.			IN	A

;; AUTHORITY SECTION:
.			337	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:44:24 CST 2022
;; MSG SIZE  rcvd: 104

Host info

21.1.72.148.in-addr.arpa domain name pointer ip-148-72-1-21.ip.secureserver.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.1.72.148.in-addr.arpa	name = ip-148-72-1-21.ip.secureserver.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
37.28.155.134	attack	SSH login attempts.	2020-06-19 16:21:04
103.75.149.109	attackbots	2020-06-19T08:36:01.031518shield sshd\[2178\]: Invalid user git_user from 103.75.149.109 port 45138 2020-06-19T08:36:01.036336shield sshd\[2178\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.75.149.109 2020-06-19T08:36:02.670500shield sshd\[2178\]: Failed password for invalid user git_user from 103.75.149.109 port 45138 ssh2 2020-06-19T08:39:52.579886shield sshd\[2679\]: Invalid user jp from 103.75.149.109 port 45264 2020-06-19T08:39:52.584557shield sshd\[2679\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.75.149.109	2020-06-19 16:44:52
182.61.39.49	attack	2020-06-19T07:51:40.327585 sshd[19330]: Invalid user samba from 182.61.39.49 port 46128 2020-06-19T07:51:40.344250 sshd[19330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.39.49 2020-06-19T07:51:40.327585 sshd[19330]: Invalid user samba from 182.61.39.49 port 46128 2020-06-19T07:51:42.567291 sshd[19330]: Failed password for invalid user samba from 182.61.39.49 port 46128 ssh2 ...	2020-06-19 16:08:36
47.91.231.107	attackspam	Malicious/Probing: /xmlrpc.php	2020-06-19 16:27:29
162.241.192.84	attackbotsspam	SSH login attempts.	2020-06-19 16:38:23
47.43.26.67	attack	SSH login attempts.	2020-06-19 16:11:26
205.228.84.147	attackspambots	SSH login attempts.	2020-06-19 16:36:20
222.105.177.33	attack	Jun 19 05:55:21 santamaria sshd\[13143\]: Invalid user marie from 222.105.177.33 Jun 19 05:55:21 santamaria sshd\[13143\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.105.177.33 Jun 19 05:55:22 santamaria sshd\[13143\]: Failed password for invalid user marie from 222.105.177.33 port 41690 ssh2 ...	2020-06-19 16:20:18
222.186.30.112	attackspambots	2020-06-19T08:36:28.121778abusebot-8.cloudsearch.cf sshd[23847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root 2020-06-19T08:36:29.796158abusebot-8.cloudsearch.cf sshd[23847]: Failed password for root from 222.186.30.112 port 22827 ssh2 2020-06-19T08:36:31.654514abusebot-8.cloudsearch.cf sshd[23847]: Failed password for root from 222.186.30.112 port 22827 ssh2 2020-06-19T08:36:28.121778abusebot-8.cloudsearch.cf sshd[23847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root 2020-06-19T08:36:29.796158abusebot-8.cloudsearch.cf sshd[23847]: Failed password for root from 222.186.30.112 port 22827 ssh2 2020-06-19T08:36:31.654514abusebot-8.cloudsearch.cf sshd[23847]: Failed password for root from 222.186.30.112 port 22827 ssh2 2020-06-19T08:36:28.121778abusebot-8.cloudsearch.cf sshd[23847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss ...	2020-06-19 16:37:51
106.13.203.240	attackbotsspam	$lgm	2020-06-19 16:12:32
172.67.208.45	attackspam	SSH login attempts.	2020-06-19 16:31:20
148.163.156.45	attackspambots	SSH login attempts.	2020-06-19 16:14:02
173.203.187.2	attackbots	SSH login attempts.	2020-06-19 16:18:30
101.231.154.154	attack	SSH Bruteforce attack	2020-06-19 16:15:30
123.206.216.65	attackbots	SSH login attempts.	2020-06-19 16:19:26

Recently Reported IPs

148.72.100.19	148.72.100.39	148.72.102.246	148.72.100.208
148.72.106.20	148.72.108.140	148.72.106.212	148.72.108.70
148.72.104.240	148.72.107.8	148.72.111.2	148.72.109.35
148.72.109.71	148.72.111.201	148.72.112.247	148.72.112.75
148.72.112.82	148.72.113.132	148.72.116.200	148.72.115.226