148.72.1.242 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
148.72.168.23	attackspam	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 457	2020-10-14 05:35:21
148.72.153.223	attackbotsspam	Fraud VOIP	2020-10-09 02:40:40
148.72.158.192	attackspambots	[2020-10-08 04:11:48] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:58355' - Wrong password [2020-10-08 04:11:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T04:11:48.450-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000000",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/148.72.158.192/58355",Challenge="7ba74d30",ReceivedChallenge="7ba74d30",ReceivedHash="48c949f61c9d64cd98c26241f3e4eee7" [2020-10-08 04:12:42] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:56110' - Wrong password ...	2020-10-09 01:24:24
148.72.153.223	attackspambots	Port scan denied	2020-10-08 18:40:33
148.72.158.192	attackbotsspam	[2020-10-08 04:11:48] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:58355' - Wrong password [2020-10-08 04:11:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T04:11:48.450-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000000",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/148.72.158.192/58355",Challenge="7ba74d30",ReceivedChallenge="7ba74d30",ReceivedHash="48c949f61c9d64cd98c26241f3e4eee7" [2020-10-08 04:12:42] NOTICE[1182] chan_sip.c: Registration from '' failed for '148.72.158.192:56110' - Wrong password ...	2020-10-08 17:21:21
148.72.168.23	attackbotsspam	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 456	2020-10-01 06:38:16
148.72.168.23	attack	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 456	2020-09-30 23:01:10
148.72.168.23	attackspam	UDP 148.72.168.23:5337 -> port 5060, len 439	2020-09-30 15:34:43
148.72.168.23	attackspambots	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 457	2020-09-28 04:24:21
148.72.168.23	attackspambots	UDP port : 5060	2020-09-27 20:40:58
148.72.168.23	attack	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 454	2020-09-27 12:18:14
148.72.158.151	attackbots	Automatic report - Port Scan	2020-09-06 01:30:53
148.72.158.151	attackspambots	port	2020-09-05 17:02:37
148.72.132.87	attackbotsspam	Unauthorized connection attempt detected from IP address 148.72.132.87 to port 4443 [T]	2020-09-04 03:46:04
148.72.158.192	attack	[Tue Sep 01 13:46:55 2020] - DDoS Attack From IP: 148.72.158.192 Port: 40815	2020-09-03 23:36:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.72.1.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29027
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.72.1.242.			IN	A

;; AUTHORITY SECTION:
.			396	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 14:31:43 CST 2022
;; MSG SIZE  rcvd: 105

Host info

242.1.72.148.in-addr.arpa domain name pointer ip-148-72-1-242.ip.secureserver.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
242.1.72.148.in-addr.arpa	name = ip-148-72-1-242.ip.secureserver.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
188.254.0.226	attack	2019-10-15T15:35:36.603149hub.schaetter.us sshd\[7204\]: Invalid user 1 from 188.254.0.226 port 42790 2019-10-15T15:35:36.612358hub.schaetter.us sshd\[7204\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.226 2019-10-15T15:35:38.963234hub.schaetter.us sshd\[7204\]: Failed password for invalid user 1 from 188.254.0.226 port 42790 ssh2 2019-10-15T15:40:01.788495hub.schaetter.us sshd\[7247\]: Invalid user zhiban_2006 from 188.254.0.226 port 52824 2019-10-15T15:40:01.800526hub.schaetter.us sshd\[7247\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.226 ...	2019-10-16 00:12:26
101.36.138.61	attackbots	[portscan] tcp/22 [SSH] in blocklist.de:'listed [ssh]' in spfbl.net:'listed' *(RWIN=65535)(10151156)	2019-10-16 00:04:42
138.197.213.233	attack	2019-10-15T17:41:41.421191lon01.zurich-datacenter.net sshd\[11141\]: Invalid user allan from 138.197.213.233 port 37836 2019-10-15T17:41:41.429868lon01.zurich-datacenter.net sshd\[11141\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.213.233 2019-10-15T17:41:43.554354lon01.zurich-datacenter.net sshd\[11141\]: Failed password for invalid user allan from 138.197.213.233 port 37836 ssh2 2019-10-15T17:45:17.062263lon01.zurich-datacenter.net sshd\[11203\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.213.233 user=root 2019-10-15T17:45:18.840887lon01.zurich-datacenter.net sshd\[11203\]: Failed password for root from 138.197.213.233 port 47940 ssh2 ...	2019-10-15 23:55:36
190.129.173.157	attackbotsspam	2019-10-15T13:53:24.682088abusebot-4.cloudsearch.cf sshd\[29770\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.129.173.157 user=root	2019-10-15 23:35:16
184.105.139.100	attackbotsspam	3389BruteforceFW21	2019-10-15 23:42:54
185.103.110.204	attackspambots	form honeypot	2019-10-15 23:47:42
180.76.100.183	attack	$f2bV_matches	2019-10-16 00:10:36
207.180.198.241	attackbots	15.10.2019 15:17:57 - Wordpress fail Detected by ELinOX-ALM	2019-10-15 23:42:26
114.37.194.79	attackbotsspam	T: f2b postfix aggressive 3x	2019-10-15 23:47:03
92.188.124.228	attackspam	Oct 15 14:50:41 localhost sshd\[27054\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.188.124.228 user=root Oct 15 14:50:43 localhost sshd\[27054\]: Failed password for root from 92.188.124.228 port 33722 ssh2 Oct 15 14:56:53 localhost sshd\[27647\]: Invalid user fe from 92.188.124.228 port 49296 Oct 15 14:56:53 localhost sshd\[27647\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.188.124.228	2019-10-15 23:39:45
222.186.175.202	attackbots	Oct 15 17:31:21 meumeu sshd[23811]: Failed password for root from 222.186.175.202 port 36286 ssh2 Oct 15 17:31:41 meumeu sshd[23811]: Failed password for root from 222.186.175.202 port 36286 ssh2 Oct 15 17:31:42 meumeu sshd[23811]: error: maximum authentication attempts exceeded for root from 222.186.175.202 port 36286 ssh2 [preauth] ...	2019-10-15 23:51:06
83.224.132.168	attack	[portscan] tcp/23 [TELNET] in spfbl.net:'listed' *(RWIN=32787)(10151156)	2019-10-16 00:06:29
222.239.90.55	attack	WordPress wp-login brute force :: 222.239.90.55 0.120 BYPASS [15/Oct/2019:22:41:40 1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-10-15 23:30:59
178.128.217.58	attackbotsspam	2019-10-15T15:36:59.458096shield sshd\[23128\]: Invalid user zuoshi from 178.128.217.58 port 34608 2019-10-15T15:36:59.462689shield sshd\[23128\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.217.58 2019-10-15T15:37:01.542292shield sshd\[23128\]: Failed password for invalid user zuoshi from 178.128.217.58 port 34608 ssh2 2019-10-15T15:41:28.614164shield sshd\[24150\]: Invalid user WinDowsserver2003 from 178.128.217.58 port 45732 2019-10-15T15:41:28.618279shield sshd\[24150\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.217.58	2019-10-15 23:49:13
1.174.2.121	attack	[portscan] tcp/23 [TELNET] in spfbl.net:'listed' *(RWIN=33180)(10151156)	2019-10-16 00:08:46

Recently Reported IPs

148.72.1.135	148.72.1.134	148.72.10.213	148.71.80.52
148.72.1.57	148.72.101.132	148.72.109.158	148.72.103.142
148.72.104.129	148.66.136.5	148.72.109.202	148.72.101.32
148.72.11.138	148.72.103.35	148.72.109.225	148.72.106.211
148.72.106.21	148.72.104.117	148.72.112.107	148.72.111.239