Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Sijmen Klaas Bakker

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
firewall-block, port(s): 5060/udp
2020-10-01 07:50:49
attack
 UDP 45.148.121.138:5122 -> port 5060, len 443
2020-10-01 00:21:08
attackspam
10 packets to port 5060
2020-09-30 16:41:47
Comments on same subnet:
IP Type Details Datetime
45.148.121.85 attackbotsspam
 TCP (SYN) 45.148.121.85:53422 -> port 8080, len 44
2020-10-14 05:44:48
45.148.121.92 attackspambots
ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 451
2020-10-14 05:24:35
45.148.121.28 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 29 - port: 80 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:10:58
45.148.121.85 attack
HEAD /robots.txt HTTP/1.0 403 0 "-" "-"
2020-10-08 01:22:08
45.148.121.85 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-07 17:29:50
45.148.121.32 attackspam
[2020-10-06 13:09:11] NOTICE[1182] chan_sip.c: Registration from '"150" ' failed for '45.148.121.32:5773' - Wrong password
[2020-10-06 13:09:11] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T13:09:11.390-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="150",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.121.32/5773",Challenge="73d516ec",ReceivedChallenge="73d516ec",ReceivedHash="e073c545cfec2de1896911ae43c17a3d"
[2020-10-06 13:09:11] NOTICE[1182] chan_sip.c: Registration from '"150" ' failed for '45.148.121.32:5773' - Wrong password
[2020-10-06 13:09:11] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T13:09:11.491-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="150",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.1
...
2020-10-07 01:53:24
45.148.121.32 attackbotsspam
[2020-10-06 05:25:19] NOTICE[1182] chan_sip.c: Registration from '"1234" ' failed for '45.148.121.32:5341' - Wrong password
[2020-10-06 05:25:19] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T05:25:19.856-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.121.32/5341",Challenge="18387bf6",ReceivedChallenge="18387bf6",ReceivedHash="4eb1bd0c35882490ad495acc9d170b4e"
[2020-10-06 05:25:19] NOTICE[1182] chan_sip.c: Registration from '"1234" ' failed for '45.148.121.32:5341' - Wrong password
[2020-10-06 05:25:19] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T05:25:19.985-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45
...
2020-10-06 17:49:17
45.148.121.92 attackbotsspam
 UDP 45.148.121.92:5067 -> port 5060, len 440
2020-10-04 04:40:11
45.148.121.92 attackspam
UDP port : 5060
2020-10-03 20:46:55
45.148.121.92 attackspam
45.148.121.92 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 11, 60
2020-10-03 12:12:41
45.148.121.92 attack
45.148.121.92 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 11, 60
2020-10-03 06:54:22
45.148.121.31 attackspambots
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \<
...
2020-10-02 02:17:00
45.148.121.31 attackspam
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \<
...
2020-10-01 18:24:47
45.148.121.43 attackbotsspam
Brute force attempt on PBX
2020-09-29 04:40:01
45.148.121.43 attackbots
Brute force attempt on PBX
2020-09-28 20:57:33
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.121.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18908
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.121.138.			IN	A

;; AUTHORITY SECTION:
.			542	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020093000 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 30 16:41:40 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 138.121.148.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.121.148.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
189.78.171.97 attackbotsspam
Unauthorized connection attempt detected from IP address 189.78.171.97 to port 80 [J]
2020-02-04 02:53:44
83.14.199.49 attackbots
Feb  3 17:36:02 srv01 sshd[31172]: Invalid user alia1 from 83.14.199.49 port 56454
Feb  3 17:36:02 srv01 sshd[31172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.14.199.49
Feb  3 17:36:02 srv01 sshd[31172]: Invalid user alia1 from 83.14.199.49 port 56454
Feb  3 17:36:03 srv01 sshd[31172]: Failed password for invalid user alia1 from 83.14.199.49 port 56454 ssh2
Feb  3 17:38:18 srv01 sshd[31278]: Invalid user QLogic66 from 83.14.199.49 port 47432
...
2020-02-04 03:06:15
46.23.118.243 attackspam
Unauthorized connection attempt detected from IP address 46.23.118.243 to port 23 [J]
2020-02-04 02:46:53
142.93.154.90 attackbots
Unauthorized connection attempt detected from IP address 142.93.154.90 to port 2220 [J]
2020-02-04 02:58:44
176.103.211.66 attackspambots
Unauthorized connection attempt detected from IP address 176.103.211.66 to port 2323 [J]
2020-02-04 02:36:33
176.62.80.140 attackbots
Unauthorized connection attempt detected from IP address 176.62.80.140 to port 80 [J]
2020-02-04 02:37:28
176.197.135.30 attackbotsspam
Unauthorized connection attempt detected from IP address 176.197.135.30 to port 80 [J]
2020-02-04 02:57:14
172.95.161.66 attackbots
Unauthorized connection attempt detected from IP address 172.95.161.66 to port 23 [J]
2020-02-04 02:57:47
182.140.235.149 attackspam
Unauthorized connection attempt detected from IP address 182.140.235.149 to port 1433 [J]
2020-02-04 02:56:00
101.255.36.146 attackspambots
Unauthorized connection attempt detected from IP address 101.255.36.146 to port 1433 [J]
2020-02-04 03:04:55
177.84.43.202 attackspam
Unauthorized connection attempt detected from IP address 177.84.43.202 to port 80 [J]
2020-02-04 02:36:06
222.254.31.94 attackbots
Unauthorized connection attempt detected from IP address 222.254.31.94 to port 22 [J]
2020-02-04 02:50:49
81.163.116.209 attackbots
Unauthorized connection attempt detected from IP address 81.163.116.209 to port 23 [J]
2020-02-04 02:45:10
118.45.13.233 attack
Unauthorized connection attempt detected from IP address 118.45.13.233 to port 23 [J]
2020-02-04 03:00:14
112.170.72.170 attack
Unauthorized connection attempt detected from IP address 112.170.72.170 to port 2220 [J]
2020-02-04 03:02:11

Recently Reported IPs

168.61.48.38 206.189.121.234 186.121.200.114 167.114.52.16
87.182.217.77 115.56.182.221 104.248.131.113 177.41.186.19
31.140.142.53 135.185.99.152 37.49.230.173 49.234.126.83
211.233.134.49 133.106.34.30 125.19.30.200 40.204.111.201
232.91.61.217 109.237.97.128 171.48.58.213 195.136.45.136