45.148.121.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Sijmen Klaas Bakker

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	TCP (SYN) 45.148.121.42:43644 -> port 11211, len 40	2020-06-07 17:48:31

Comments on same subnet:

IP	Type	Details	Datetime
45.148.121.85	attackbotsspam	TCP (SYN) 45.148.121.85:53422 -> port 8080, len 44	2020-10-14 05:44:48
45.148.121.92	attackspambots	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 451	2020-10-14 05:24:35
45.148.121.28	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 29 - port: 80 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:10:58
45.148.121.85	attack	HEAD /robots.txt HTTP/1.0 403 0 "-" "-"	2020-10-08 01:22:08
45.148.121.85	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-10-07 17:29:50
45.148.121.32	attackspam	[2020-10-06 13:09:11] NOTICE[1182] chan_sip.c: Registration from '"150" ' failed for '45.148.121.32:5773' - Wrong password [2020-10-06 13:09:11] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T13:09:11.390-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="150",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.121.32/5773",Challenge="73d516ec",ReceivedChallenge="73d516ec",ReceivedHash="e073c545cfec2de1896911ae43c17a3d" [2020-10-06 13:09:11] NOTICE[1182] chan_sip.c: Registration from '"150" ' failed for '45.148.121.32:5773' - Wrong password [2020-10-06 13:09:11] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T13:09:11.491-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="150",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.1 ...	2020-10-07 01:53:24
45.148.121.32	attackbotsspam	[2020-10-06 05:25:19] NOTICE[1182] chan_sip.c: Registration from '"1234" ' failed for '45.148.121.32:5341' - Wrong password [2020-10-06 05:25:19] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T05:25:19.856-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.121.32/5341",Challenge="18387bf6",ReceivedChallenge="18387bf6",ReceivedHash="4eb1bd0c35882490ad495acc9d170b4e" [2020-10-06 05:25:19] NOTICE[1182] chan_sip.c: Registration from '"1234" ' failed for '45.148.121.32:5341' - Wrong password [2020-10-06 05:25:19] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T05:25:19.985-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-06 17:49:17
45.148.121.92	attackbotsspam	UDP 45.148.121.92:5067 -> port 5060, len 440	2020-10-04 04:40:11
45.148.121.92	attackspam	UDP port : 5060	2020-10-03 20:46:55
45.148.121.92	attackspam	45.148.121.92 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 11, 60	2020-10-03 12:12:41
45.148.121.92	attack	45.148.121.92 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 11, 60	2020-10-03 06:54:22
45.148.121.31	attackspambots	\[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \< ...	2020-10-02 02:17:00
45.148.121.31	attackspam	\[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \< ...	2020-10-01 18:24:47
45.148.121.138	attack	firewall-block, port(s): 5060/udp	2020-10-01 07:50:49
45.148.121.138	attack	UDP 45.148.121.138:5122 -> port 5060, len 443	2020-10-01 00:21:08

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.121.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26932
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.121.42.			IN	A

;; AUTHORITY SECTION:
.			156	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060700 1800 900 604800 86400

;; Query time: 91 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 07 17:48:24 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 42.121.148.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 42.121.148.45.in-addr.arpa.: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
200.48.31.169	attackbots	1582291197 - 02/21/2020 14:19:57 Host: 200.48.31.169/200.48.31.169 Port: 445 TCP Blocked	2020-02-21 22:29:31
34.92.172.222	attackbotsspam	Feb 21 04:33:16 sachi sshd\[25153\]: Invalid user webshop from 34.92.172.222 Feb 21 04:33:16 sachi sshd\[25153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.172.92.34.bc.googleusercontent.com Feb 21 04:33:18 sachi sshd\[25153\]: Failed password for invalid user webshop from 34.92.172.222 port 55296 ssh2 Feb 21 04:36:26 sachi sshd\[25411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.172.92.34.bc.googleusercontent.com user=root Feb 21 04:36:28 sachi sshd\[25411\]: Failed password for root from 34.92.172.222 port 52412 ssh2	2020-02-21 22:38:18
87.118.122.51	attackspambots	02/21/2020-14:19:39.971595 87.118.122.51 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 84	2020-02-21 22:44:23
58.216.216.75	attackspambots	02/21/2020-08:20:00.663720 58.216.216.75 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-02-21 22:27:27
188.166.1.95	attackbotsspam	Feb 21 15:16:06 MK-Soft-Root1 sshd[4413]: Failed password for root from 188.166.1.95 port 38301 ssh2 Feb 21 15:18:21 MK-Soft-Root1 sshd[4947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.1.95 ...	2020-02-21 22:31:38
222.186.180.223	attackbots	Feb 21 15:11:32 nextcloud sshd\[13757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Feb 21 15:11:34 nextcloud sshd\[13757\]: Failed password for root from 222.186.180.223 port 18098 ssh2 Feb 21 15:11:37 nextcloud sshd\[13757\]: Failed password for root from 222.186.180.223 port 18098 ssh2	2020-02-21 22:12:15
95.14.134.10	attackspam	Automatic report - Banned IP Access	2020-02-21 22:28:20
188.166.111.207	attack	188.166.111.207 - - \[21/Feb/2020:14:19:24 +0100\] "POST /wp-login.php HTTP/1.0" 200 4404 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 188.166.111.207 - - \[21/Feb/2020:14:19:30 +0100\] "POST /wp-login.php HTTP/1.0" 200 4236 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 188.166.111.207 - - \[21/Feb/2020:14:19:36 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-02-21 22:45:05
1.42.25.185	attack	2020-02-21T14:17:42.954569shield sshd\[6494\]: Invalid user daniel from 1.42.25.185 port 35332 2020-02-21T14:17:42.965479shield sshd\[6494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=n1-42-25-185.mas1.nsw.optusnet.com.au 2020-02-21T14:17:44.089353shield sshd\[6494\]: Failed password for invalid user daniel from 1.42.25.185 port 35332 ssh2 2020-02-21T14:23:02.809340shield sshd\[7134\]: Invalid user gitlab-prometheus from 1.42.25.185 port 44238 2020-02-21T14:23:02.813564shield sshd\[7134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=n1-42-25-185.mas1.nsw.optusnet.com.au	2020-02-21 22:28:51
218.92.0.158	attackbotsspam	Feb 21 19:51:12 gw1 sshd[13587]: Failed password for root from 218.92.0.158 port 48561 ssh2 Feb 21 19:51:23 gw1 sshd[13587]: Failed password for root from 218.92.0.158 port 48561 ssh2 ...	2020-02-21 22:54:34
185.86.164.108	attackspam	Joomla Admin : try to force the door...	2020-02-21 22:53:02
14.146.95.239	attackspam	Feb 21 15:07:01 srv-ubuntu-dev3 sshd[74557]: Invalid user ftpuser from 14.146.95.239 Feb 21 15:07:01 srv-ubuntu-dev3 sshd[74557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.146.95.239 Feb 21 15:07:01 srv-ubuntu-dev3 sshd[74557]: Invalid user ftpuser from 14.146.95.239 Feb 21 15:07:04 srv-ubuntu-dev3 sshd[74557]: Failed password for invalid user ftpuser from 14.146.95.239 port 54866 ssh2 Feb 21 15:10:11 srv-ubuntu-dev3 sshd[74968]: Invalid user sql from 14.146.95.239 Feb 21 15:10:11 srv-ubuntu-dev3 sshd[74968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.146.95.239 Feb 21 15:10:11 srv-ubuntu-dev3 sshd[74968]: Invalid user sql from 14.146.95.239 Feb 21 15:10:13 srv-ubuntu-dev3 sshd[74968]: Failed password for invalid user sql from 14.146.95.239 port 45196 ssh2 Feb 21 15:13:24 srv-ubuntu-dev3 sshd[75216]: Invalid user ansibleuser from 14.146.95.239 ...	2020-02-21 22:23:06
61.132.102.51	attackspam	firewall-block, port(s): 1433/tcp	2020-02-21 22:22:30
149.202.4.243	attackspambots	Feb 21 19:46:47 areeb-Workstation sshd[15170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.4.243 Feb 21 19:46:49 areeb-Workstation sshd[15170]: Failed password for invalid user test from 149.202.4.243 port 33920 ssh2 ...	2020-02-21 22:33:04
131.221.32.216	attackspambots	Feb 21 15:12:14 ift sshd\[61784\]: Invalid user gituser from 131.221.32.216Feb 21 15:12:16 ift sshd\[61784\]: Failed password for invalid user gituser from 131.221.32.216 port 41068 ssh2Feb 21 15:16:13 ift sshd\[62524\]: Failed password for lp from 131.221.32.216 port 42130 ssh2Feb 21 15:20:05 ift sshd\[63191\]: Invalid user wordpress from 131.221.32.216Feb 21 15:20:07 ift sshd\[63191\]: Failed password for invalid user wordpress from 131.221.32.216 port 43160 ssh2 ...	2020-02-21 22:18:11

Recently Reported IPs

139.196.199.151	215.120.42.132	134.73.141.195	121.123.99.132
86.156.81.238	59.127.239.122	24.46.55.148	185.39.10.66
85.93.12.254	154.117.154.86	5.113.72.155	1.20.224.177
89.236.219.102	88.127.243.203	46.105.95.84	74.132.33.100
73.232.33.168	2.177.103.67	209.141.53.10	47.15.144.228