Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Sijmen Klaas Bakker

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Port scanning [3 denied]
2020-08-28 18:48:04
Comments on same subnet:
IP Type Details Datetime
45.148.121.85 attackbotsspam
 TCP (SYN) 45.148.121.85:53422 -> port 8080, len 44
2020-10-14 05:44:48
45.148.121.92 attackspambots
ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 451
2020-10-14 05:24:35
45.148.121.28 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 29 - port: 80 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:10:58
45.148.121.85 attack
HEAD /robots.txt HTTP/1.0 403 0 "-" "-"
2020-10-08 01:22:08
45.148.121.85 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-07 17:29:50
45.148.121.32 attackspam
[2020-10-06 13:09:11] NOTICE[1182] chan_sip.c: Registration from '"150" ' failed for '45.148.121.32:5773' - Wrong password
[2020-10-06 13:09:11] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T13:09:11.390-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="150",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.121.32/5773",Challenge="73d516ec",ReceivedChallenge="73d516ec",ReceivedHash="e073c545cfec2de1896911ae43c17a3d"
[2020-10-06 13:09:11] NOTICE[1182] chan_sip.c: Registration from '"150" ' failed for '45.148.121.32:5773' - Wrong password
[2020-10-06 13:09:11] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T13:09:11.491-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="150",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.1
...
2020-10-07 01:53:24
45.148.121.32 attackbotsspam
[2020-10-06 05:25:19] NOTICE[1182] chan_sip.c: Registration from '"1234" ' failed for '45.148.121.32:5341' - Wrong password
[2020-10-06 05:25:19] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T05:25:19.856-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.121.32/5341",Challenge="18387bf6",ReceivedChallenge="18387bf6",ReceivedHash="4eb1bd0c35882490ad495acc9d170b4e"
[2020-10-06 05:25:19] NOTICE[1182] chan_sip.c: Registration from '"1234" ' failed for '45.148.121.32:5341' - Wrong password
[2020-10-06 05:25:19] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T05:25:19.985-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45
...
2020-10-06 17:49:17
45.148.121.92 attackbotsspam
 UDP 45.148.121.92:5067 -> port 5060, len 440
2020-10-04 04:40:11
45.148.121.92 attackspam
UDP port : 5060
2020-10-03 20:46:55
45.148.121.92 attackspam
45.148.121.92 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 11, 60
2020-10-03 12:12:41
45.148.121.92 attack
45.148.121.92 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 11, 60
2020-10-03 06:54:22
45.148.121.31 attackspambots
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \<
...
2020-10-02 02:17:00
45.148.121.31 attackspam
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \<
...
2020-10-01 18:24:47
45.148.121.138 attack
firewall-block, port(s): 5060/udp
2020-10-01 07:50:49
45.148.121.138 attack
 UDP 45.148.121.138:5122 -> port 5060, len 443
2020-10-01 00:21:08
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.121.82
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 634
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.121.82.			IN	A

;; AUTHORITY SECTION:
.			329	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082800 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 28 18:47:57 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 82.121.148.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 82.121.148.45.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
83.97.20.30 attack
"GET ..."
2020-10-08 05:47:57
106.53.207.227 attack
Oct  6 21:37:58 rush sshd[12958]: Failed password for root from 106.53.207.227 port 58406 ssh2
Oct  6 21:42:06 rush sshd[13072]: Failed password for root from 106.53.207.227 port 48526 ssh2
...
2020-10-08 05:32:21
107.170.20.247 attack
Banned for a week because repeated abuses, for example SSH, but not only
2020-10-08 05:18:18
132.255.20.250 attackbots
Port scan on 5 port(s): 8933 9833 23389 33387 33389
2020-10-08 05:40:45
91.201.246.83 attackspam
1602017035 - 10/06/2020 22:43:55 Host: 91.201.246.83/91.201.246.83 Port: 445 TCP Blocked
2020-10-08 05:43:47
51.68.196.163 attack
$f2bV_matches
2020-10-08 05:25:27
139.155.53.77 attackbotsspam
SSH/22 MH Probe, BF, Hack -
2020-10-08 05:45:43
138.197.66.68 attackbotsspam
$f2bV_matches
2020-10-08 05:54:27
202.80.34.47 attack
Unauthorized admin access - /admin/css/datepicker.css?v=913-new-social-icons34f0b7ad653faf15
2020-10-08 05:52:10
45.143.221.101 attackspambots
TCP port : 8089
2020-10-08 05:48:13
220.86.96.97 attackspambots
fail2ban -- 220.86.96.97
...
2020-10-08 05:39:53
49.233.180.165 attack
Oct  7 20:54:52 host sshd[30719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.180.165  user=root
Oct  7 20:54:54 host sshd[30719]: Failed password for root from 49.233.180.165 port 39298 ssh2
...
2020-10-08 05:45:05
2a01:4f8:c2c:97c1::1 attack
[WedOct0723:12:05.7271442020][:error][pid23678:tid47724261132032][client2a01:4f8:c2c:97c1::1:42670][client2a01:4f8:c2c:97c1::1]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"218"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"www.nonsolotende.ch"][uri"/wp-content/plugins/wp-file-manager/readme.txt"][unique_id"X34vJV817Y3M8cNF2tz2rwAAAI4"][WedOct0723:12:06.8456712020][:error][pid23678:tid47724261132032][client2a01:4f8:c2c:97c1::1:42670][client2a01:4f8:c2c:97c1::1]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"218"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disableth
2020-10-08 05:29:44
192.35.169.28 attackbotsspam
[portscan] tcp/1433 [MsSQL]
[portscan] tcp/21 [FTP]
[portscan] tcp/22 [SSH]
[MySQL inject/portscan] tcp/3306 
[scan/connect: 5 time(s)]
*(RWIN=1024)(10061547)
2020-10-08 05:27:44
159.203.66.114 attackbotsspam
2020-10-07T16:27:54.4652451495-001 sshd[18447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.66.114  user=root
2020-10-07T16:27:56.1837661495-001 sshd[18447]: Failed password for root from 159.203.66.114 port 50780 ssh2
2020-10-07T16:31:40.4583251495-001 sshd[18668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.66.114  user=root
2020-10-07T16:31:42.2072881495-001 sshd[18668]: Failed password for root from 159.203.66.114 port 56236 ssh2
2020-10-07T16:35:31.5633731495-001 sshd[18854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.66.114  user=root
2020-10-07T16:35:33.3575381495-001 sshd[18854]: Failed password for root from 159.203.66.114 port 33462 ssh2
...
2020-10-08 05:39:03

Recently Reported IPs

121.46.232.130 223.78.120.62 89.248.172.237 182.75.51.238
218.51.205.132 227.212.212.168 48.40.0.125 51.161.54.149
199.195.253.109 122.117.158.120 231.80.136.172 134.122.53.187
118.39.152.132 95.178.157.241 123.170.146.181 59.188.23.79
75.142.99.96 161.97.98.210 146.82.41.79 187.212.108.232