Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Sijmen Klaas Bakker

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
1900/udp 11211/udp 123/udp...
[2020-06-28/08-11]95pkt,3pt.(udp)
2020-08-11 13:58:40
attackbots
 UDP 45.148.121.84:57639 -> port 123, len 36
2020-07-05 18:09:08
Comments on same subnet:
IP Type Details Datetime
45.148.121.85 attackbotsspam
 TCP (SYN) 45.148.121.85:53422 -> port 8080, len 44
2020-10-14 05:44:48
45.148.121.92 attackspambots
ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 451
2020-10-14 05:24:35
45.148.121.28 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 29 - port: 80 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:10:58
45.148.121.85 attack
HEAD /robots.txt HTTP/1.0 403 0 "-" "-"
2020-10-08 01:22:08
45.148.121.85 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-07 17:29:50
45.148.121.32 attackspam
[2020-10-06 13:09:11] NOTICE[1182] chan_sip.c: Registration from '"150" ' failed for '45.148.121.32:5773' - Wrong password
[2020-10-06 13:09:11] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T13:09:11.390-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="150",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.121.32/5773",Challenge="73d516ec",ReceivedChallenge="73d516ec",ReceivedHash="e073c545cfec2de1896911ae43c17a3d"
[2020-10-06 13:09:11] NOTICE[1182] chan_sip.c: Registration from '"150" ' failed for '45.148.121.32:5773' - Wrong password
[2020-10-06 13:09:11] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T13:09:11.491-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="150",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.1
...
2020-10-07 01:53:24
45.148.121.32 attackbotsspam
[2020-10-06 05:25:19] NOTICE[1182] chan_sip.c: Registration from '"1234" ' failed for '45.148.121.32:5341' - Wrong password
[2020-10-06 05:25:19] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T05:25:19.856-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.121.32/5341",Challenge="18387bf6",ReceivedChallenge="18387bf6",ReceivedHash="4eb1bd0c35882490ad495acc9d170b4e"
[2020-10-06 05:25:19] NOTICE[1182] chan_sip.c: Registration from '"1234" ' failed for '45.148.121.32:5341' - Wrong password
[2020-10-06 05:25:19] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T05:25:19.985-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45
...
2020-10-06 17:49:17
45.148.121.92 attackbotsspam
 UDP 45.148.121.92:5067 -> port 5060, len 440
2020-10-04 04:40:11
45.148.121.92 attackspam
UDP port : 5060
2020-10-03 20:46:55
45.148.121.92 attackspam
45.148.121.92 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 11, 60
2020-10-03 12:12:41
45.148.121.92 attack
45.148.121.92 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 11, 60
2020-10-03 06:54:22
45.148.121.31 attackspambots
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \<
...
2020-10-02 02:17:00
45.148.121.31 attackspam
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password
\[Oct  1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \<
...
2020-10-01 18:24:47
45.148.121.138 attack
firewall-block, port(s): 5060/udp
2020-10-01 07:50:49
45.148.121.138 attack
 UDP 45.148.121.138:5122 -> port 5060, len 443
2020-10-01 00:21:08
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.121.84
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10154
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.121.84.			IN	A

;; AUTHORITY SECTION:
.			217	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070500 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 05 18:09:01 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 84.121.148.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 84.121.148.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
1.52.101.107 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 06:33:03,203 INFO [amun_request_handler] PortScan Detected on Port: 445 (1.52.101.107)
2019-08-07 21:18:13
198.108.67.44 attack
" "
2019-08-07 20:47:35
23.129.64.166 attack
Aug  7 10:16:39 ip-172-31-1-72 sshd\[406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.166  user=root
Aug  7 10:16:41 ip-172-31-1-72 sshd\[406\]: Failed password for root from 23.129.64.166 port 29195 ssh2
Aug  7 10:16:47 ip-172-31-1-72 sshd\[408\]: Invalid user apc from 23.129.64.166
Aug  7 10:16:47 ip-172-31-1-72 sshd\[408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.166
Aug  7 10:16:48 ip-172-31-1-72 sshd\[408\]: Failed password for invalid user apc from 23.129.64.166 port 49460 ssh2
2019-08-07 20:55:05
218.92.0.141 attack
SSH bruteforce
2019-08-07 21:15:20
58.56.9.5 attackspambots
Aug  7 06:59:43 xtremcommunity sshd\[21240\]: Invalid user thiago from 58.56.9.5 port 55728
Aug  7 06:59:43 xtremcommunity sshd\[21240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.9.5
Aug  7 06:59:45 xtremcommunity sshd\[21240\]: Failed password for invalid user thiago from 58.56.9.5 port 55728 ssh2
Aug  7 07:04:51 xtremcommunity sshd\[21944\]: Invalid user ozrt from 58.56.9.5 port 47742
Aug  7 07:04:51 xtremcommunity sshd\[21944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.9.5
...
2019-08-07 21:25:33
81.44.65.195 attack
Aug  7 17:59:34 vibhu-HP-Z238-Microtower-Workstation sshd\[14849\]: Invalid user sef from 81.44.65.195
Aug  7 17:59:34 vibhu-HP-Z238-Microtower-Workstation sshd\[14849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.44.65.195
Aug  7 17:59:36 vibhu-HP-Z238-Microtower-Workstation sshd\[14849\]: Failed password for invalid user sef from 81.44.65.195 port 40893 ssh2
Aug  7 18:04:23 vibhu-HP-Z238-Microtower-Workstation sshd\[14979\]: Invalid user zsofia from 81.44.65.195
Aug  7 18:04:23 vibhu-HP-Z238-Microtower-Workstation sshd\[14979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.44.65.195
...
2019-08-07 20:45:34
111.93.200.50 attackspam
Aug  7 09:04:47 eventyay sshd[4592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.200.50
Aug  7 09:04:49 eventyay sshd[4592]: Failed password for invalid user informatica from 111.93.200.50 port 35114 ssh2
Aug  7 09:10:30 eventyay sshd[6095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.200.50
...
2019-08-07 21:26:45
132.232.74.106 attackbotsspam
Aug  7 14:43:35 vps691689 sshd[24162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.74.106
Aug  7 14:43:36 vps691689 sshd[24162]: Failed password for invalid user denise from 132.232.74.106 port 59336 ssh2
...
2019-08-07 20:53:10
202.91.87.66 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 06:37:32,085 INFO [amun_request_handler] PortScan Detected on Port: 445 (202.91.87.66)
2019-08-07 20:52:12
81.23.3.232 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 06:35:10,334 INFO [amun_request_handler] PortScan Detected on Port: 445 (81.23.3.232)
2019-08-07 20:58:06
159.203.111.100 attackspambots
SSH bruteforce (Triggered fail2ban)
2019-08-07 21:07:49
220.92.16.66 attack
Aug  7 07:53:43 mail sshd\[15830\]: Failed password for invalid user git from 220.92.16.66 port 51038 ssh2
Aug  7 08:37:00 mail sshd\[16410\]: Invalid user matias from 220.92.16.66 port 48510
Aug  7 08:37:00 mail sshd\[16410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.92.16.66
...
2019-08-07 21:23:47
178.212.228.83 attack
[portscan] Port scan
2019-08-07 20:50:23
177.36.58.182 attackbotsspam
2019-08-07T13:00:52.020955abusebot-6.cloudsearch.cf sshd\[20082\]: Invalid user nero from 177.36.58.182 port 40966
2019-08-07 21:18:57
220.176.196.214 attack
Time:     Wed Aug  7 05:55:34 2019 -0400
IP:       220.176.196.214 (CN/China/214.196.176.220.broad.sr.jx.dynamic.163data.com.cn)
Failures: 10 (ftpd)
Interval: 3600 seconds
Blocked:  Permanent Block
2019-08-07 21:19:54

Recently Reported IPs

14.199.43.109 41.33.40.67 81.163.8.79 109.100.159.102
123.20.57.155 102.189.251.83 181.79.56.31 123.20.0.81
51.91.239.11 218.58.215.46 134.15.235.113 14.231.87.238
161.35.9.189 132.209.100.55 46.109.212.150 39.181.228.74
85.103.185.220 45.93.99.226 72.116.123.228 165.227.92.35