45.148.121.85 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Sijmen Klaas Bakker

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	TCP (SYN) 45.148.121.85:53422 -> port 8080, len 44	2020-10-14 05:44:48
attack	HEAD /robots.txt HTTP/1.0 403 0 "-" "-"	2020-10-08 01:22:08
attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-10-07 17:29:50

Comments on same subnet:

IP	Type	Details	Datetime
45.148.121.92	attackspambots	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 451	2020-10-14 05:24:35
45.148.121.28	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 29 - port: 80 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:10:58
45.148.121.32	attackspam	[2020-10-06 13:09:11] NOTICE[1182] chan_sip.c: Registration from '"150" ' failed for '45.148.121.32:5773' - Wrong password [2020-10-06 13:09:11] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T13:09:11.390-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="150",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.121.32/5773",Challenge="73d516ec",ReceivedChallenge="73d516ec",ReceivedHash="e073c545cfec2de1896911ae43c17a3d" [2020-10-06 13:09:11] NOTICE[1182] chan_sip.c: Registration from '"150" ' failed for '45.148.121.32:5773' - Wrong password [2020-10-06 13:09:11] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T13:09:11.491-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="150",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.1 ...	2020-10-07 01:53:24
45.148.121.32	attackbotsspam	[2020-10-06 05:25:19] NOTICE[1182] chan_sip.c: Registration from '"1234" ' failed for '45.148.121.32:5341' - Wrong password [2020-10-06 05:25:19] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T05:25:19.856-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.148.121.32/5341",Challenge="18387bf6",ReceivedChallenge="18387bf6",ReceivedHash="4eb1bd0c35882490ad495acc9d170b4e" [2020-10-06 05:25:19] NOTICE[1182] chan_sip.c: Registration from '"1234" ' failed for '45.148.121.32:5341' - Wrong password [2020-10-06 05:25:19] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T05:25:19.985-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-06 17:49:17
45.148.121.92	attackbotsspam	UDP 45.148.121.92:5067 -> port 5060, len 440	2020-10-04 04:40:11
45.148.121.92	attackspam	UDP port : 5060	2020-10-03 20:46:55
45.148.121.92	attackspam	45.148.121.92 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 11, 60	2020-10-03 12:12:41
45.148.121.92	attack	45.148.121.92 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 11, 60	2020-10-03 06:54:22
45.148.121.31	attackspambots	\[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \< ...	2020-10-02 02:17:00
45.148.121.31	attackspam	\[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \' failed for '45.148.121.31:5561' - Wrong password \[Oct 1 20:24:13\] NOTICE\[31025\] chan_sip.c: Registration from '"301" \< ...	2020-10-01 18:24:47
45.148.121.138	attack	firewall-block, port(s): 5060/udp	2020-10-01 07:50:49
45.148.121.138	attack	UDP 45.148.121.138:5122 -> port 5060, len 443	2020-10-01 00:21:08
45.148.121.138	attackspam	10 packets to port 5060	2020-09-30 16:41:47
45.148.121.43	attackbotsspam	Brute force attempt on PBX	2020-09-29 04:40:01
45.148.121.43	attackbots	Brute force attempt on PBX	2020-09-28 20:57:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.121.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51203
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.121.85.			IN	A

;; AUTHORITY SECTION:
.			268	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100700 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 07 17:29:44 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 85.121.148.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 85.121.148.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.118.60.11	attack	Automatic report - Port Scan Attack	2019-11-10 04:33:03
62.234.103.7	attackbots	Nov 9 20:27:05 *** sshd[23140]: User root from 62.234.103.7 not allowed because not listed in AllowUsers	2019-11-10 04:36:13
122.115.235.254	attackspam	Nov 9 17:07:28 MK-Soft-Root2 sshd[16558]: Failed password for root from 122.115.235.254 port 53154 ssh2 ...	2019-11-10 04:57:33
58.216.250.227	attack	Nov 9 17:58:37 vps666546 sshd\[32648\]: Invalid user RPM from 58.216.250.227 port 48704 Nov 9 17:58:37 vps666546 sshd\[32648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.216.250.227 Nov 9 17:58:40 vps666546 sshd\[32648\]: Failed password for invalid user RPM from 58.216.250.227 port 48704 ssh2 Nov 9 18:03:10 vps666546 sshd\[361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.216.250.227 user=root Nov 9 18:03:12 vps666546 sshd\[361\]: Failed password for root from 58.216.250.227 port 1758 ssh2 ...	2019-11-10 04:40:31
197.156.80.4	attack	Unauthorized connection attempt from IP address 197.156.80.4 on Port 445(SMB)	2019-11-10 04:50:46
111.231.89.197	attack	Nov 9 17:15:32 [munged] sshd[17695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.89.197	2019-11-10 04:45:40
45.172.70.77	attackspam	Unauthorized connection attempt from IP address 45.172.70.77 on Port 445(SMB)	2019-11-10 04:40:04
103.126.139.50	attackspam	1573323679 - 11/09/2019 19:21:19 Host: 103.126.139.50/103.126.139.50 Port: 5060 UDP Blocked	2019-11-10 04:35:30
172.106.128.212	attackbots	TCP Port Scanning	2019-11-10 04:26:54
180.250.248.169	attackbotsspam	Nov 9 06:05:55 web9 sshd\[13597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.248.169 user=root Nov 9 06:05:58 web9 sshd\[13597\]: Failed password for root from 180.250.248.169 port 43642 ssh2 Nov 9 06:10:45 web9 sshd\[14200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.248.169 user=root Nov 9 06:10:47 web9 sshd\[14200\]: Failed password for root from 180.250.248.169 port 58898 ssh2 Nov 9 06:15:38 web9 sshd\[14808\]: Invalid user fw from 180.250.248.169	2019-11-10 04:39:13
79.126.114.126	attackspam	Unauthorized connection attempt from IP address 79.126.114.126 on Port 445(SMB)	2019-11-10 04:55:17
116.0.49.252	attack	Unauthorized connection attempt from IP address 116.0.49.252 on Port 445(SMB)	2019-11-10 04:51:59
222.186.30.59	attackbots	Nov 9 21:21:18 SilenceServices sshd[23595]: Failed password for root from 222.186.30.59 port 45100 ssh2 Nov 9 21:21:21 SilenceServices sshd[23595]: Failed password for root from 222.186.30.59 port 45100 ssh2 Nov 9 21:21:22 SilenceServices sshd[23642]: Failed password for root from 222.186.30.59 port 11673 ssh2	2019-11-10 04:29:53
181.126.43.124	attackspam	Unauthorized connection attempt from IP address 181.126.43.124 on Port 445(SMB)	2019-11-10 04:32:38
194.230.155.214	attackbotsspam	''	2019-11-10 04:46:02

Recently Reported IPs

183.16.101.199	82.196.0.108	58.87.125.203	2.57.122.183
200.100.14.65	111.125.0.104	89.97.157.120	64.68.115.71
226.180.99.47	93.95.192.73	188.166.232.4	142.11.227.94
93.80.48.181	207.154.194.3	85.6.179.177	58.218.198.153
20.185.66.89	83.139.129.12	61.174.243.9	125.124.72.157