AbuseIPDB » 213.109.151.9

Check an IP Address, Domain Name, or Subnet

e.g. 3.215.79.204, microsoft.com, or 5.188.10.0/24

213.109.151.9 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 82%: ?

82%

ISP	Legaco Networks DU BV
Usage Type	Data Center/Web Hosting/Transit
Domain Name	legaconetworks.nl
Country	Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 213.109.151.9

Whois 213.109.151.9

IP Abuse Reports for 213.109.151.9:

This IP address has been reported a total of 35 times from 14 distinct sources. 213.109.151.9 was first reported on May 8th 2022, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
Inaxas AG	16 hours ago	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Il ... show moreInaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 4 times between: 30/06/2022 - 10:09 and 30/06/2022 - 10:38. Unauthorized dial attempt: 4 times between: 30/06/2022 - 10:11 and 30/06/2022 - 10:39. show less	Fraud VoIP Port Scan Brute-Force
ip.dilenatech.com	21 hours ago	2022-06-27 12:34:07,967 fail2ban.actions [1057]: NOTICE [asterisk-challenge] Ban 213.109.151 ... show more2022-06-27 12:34:07,967 fail2ban.actions [1057]: NOTICE [asterisk-challenge] Ban 213.109.151.9 2022-06-29 04:27:33,723 fail2ban.actions [1057]: NOTICE [asterisk-challenge] Ban 213.109.151.9 2022-06-30 04:32:41,636 fail2ban.actions [1057]: NOTICE [asterisk-challenge] Ban 213.109.151.9 ... show less	Brute-Force SSH
MindSolve	22 hours ago	2022-06-30 05:27:50.364407 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile ... show more2022-06-30 05:27:50.364407 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile 'internal' for [[email protected]] from ip 213.109.151.9 show less	Fraud VoIP Hacking Brute-Force
Aidar Kamalov	23 hours ago	Jun 30 02:23:03 siptest-ulap-net /usr/sbin/kamailio[460925]: NOTICE: {REGISTER 1 1 REGISTER e5f4a121 ... show moreJun 30 02:23:03 siptest-ulap-net /usr/sbin/kamailio[460925]: NOTICE: {REGISTER 1 1 REGISTER e5f4a121772959e4f7a} <script>: AUTH: REGISTER FAILED from 213.109.151.9 (code: -5) fd=143.47.178.158, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] Jun 30 02:23:03 siptest-ulap-net /usr/sbin/kamailio[460927]: NOTICE: {REGISTER 1 2 REGISTER e5f4a121772959e4f7a} <script>: AUTH: REGISTER FAILED from 213.109.151.9 (code: -3) fd=143.47.178.158, adu=sip:143.47.178.158:5060, aa=MD5, ar=143.47.178.158, au=844, ad=, aU=844, [email protected] Jun 30 02:23:03 siptest-ulap-net /usr/sbin/kamailio[460927]: NOTICE: {REGISTER 1 2 REGISTER e5f4a121772959e4f7a} <script>: AUTH: REGISTER FAILED from 213.109.151.9 (code: -3) fd=143.47.178.158, adu=sip:143.47.178.158:5060, aa=MD5, ar=143.47.178.158, au=844, ad=, aU=844, [email protected] ... show less	Fraud VoIP
ipcop.net	29 Jun 2022	[2022-06-29 10:12:00] NOTICE[8088] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from ... show more[2022-06-29 10:12:00] NOTICE[8088] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '213.109.151.9:60783' (callid: e5f4a149431437e4f7a) - Failed to authenticate [2022-06-29 10:12:00] SECURITY[1795] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2022-06-29T10:12:00.859+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="e5f4a149431437e4f7a",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/213.109.151.9/60783",Challenge="1656490320/5eb441f018491f865f7d702e4d18cd54",Response="5611709c22c70e56b5c670fde8ce1d42",ExpectedResponse="" [2022-06-29 10:12:00] NOTICE[8642] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '213.109.151.9:60783' (callid: e5f4a149431437e4f7a) - Failed to authenticate [2022-06-29 10:12:00] SECURITY[1795] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2022-06-29T10:12:00.929+0200",Severity="Error",Service="PJ show less	Fraud VoIP Brute-Force
www.rentelwifi.com	28 Jun 2022	VoIP Brute Force Attack	Fraud VoIP Brute-Force
MindSolve	28 Jun 2022	2022-06-29 05:22:05.284376 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile ... show more2022-06-29 05:22:05.284376 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile 'internal' for [[email protected]] from ip 213.109.151.9 show less	Fraud VoIP Hacking Brute-Force
Aidar Kamalov	28 Jun 2022	Jun 29 03:21:35 siptest-ulap-net /usr/sbin/kamailio[460923]: NOTICE: {REGISTER 1 1 REGISTER e5f4a757 ... show moreJun 29 03:21:35 siptest-ulap-net /usr/sbin/kamailio[460923]: NOTICE: {REGISTER 1 1 REGISTER e5f4a757848252e4f7a} <script>: AUTH: REGISTER FAILED from 213.109.151.9 (code: -5) fd=143.47.178.158, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] Jun 29 03:21:35 siptest-ulap-net /usr/sbin/kamailio[460930]: NOTICE: {REGISTER 1 2 REGISTER e5f4a757848252e4f7a} <script>: AUTH: REGISTER FAILED from 213.109.151.9 (code: -3) fd=143.47.178.158, adu=sip:143.47.178.158:5060, aa=MD5, ar=143.47.178.158, au=649, ad=, aU=649, [email protected] Jun 29 03:21:35 siptest-ulap-net /usr/sbin/kamailio[460930]: NOTICE: {REGISTER 1 2 REGISTER e5f4a757848252e4f7a} <script>: AUTH: REGISTER FAILED from 213.109.151.9 (code: -3) fd=143.47.178.158, adu=sip:143.47.178.158:5060, aa=MD5, ar=143.47.178.158, au=649, ad=, aU=649, [email protected] ... show less	Fraud VoIP
Inaxas AG	27 Jun 2022	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Il ... show moreInaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 4 times between: 27/06/2022 - 23:44 and 28/06/2022 - 00:05. Unauthorized dial attempt: 4 times between: 27/06/2022 - 23:45 and 28/06/2022 - 00:07. show less	Fraud VoIP Port Scan Brute-Force
www.rentelwifi.com	27 Jun 2022	VoIP Brute Force Attack	Fraud VoIP Brute-Force
ip.dilenatech.com	27 Jun 2022	2022-06-27 13:35:11,652 fail2ban.actions [1100]: NOTICE [asterisk] Ban 213.109.151.9 . ... show more2022-06-27 13:35:11,652 fail2ban.actions [1100]: NOTICE [asterisk] Ban 213.109.151.9 ... show less	Brute-Force SSH
sgofferj	27 Jun 2022	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
ipoac.nl	27 Jun 2022	[2022-06-27 13:34:20] NOTICE[95754] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from ... show more[2022-06-27 13:34:20] NOTICE[95754] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '213.109.151.9:60217' (callid: e5f4a772367420e4f7a) - No matching endpoint found show less	Fraud VoIP Brute-Force
MindSolve	27 Jun 2022	2022-06-27 13:33:39.524376 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile ... show more2022-06-27 13:33:39.524376 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile 'internal' for [[email protected]] from ip 213.109.151.9 show less	Fraud VoIP Hacking Brute-Force
Inaxas AG	18 Jun 2022	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Il ... show moreInaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 4 times between: 18/06/2022 - 17:24 and 18/06/2022 - 17:39. Unauthorized dial attempt: 4 times between: 18/06/2022 - 17:25 and 18/06/2022 - 17:40. show less	Fraud VoIP Port Scan Brute-Force