JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.148.135.143

37.148.135.143 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	Trixit Holding B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210356
Domain Name	trixit.nl
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.148.135.143

Whois 37.148.135.143

IP Abuse Reports for 37.148.135.143:

This IP address has been reported a total of 26 times from 20 distinct sources. 37.148.135.143 was first reported on August 21st 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇵 radheykrishna.com.np	2026-09-28 00:33:17 (2 days ago)	Sep 28 06:18:16 kernel: [1004693.350129] [UFW BLOCK] IN=ens160 OUT= SRC=37.148.135.143 LEN=40 TOS=0x ... show more Sep 28 06:18:16 kernel: [1004693.350129] [UFW BLOCK] IN=ens160 OUT= SRC=37.148.135.143 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=35769 PROTO=TCP SPT=59577 DPT=13015 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 phil2k	2026-09-27 21:34:03 (2 days ago)	Firewall: Within 2026-09-27 15:06:32 - 2026-09-27 15:41:29 CEST(+0200) identified: unallowed access ... show more Firewall: Within 2026-09-27 15:06:32 - 2026-09-27 15:41:29 CEST(+0200) identified: unallowed access from 37.148.135.143 on uncommon port/s: 13015(tcp:13015),13013(tcp:13013) (2 trials) Fail2ban: Within 2026-09-27 15:06:32 - 2026-09-27 15:41:30 CEST(+0200) banned: 4 times by fail2ban[firewall]; 4 times by fail2ban[recidive] show less	Port Scan Brute-Force
🇮🇳 Mr.Singh	2026-09-27 21:30:30 (2 days ago)	NFT blocked 37.148.135.143 after 2 rejections on 28-Sep-2026.	Port Scan Brute-Force
Anonymous	2026-09-27 20:07:04 (2 days ago)	13013/tcp (1 or more attempts)	Port Scan
Anonymous	2026-09-27 19:46:56 (2 days ago)	[TCP/13015] Unsolicited connection attempt on a port with no legitimate public service.	Port Scan Hacking
🇬🇧 Nov	2026-09-27 17:22:50 (3 days ago)	Unauthorized access attempt (tcp/13013)	Port Scan
🇦🇺 LiftUp Hosting	2026-09-27 14:52:01 (3 days ago)	Honeypot hit: HTTP/1.1 request on 13015 GET /cgi-bin/sendsms?user=kannel&pass=kannel&to=%2B14807907 ... show more Honeypot hit: HTTP/1.1 request on 13015 GET /cgi-bin/sendsms?user=kannel&pass=kannel&to=%2B14807907704&text=Achado+localmente.+Empresa%3A+India103&from=SMS User-Agent: python-requests/2.31.0 Accept: / Accept-Encoding: gzip, deflate, zstd; 13015 [1] TCP show less	Hacking Bad Web Bot
🇩🇪 David Ferneding	2026-09-27 14:42:46 (3 days ago)	Blocked by UFW (TCP on 13015) Source port: 54030 TTL: 247 Packet length: 40 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 13015) Source port: 54030 TTL: 247 Packet length: 40 TOS: 0x00 This report (for 37.148.135.143) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-09-27 14:32:46 (3 days ago)	Honeypot hit: HTTP/1.1 request on 13013 GET /cgi-bin/sendsms?user=kannel&pass=kannel&to=%2B14807907 ... show more Honeypot hit: HTTP/1.1 request on 13013 GET /cgi-bin/sendsms?user=kannel&pass=kannel&to=%2B14807907704&text=Achado+localmente.+Empresa%3A+India103&from=SMS User-Agent: python-requests/2.31.0 Accept: / Accept-Encoding: gzip, deflate, zstd; 13013 [1] TCP show less	Web App Attack
🇩🇪 phil2k	2026-09-27 13:41:33 (3 days ago)	fail2ban:firewall:2026-09-27T15:06:32.481293+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-09-27T15:06:32.481293+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=37.148.135.143 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=15478 PROTO=TCP SPT=43992 DPT=13015 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-27T15:41:29.836273+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=37.148.135.143 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=36925 PROTO=TCP SPT=43992 DPT=13013 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇫🇷 Kejult	2026-09-27 12:22:11 (3 days ago)	Honeypot Finding: combined 3 reportable finding type(s) for this source IP; observed 2026-09-27T10:3 ... show more Honeypot Finding: combined 3 reportable finding type(s) for this source IP; observed 2026-09-27T10:39:49.000Z to 2026-09-27T12:22:11.000Z. Honeypot Finding: repeated TCP service probing on TCP/13000 (service); 3 application-level events across 3 source port(s). Sensor(s): Honeytrap. \| Honeypot Finding: repeated TCP service probing on TCP/13013 (service); 3 application-level events across 3 source port(s). Sensor(s): Honeytrap. \| Honeypot Finding: repeated TCP service probing on TCP/13015 (service); 7 application-level events across 7 source port(s). Sensor(s): Honeytrap. show less	Port Scan
🇫🇮 6kilowatti	2026-09-27 12:21:26 (3 days ago)	2026-09-27T15:21:25.912524+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-09-27T15:21:25.912524+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=37.148.135.143 DST=5.61.88.83 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=34506 PROTO=TCP SPT=48182 DPT=13013 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Kejult	2026-09-27 11:12:52 (3 days ago)	Honeypot Finding: combined 2 reportable finding type(s) for this source IP; observed 2026-09-27T10:0 ... show more Honeypot Finding: combined 2 reportable finding type(s) for this source IP; observed 2026-09-27T10:05:44.000Z to 2026-09-27T11:12:52.000Z. Honeypot Finding: verified TCP multi-port scan/probing; 9 application-level events across 3 target ports and 9 source port(s). Ports: 13000/service, 13015/service, 13013/service. Sensors: Honeytrap. \| Honeypot Finding: repeated TCP service probing on TCP/13013 (service); 4 application-level events across 4 source port(s). Sensor(s): Honeytrap. show less	Port Scan
Anonymous	2026-09-27 10:44:48 (3 days ago)	13015/tcp (1 or more attempts)	Port Scan
🇪🇸 raiolanetworks.com	2026-09-27 10:37:01 (3 days ago)	Honeypot detection: port scan / service probe. 4 events observed. 3 distinct ports targeted. Reporte ... show more Honeypot detection: port scan / service probe. 4 events observed. 3 distinct ports targeted. Reported automatically from a honeypot sensor. show less	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 149.202.60.122

🇲🇲 103.59.163.135

🇮🇩 103.59.94.173

🇮🇩 103.59.94.117

🇲🇲 103.59.163.134

🇲🇲 103.59.163.133

🇲🇲 103.59.163.132

🇮🇩 103.59.161.86

🇷🇺 46.174.49.211

🇺🇸 40.67.178.198

🇨🇳 14.103.118.150

🇨🇱 191.115.123.73

🇺🇸 181.215.65.175

🇨🇳 180.76.98.88

🇺🇸 174.103.66.161

🇺🇸 152.32.151.39

🇸🇬 145.223.144.76

🇺🇸 104.234.32.228

🇮🇩 103.59.160.195

🇵🇰 103.57.224.219