JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.157.254.15

37.157.254.15

Neutral Activity

20 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

webtropia dedicated Server by http://www.webtropia.com

Usage Type

Data Center/Web Hosting/Transit

ASN

AS24961

Hostname(s)

vps2632522.fastwebserver.de

Domain Name

myloc.de

Country

🇩🇪 Germany

City

Dusseldorf, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

37.157.254.15 has been reported 20 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 37.157.254.15:

This IP address has been reported a total of 20 times from 15 distinct sources. 37.157.254.15 was first reported on July 26th 2021, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-08-23 14:41:04 (4 years ago)	Brute-Force attempts on PBX. Repeated failed logins from non-authorized user, brute-force to SIP on ... show more Brute-Force attempts on PBX. Repeated failed logins from non-authorized user, brute-force to SIP on localhost, port 5061. show less	Brute-Force
🇫🇷 security.rdmc.fr	2022-08-20 17:06:34 (4 years ago)	Automatic report - Port Scan Attack proto:TCP src:57806 dst:5061	Port Scan
🇿🇦 Birdflew	2022-08-20 03:27:37 (4 years ago)	Port scanning	Hacking
🇲🇾 syokadmin	2022-08-20 03:04:21 (4 years ago)	Port Scan detected from 37.157.254.15 (DE/Germany/vps2309063.fastwebserver.de). 11 hits in the las ... show more Port Scan detected from 37.157.254.15 (DE/Germany/vps2309063.fastwebserver.de). 11 hits in the last 11 seconds show less	Port Scan Brute-Force
🇵🇭 Aidar Kamalov	2022-08-17 01:02:45 (4 years ago)	Aug 17 04:57:53 sip /usr/sbin/kamailio[4026705]: NOTICE: {REGISTER 1 1 REGISTER e5f4a389956082e4f7a} ... show more Aug 17 04:57:53 sip /usr/sbin/kamailio[4026705]: NOTICE: {REGISTER 1 1 REGISTER e5f4a389956082e4f7a} <script>: AUTH: REGISTER FAILED from 37.157.254.15 (code: -5) fd=103.150.202.40, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] Aug 17 04:57:53 sip /usr/sbin/kamailio[4026705]: NOTICE: {REGISTER 1 1 REGISTER e5f4a389956082e4f7a} <script>: AUTH: REGISTER FAILED from 37.157.254.15 (code: -5) fd=103.150.202.40, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] Aug 17 04:57:53 sip /usr/sbin/kamailio[4026705]: NOTICE: {REGISTER 1 2 REGISTER e5f4a389956082e4f7a} <script>: AUTH: REGISTER FAILED from 37.157.254.15 (code: -3) fd=103.150.202.40, adu=sip:103.150.202.40:5061, aa=MD5, ar=103.150.202.40, au=888, ad=, aU=888, [email protected] Aug 17 04:57:53 sip /usr/sbin/kamailio[4026705]: NOTICE: {REGISTER 1 2 REGISTER e5f4a389956082e4f7a} <script>: AUTH: REGISTER FAILED from 37.157.254.15 (code: -3) fd=103.150.202 ... show less	Fraud VoIP
🇵🇭 Aidar Kamalov	2022-08-16 23:55:41 (4 years ago)	Aug 17 03:39:24 sip /usr/sbin/kamailio[4026711]: NOTICE: {REGISTER 1 1 REGISTER e5f4a993785944e4f7a} ... show more Aug 17 03:39:24 sip /usr/sbin/kamailio[4026711]: NOTICE: {REGISTER 1 1 REGISTER e5f4a993785944e4f7a} <script>: AUTH: REGISTER FAILED from 37.157.254.15 (code: -5) fd=103.150.202.40, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] Aug 17 03:39:24 sip /usr/sbin/kamailio[4026711]: NOTICE: {REGISTER 1 2 REGISTER e5f4a993785944e4f7a} <script>: AUTH: REGISTER FAILED from 37.157.254.15 (code: -3) fd=103.150.202.40, adu=sip:103.150.202.40:5061, aa=MD5, ar=103.150.202.40, au=1111, ad=, aU=1111, [email protected] Aug 17 03:39:24 sip /usr/sbin/kamailio[4026711]: NOTICE: {REGISTER 1 3 REGISTER e5f4a993785944e4f7a} <script>: AUTH: REGISTER FAILED from 37.157.254.15 (code: -3) fd=103.150.202.40, adu=sip:103.150.202.40:5061, aa=MD5, ar=103.150.202.40, au=1111, ad=, aU=1111, [email protected] Aug 17 03:45:09 sip /usr/sbin/kamailio[4026700]: NOTICE: {REGISTER 1 1 REGISTER e5f4a585160789e4f7a} <script>: AUTH: REGISTER FAILED from 37.157.254.15 (code: - ... show less	Fraud VoIP
🇩🇪 ipcop.net	2022-08-02 15:26:52 (4 years ago)	[2022-08-02 17:26:48] NOTICE[9922] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:chec ... show more [2022-08-02 17:26:48] NOTICE[9922] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '37.157.254.15:62056' (callid: 884291306-477127508-1557458912) - Failed to authenticate [2022-08-02 17:26:48] SECURITY[1528] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2022-08-02T17:26:48.773+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="884291306-477127508-1557458912",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/37.157.254.15/62056",Challenge="1659454007/798bacdc4ccf03a3b11b726293ce5732",Response="75b1f81e4ee8601bda1ee7dc30ddd748",ExpectedResponse="" [2022-08-02 17:26:49] NOTICE[9378] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '37.157.254.15:62056' (callid: 884291306-477127508-1557458912) - Failed to authenticate [2022-08-02 17:26:49] SECURITY[1528] res_security_log.c: SecurityEvent="Cha show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2022-08-02 15:26:52 (4 years ago)	[2022-08-02 17:26:48] NOTICE[9922] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:chec ... show more [2022-08-02 17:26:48] NOTICE[9922] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '37.157.254.15:62056' (callid: 884291306-477127508-1557458912) - Failed to authenticate [2022-08-02 17:26:48] SECURITY[1528] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2022-08-02T17:26:48.773+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="884291306-477127508-1557458912",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/37.157.254.15/62056",Challenge="1659454007/798bacdc4ccf03a3b11b726293ce5732",Response="75b1f81e4ee8601bda1ee7dc30ddd748",ExpectedResponse="" [2022-08-02 17:26:49] NOTICE[9378] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '37.157.254.15:62056' (callid: 884291306-477127508-1557458912) - Failed to authenticate [2022-08-02 17:26:49] SECURITY[1528] res_security_log.c: SecurityEvent="Cha show less	Fraud VoIP Brute-Force
🇨🇴 ingentar	2022-07-31 00:02:35 (4 years ago)	\[2022-07-30 22:55:55\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventT ... show more \[2022-07-30 22:55:55\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T22:55:55.886-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="00946812400139",SessionID="0x7f6fc8046de8",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/37.157.254.15/57038",Challenge="765558f2",ReceivedChallenge="765558f2",ReceivedHash="daefbe9d0b12ce43266e15464a3dfd63"\[2022-07-30 22:56:51\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T22:56:51.598-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="0046812400139",SessionID="0x7f6fc801c928",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/37.157.254.15/54064",Challenge="51a68e76",ReceivedChallenge="51a68e76",ReceivedHash="0159e2aac1fcc63ffdeb6c1904cbd596"\[2022-07-30 22:57:47\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T22:57:47.450-0500",Severity="Error",Service=" ... show less	Fraud VoIP Brute-Force
🇨🇴 ingentar	2022-07-30 23:25:16 (4 years ago)	\[2022-07-30 22:18:58\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventT ... show more \[2022-07-30 22:18:58\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T22:18:58.999-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="90046812400139",SessionID="0x7f6fc82f1bc8",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/37.157.254.15/62395",Challenge="5a7d2516",ReceivedChallenge="5a7d2516",ReceivedHash="8aec08d5bf0a5da1b108167ad9e63da6"\[2022-07-30 22:19:52\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T22:19:52.526-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="00946812400139",SessionID="0x7f6fc8032c38",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/37.157.254.15/59420",Challenge="65e1a973",ReceivedChallenge="65e1a973",ReceivedHash="f72b287df95db71b119b1ca8a99cd94f"\[2022-07-30 22:20:46\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T22:20:46.185-0500",Severity="Error",Service= ... show less	Fraud VoIP Brute-Force
🇨🇴 ingentar	2022-07-30 22:48:24 (4 years ago)	\[2022-07-30 21:41:50\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventT ... show more \[2022-07-30 21:41:50\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T21:41:50.208-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="01146812400139",SessionID="0x7f6fc8120d18",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/37.157.254.15/53431",Challenge="027fa6f6",ReceivedChallenge="027fa6f6",ReceivedHash="e0d5fa52239300674e926fe66fd4d8af"\[2022-07-30 21:42:46\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T21:42:46.551-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="90046812400139",SessionID="0x7f6fc8032c38",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/37.157.254.15/50457",Challenge="758112da",ReceivedChallenge="758112da",ReceivedHash="4a5fe4d2c85392241ae74337d7e4ee40"\[2022-07-30 21:43:42\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T21:43:42.860-0500",Severity="Error",Service= ... show less	Fraud VoIP Brute-Force
🇨🇴 ingentar	2022-07-30 22:11:38 (4 years ago)	\[2022-07-30 21:04:14\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventT ... show more \[2022-07-30 21:04:14\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T21:04:14.813-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="0046812400139",SessionID="0x7f6fc8032c38",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/37.157.254.15/57994",Challenge="4e173c48",ReceivedChallenge="4e173c48",ReceivedHash="4cfb51fb5cf0b8c9a551a57d8eabbb1d"\[2022-07-30 21:05:09\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T21:05:09.661-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="46812400139",SessionID="0x7f6fc8305638",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/37.157.254.15/55020",Challenge="55ed6b50",ReceivedChallenge="55ed6b50",ReceivedHash="40820fa8549bff7c869401329889405b"\[2022-07-30 21:06:05\] SECURITY\[11835\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-07-30T21:06:05.532-0500",Severity="Error",Service="SIP ... show less	Fraud VoIP Brute-Force
Anonymous	2022-07-28 20:45:19 (4 years ago)	Brute force attempt on PBX	Brute-Force Web App Attack
🇪🇸 www.rentelwifi.com	2022-07-26 18:24:48 (4 years ago)	VoIP Brute Force Attack	Fraud VoIP Brute-Force
🇨🇭 Inaxas AG	2022-07-26 18:22:09 (4 years ago)	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitim ... show more Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 3 times between: 26/07/2022 - 21:55 and 27/07/2022 - 00:21. Unauthorized dial attempt: 2 times between: 27/07/2022 - 00:18 and 27/07/2022 - 00:22. show less	Fraud VoIP Port Scan Brute-Force

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 194.153.198.230

🇧🇷 187.18.8.4

🇧🇷 179.96.171.253

🇨🇦 144.217.61.131

🇮🇩 116.66.204.203

🇮🇳 115.240.236.189

🇹🇷 95.0.99.65

🇺🇸 79.110.53.14

🇺🇸 66.132.172.180

🇺🇸 44.245.160.7

🇺🇸 2607:f8b0:4001:c0f::12a

🇺🇸 216.25.89.94

🇧🇪 198.235.24.219

🇰🇿 185.97.114.218

🇨🇱 181.212.34.236

🇫🇮 147.185.133.88

🇧🇩 103.139.236.70

🇧🇩 103.12.205.25

🇷🇺 91.144.158.231

🇪🇸 84.236.153.83