Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.197.72.48 attack
Aug 29 10:19:30 dallas01 sshd[23262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.72.48
Aug 29 10:19:32 dallas01 sshd[23262]: Failed password for invalid user steam from 138.197.72.48 port 37756 ssh2
Aug 29 10:24:46 dallas01 sshd[24018]: Failed password for root from 138.197.72.48 port 53062 ssh2
2020-01-28 07:12:00
138.197.72.48 attack
2019-08-30T00:46:40.087209wiz-ks3 sshd[8637]: Invalid user steam from 138.197.72.48 port 32900
2019-08-30T00:46:40.089424wiz-ks3 sshd[8637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.72.48
2019-08-30T00:46:40.087209wiz-ks3 sshd[8637]: Invalid user steam from 138.197.72.48 port 32900
2019-08-30T00:46:42.000491wiz-ks3 sshd[8637]: Failed password for invalid user steam from 138.197.72.48 port 32900 ssh2
2019-08-30T00:51:25.071104wiz-ks3 sshd[8660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.72.48  user=root
2019-08-30T00:51:27.112865wiz-ks3 sshd[8660]: Failed password for root from 138.197.72.48 port 48218 ssh2
2019-08-30T00:56:31.370104wiz-ks3 sshd[8667]: Invalid user admin from 138.197.72.48 port 35284
2019-08-30T00:56:31.372240wiz-ks3 sshd[8667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.72.48
2019-08-30T00:56:31.370104wiz-ks3 sshd[8667]: Invalid user
2019-08-31 09:45:01
138.197.72.48 attack
Aug 30 18:35:26 *** sshd[8194]: Failed password for invalid user steam from 138.197.72.48 port 56356 ssh2
Aug 30 18:45:23 *** sshd[8509]: Failed password for invalid user admin from 138.197.72.48 port 58736 ssh2
2019-08-31 04:03:46
138.197.72.48 attackspam
"Fail2Ban detected SSH brute force attempt"
2019-08-30 16:31:40
138.197.72.48 attackspambots
SSH Brute-Force attacks
2019-08-28 12:38:34
138.197.72.48 attack
$f2bV_matches
2019-08-26 03:17:56
138.197.72.48 attack
Triggered by Fail2Ban at Vostok web server
2019-08-25 11:27:19
138.197.72.48 attack
Aug 24 20:18:54 ns37 sshd[7830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.72.48
Aug 24 20:18:56 ns37 sshd[7830]: Failed password for invalid user adm from 138.197.72.48 port 50628 ssh2
Aug 24 20:23:21 ns37 sshd[8064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.72.48
2019-08-25 02:42:51
138.197.72.48 attackbotsspam
Aug 23 14:25:15 SilenceServices sshd[29254]: Failed password for root from 138.197.72.48 port 51766 ssh2
Aug 23 14:29:54 SilenceServices sshd[825]: Failed password for root from 138.197.72.48 port 38840 ssh2
2019-08-23 20:55:27
138.197.72.48 attackbotsspam
$f2bV_matches
2019-08-21 09:19:58
138.197.72.48 attack
Invalid user user from 138.197.72.48 port 52834
2019-08-18 08:06:15
138.197.72.48 attackspambots
Aug 17 04:28:07 cvbmail sshd\[2530\]: Invalid user user from 138.197.72.48
Aug 17 04:28:07 cvbmail sshd\[2530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.72.48
Aug 17 04:28:09 cvbmail sshd\[2530\]: Failed password for invalid user user from 138.197.72.48 port 56820 ssh2
2019-08-17 10:29:52
138.197.72.48 attackspam
SSH Brute-Force reported by Fail2Ban
2019-08-13 16:20:45
138.197.72.48 attack
Brute force SMTP login attempted.
...
2019-08-10 03:03:40
138.197.72.48 attackbotsspam
2019-07-29T04:38:16.475421abusebot-7.cloudsearch.cf sshd\[19315\]: Invalid user hadoop from 138.197.72.48 port 48722
2019-07-29 14:08:34
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.72.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4402
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.72.25.			IN	A

;; AUTHORITY SECTION:
.			265	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 21:23:15 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 25.72.197.138.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 25.72.197.138.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
187.178.145.130 attackbots
port 23
2020-01-28 08:06:22
222.220.153.185 attackbots
Unauthorized connection attempt detected from IP address 222.220.153.185 to port 6656 [T]
2020-01-28 08:13:05
125.214.49.226 attackspambots
445/tcp
[2020-01-27]1pkt
2020-01-28 07:41:50
91.127.68.3 attackspam
2019-11-24 14:45:17 1iYsCR-0003Hu-SQ SMTP connection from adsl-dyn3.91-127-68.t-com.sk \[91.127.68.3\]:49952 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-11-24 14:45:32 1iYsCe-0003I9-8S SMTP connection from adsl-dyn3.91-127-68.t-com.sk \[91.127.68.3\]:49995 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-11-24 14:45:38 1iYsCm-0003IH-V7 SMTP connection from adsl-dyn3.91-127-68.t-com.sk \[91.127.68.3\]:10050 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-01-28 08:01:56
63.81.87.133 attackspam
Jan 27 20:38:31 grey postfix/smtpd\[32484\]: NOQUEUE: reject: RCPT from situate.jcnovel.com\[63.81.87.133\]: 554 5.7.1 Service unavailable\; Client host \[63.81.87.133\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[63.81.87.133\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-01-28 07:44:02
114.238.91.94 attackspam
Unauthorized connection attempt detected from IP address 114.238.91.94 to port 6656 [T]
2020-01-28 08:20:23
187.189.15.77 attack
Unauthorized connection attempt detected from IP address 187.189.15.77 to port 2220 [J]
2020-01-28 07:58:22
223.155.37.70 attack
Connection to port 1434 blocked by firewall udp
2020-01-28 08:17:50
91.127.50.164 attackbotsspam
2019-10-23 13:47:09 1iNF6b-0001nP-54 SMTP connection from adsl-dyn164.91-127-50.t-com.sk \[91.127.50.164\]:31210 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-10-23 13:47:32 1iNF6x-0001nn-Ox SMTP connection from adsl-dyn164.91-127-50.t-com.sk \[91.127.50.164\]:31386 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-10-23 13:47:47 1iNF7C-0001oE-88 SMTP connection from adsl-dyn164.91-127-50.t-com.sk \[91.127.50.164\]:31534 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-01-28 08:03:20
187.162.59.37 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-01-28 08:09:54
121.201.107.156 attack
Unauthorized connection attempt detected from IP address 121.201.107.156 to port 445 [T]
2020-01-28 08:17:50
91.171.25.9 attack
2019-07-07 14:07:53 1hk5xR-0007k1-81 SMTP connection from 91-171-25-9.subs.proxad.net \[91.171.25.9\]:43252 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-07 14:08:04 1hk5xb-0007kO-5h SMTP connection from 91-171-25-9.subs.proxad.net \[91.171.25.9\]:43258 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-07 14:08:10 1hk5xh-0007kR-9p SMTP connection from 91-171-25-9.subs.proxad.net \[91.171.25.9\]:43264 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-01-28 07:43:30
141.98.80.141 attack
Unauthorized SSH login attempts
2020-01-28 07:53:36
91.138.216.55 attack
2019-02-27 22:03:37 H=static091138216055.access.hol.gr \[91.138.216.55\]:47497 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-02-27 22:03:56 H=static091138216055.access.hol.gr \[91.138.216.55\]:47689 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-02-27 22:04:07 H=static091138216055.access.hol.gr \[91.138.216.55\]:47814 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...
2020-01-28 07:50:55
164.115.3.17 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-28 08:11:37

Recently Reported IPs

35.230.130.45 115.201.35.231 202.62.52.174 190.151.159.21
114.122.180.212 60.13.7.235 211.36.141.48 177.249.168.204
196.219.62.9 27.45.91.55 179.109.3.153 120.229.113.201
187.233.34.46 78.154.53.7 77.239.22.153 123.240.151.115
185.89.101.50 59.62.174.55 42.117.83.14 1.169.177.19