Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: combahton GmbH

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Portscan or hack attempt detected by psad/fwsnort
2020-03-20 23:18:33
Comments on same subnet:
IP Type Details Datetime
45.138.172.125 attackbotsspam
(pop3d) Failed POP3 login from 45.138.172.125 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug  2 16:38:29 ir1 dovecot[3110802]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.138.172.125, lip=5.63.12.44, session=
2020-08-03 00:47:50
45.138.172.252 attackspam
Lines containing failures of 45.138.172.252
/var/log/apache/pucorp.org.log:45.138.172.252 - - [11/Dec/2019:06:02:06 +0100] "GET / HTTP/1.1" 301 691 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt; DTS Agent"


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.138.172.252
2019-12-14 17:03:24
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.138.172.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20422
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.138.172.57.			IN	A

;; AUTHORITY SECTION:
.			250	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032000 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 20 23:18:28 CST 2020
;; MSG SIZE  rcvd: 117
Host info
57.172.138.45.in-addr.arpa domain name pointer .
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
*** Can't find 57.172.138.45.in-addr.arpa.: No answer

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
153.36.236.234 attack
Jul 25 14:47:00 legacy sshd[16200]: Failed password for root from 153.36.236.234 port 27927 ssh2
Jul 25 14:47:05 legacy sshd[16200]: Failed password for root from 153.36.236.234 port 27927 ssh2
Jul 25 14:47:07 legacy sshd[16200]: Failed password for root from 153.36.236.234 port 27927 ssh2
...
2019-07-25 21:20:49
84.15.130.251 attackspam
3389BruteforceFW21
2019-07-25 21:05:37
148.66.49.45 attackbots
HTTP Phishing website, try to steal your mail account data if you type in your mail credentials . Still online.
Server Destination: Hong kong
2019-07-25 20:53:17
178.128.56.123 attackbots
178.128.56.123 - - [25/Jul/2019:14:41:31 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.128.56.123 - - [25/Jul/2019:14:41:34 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.128.56.123 - - [25/Jul/2019:14:41:37 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.128.56.123 - - [25/Jul/2019:14:41:41 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.128.56.123 - - [25/Jul/2019:14:41:46 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.128.56.123 - - [25/Jul/2019:14:41:48 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-07-25 20:49:27
121.182.166.81 attackbots
Jul 25 15:08:30 OPSO sshd\[2573\]: Invalid user kp from 121.182.166.81 port 27143
Jul 25 15:08:30 OPSO sshd\[2573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.182.166.81
Jul 25 15:08:32 OPSO sshd\[2573\]: Failed password for invalid user kp from 121.182.166.81 port 27143 ssh2
Jul 25 15:13:57 OPSO sshd\[3542\]: Invalid user willy from 121.182.166.81 port 22286
Jul 25 15:13:57 OPSO sshd\[3542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.182.166.81
2019-07-25 21:18:09
81.133.73.161 attack
2019-07-25T12:41:48.976808abusebot-2.cloudsearch.cf sshd\[9066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host81-133-73-161.in-addr.btopenworld.com  user=root
2019-07-25 20:50:18
59.175.144.11 attackbots
25.07.2019 13:13:40 Connection to port 8545 blocked by firewall
2019-07-25 21:18:33
103.109.0.242 attackspam
email spam
2019-07-25 20:43:29
211.23.182.115 attack
Jul 25 14:36:06 MainVPS sshd[4092]: Invalid user sftp from 211.23.182.115 port 63483
Jul 25 14:36:06 MainVPS sshd[4092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.23.182.115
Jul 25 14:36:06 MainVPS sshd[4092]: Invalid user sftp from 211.23.182.115 port 63483
Jul 25 14:36:08 MainVPS sshd[4092]: Failed password for invalid user sftp from 211.23.182.115 port 63483 ssh2
Jul 25 14:41:26 MainVPS sshd[4539]: Invalid user admin from 211.23.182.115 port 62841
...
2019-07-25 21:01:41
46.4.84.115 attackspambots
Jul 25 15:05:12 giegler sshd[16498]: Invalid user tax from 46.4.84.115 port 33489
2019-07-25 21:06:06
185.220.101.69 attack
2019-07-25T09:40:36.718552mizuno.rwx.ovh sshd[15419]: Connection from 185.220.101.69 port 34955 on 78.46.61.178 port 22
2019-07-25T09:40:40.044456mizuno.rwx.ovh sshd[15419]: Invalid user admin from 185.220.101.69 port 34955
2019-07-25T09:40:40.051834mizuno.rwx.ovh sshd[15419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.69
2019-07-25T09:40:36.718552mizuno.rwx.ovh sshd[15419]: Connection from 185.220.101.69 port 34955 on 78.46.61.178 port 22
2019-07-25T09:40:40.044456mizuno.rwx.ovh sshd[15419]: Invalid user admin from 185.220.101.69 port 34955
2019-07-25T09:40:41.504406mizuno.rwx.ovh sshd[15419]: Failed password for invalid user admin from 185.220.101.69 port 34955 ssh2
...
2019-07-25 21:28:44
81.22.45.29 attackbots
Port scan on 4 port(s): 3085 3204 3255 9645
2019-07-25 21:12:20
114.235.132.107 attackbotsspam
[Aegis] @ 2019-07-25 13:41:12  0100 -> Sendmail rejected message.
2019-07-25 21:09:29
45.13.39.115 attackbots
imap or smtp brute force
2019-07-25 21:04:00
165.227.212.99 attack
2019-07-25T12:41:36.957346abusebot-5.cloudsearch.cf sshd\[10682\]: Invalid user icaro from 165.227.212.99 port 52086
2019-07-25 20:55:51

Recently Reported IPs

185.158.250.78 167.249.19.28 165.16.166.148 111.199.56.147
185.89.125.176 144.91.80.253 86.227.143.123 94.142.244.16
70.37.83.233 46.64.167.233 221.225.117.92 13.248.151.210
13.127.176.247 117.196.232.54 23.243.228.61 193.56.28.179
104.168.182.234 113.131.156.159 49.85.233.178 128.199.66.137