Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
45.138.72.212 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-25 06:28:12
45.138.72.167 attackspam
Port probing on unauthorized port 24272
2020-09-20 03:46:23
45.138.72.167 attack
Port probing on unauthorized port 24272
2020-09-19 19:50:54
45.138.72.83 attackspambots
SSH BruteForce Attack
2020-08-31 18:25:48
45.138.72.163 attackbotsspam
Aug 24 13:58:50 colin sshd[18343]: Address 45.138.72.163 maps to brabus.club, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Aug 24 13:58:50 colin sshd[18343]: Invalid user meo from 45.138.72.163
Aug 24 13:58:52 colin sshd[18343]: Failed password for invalid user meo from 45.138.72.163 port 46012 ssh2
Aug 24 14:03:00 colin sshd[18510]: Address 45.138.72.163 maps to brabus.club, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Aug 24 14:03:00 colin sshd[18510]: Invalid user vfp from 45.138.72.163
Aug 24 14:03:02 colin sshd[18510]: Failed password for invalid user vfp from 45.138.72.163 port 53358 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.138.72.163
2020-08-27 17:12:48
45.138.72.253 attackspambots
Postfix SASL Login attempt. IP autobanned
2020-08-27 02:54:06
45.138.72.22 attackbots
Icarus honeypot on github
2020-08-10 23:48:17
45.138.72.253 attack
Jul 30 14:05:33 mail postfix/smtps/smtpd[7709]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 30 14:07:32 mail postfix/smtps/smtpd[7713]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 30 14:07:43 mail postfix/smtps/smtpd[7713]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-07-30 22:59:32
45.138.72.166 attack
" "
2020-06-09 06:45:21
45.138.72.166 attackspam
 TCP (SYN) 45.138.72.166:48901 -> port 22, len 44
2020-06-04 22:39:08
45.138.72.78 attackspam
May  7 23:40:32 server sshd[4666]: Failed password for invalid user zt from 45.138.72.78 port 51260 ssh2
May  7 23:44:17 server sshd[7738]: Failed password for invalid user zach from 45.138.72.78 port 60618 ssh2
May  7 23:48:00 server sshd[10843]: Failed password for invalid user informix from 45.138.72.78 port 41780 ssh2
2020-05-08 06:29:33
45.138.72.78 attackbotsspam
May  7 16:10:27 localhost sshd[3038267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78  user=root
May  7 16:10:29 localhost sshd[3038267]: Failed password for root from 45.138.72.78 port 37820 ssh2
...
2020-05-07 14:54:23
45.138.72.78 attackbots
May  6 03:59:11 XXX sshd[23809]: Invalid user support from 45.138.72.78 port 37036
2020-05-07 08:30:52
45.138.72.78 attack
May  6 23:21:20 santamaria sshd\[30455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78  user=root
May  6 23:21:22 santamaria sshd\[30455\]: Failed password for root from 45.138.72.78 port 56288 ssh2
May  6 23:25:06 santamaria sshd\[30490\]: Invalid user nagios from 45.138.72.78
May  6 23:25:06 santamaria sshd\[30490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78
...
2020-05-07 07:13:49
45.138.72.78 attackbots
May  3 15:18:50 server sshd[19411]: Failed password for root from 45.138.72.78 port 57560 ssh2
May  3 15:23:09 server sshd[19780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78
May  3 15:23:11 server sshd[19780]: Failed password for invalid user cbs from 45.138.72.78 port 40110 ssh2
...
2020-05-03 21:31:54
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.138.72.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45742
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.138.72.19.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400

;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 17:54:23 CST 2025
;; MSG SIZE  rcvd: 105
Host info
19.72.138.45.in-addr.arpa domain name pointer wir.rbs-net.ru.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
19.72.138.45.in-addr.arpa	name = wir.rbs-net.ru.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
78.188.89.189 attackbotsspam
60001/tcp 60001/tcp
[2019-07-23/08-05]2pkt
2019-08-05 18:34:56
37.202.75.27 attack
[portscan] tcp/23 [TELNET]
*(RWIN=10599)(08050931)
2019-08-05 19:19:58
1.52.62.241 attack
[SMB remote code execution attempt: port tcp/445]
*(RWIN=8192)(08050931)
2019-08-05 18:42:10
96.236.228.212 attackspambots
[portscan] tcp/23 [TELNET]
*(RWIN=58347)(08050931)
2019-08-05 19:01:47
190.140.137.18 attack
[portscan] tcp/23 [TELNET]
*(RWIN=13090)(08050931)
2019-08-05 18:21:59
216.218.206.111 attackbots
[portscan] udp/137 [netbios NS]
*(RWIN=-)(08050931)
2019-08-05 18:19:06
177.54.110.35 attackbots
[SMB remote code execution attempt: port tcp/445]
*(RWIN=1024)(08050931)
2019-08-05 18:57:47
223.98.13.187 attackspam
[portscan] tcp/23 [TELNET]
*(RWIN=22498)(08050931)
2019-08-05 18:53:01
5.63.66.204 attackbotsspam
[portscan] tcp/139 [NetBIOS Session Service]
*(RWIN=1024)(08050931)
2019-08-05 19:09:13
172.245.24.130 attackbotsspam
[SMB remote code execution attempt: port tcp/445]
*(RWIN=1024)(08050931)
2019-08-05 19:14:13
54.37.199.250 attack
19/8/5@04:36:08: FAIL: IoT-Telnet address from=54.37.199.250
...
2019-08-05 19:18:39
200.23.18.150 attack
[SMB remote code execution attempt: port tcp/445]
[scan/connect: 2 time(s)]
*(RWIN=1024)(08050931)
2019-08-05 18:54:52
84.108.209.196 attackbots
[portscan] tcp/23 [TELNET]
*(RWIN=6836)(08050931)
2019-08-05 18:49:44
35.195.6.14 attack
[portscan] tcp/1433 [MsSQL]
*(RWIN=65535)(08050931)
2019-08-05 18:40:04
37.208.66.110 attack
[SMB remote code execution attempt: port tcp/445]
*(RWIN=1024)(08050931)
2019-08-05 18:38:44

Recently Reported IPs

243.43.18.191 34.17.112.44 155.8.87.168 108.141.135.14
144.157.3.35 162.56.239.211 56.229.188.150 22.70.247.150
158.0.130.145 143.79.4.215 146.38.190.135 118.152.241.27
188.72.58.72 201.31.18.108 211.204.174.170 242.123.150.98
254.118.110.183 43.43.195.152 84.122.205.161 133.167.133.125