45.138.72.198 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.138.72.212	attack	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-25 06:28:12
45.138.72.167	attackspam	Port probing on unauthorized port 24272	2020-09-20 03:46:23
45.138.72.167	attack	Port probing on unauthorized port 24272	2020-09-19 19:50:54
45.138.72.83	attackspambots	SSH BruteForce Attack	2020-08-31 18:25:48
45.138.72.163	attackbotsspam	Aug 24 13:58:50 colin sshd[18343]: Address 45.138.72.163 maps to brabus.club, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 24 13:58:50 colin sshd[18343]: Invalid user meo from 45.138.72.163 Aug 24 13:58:52 colin sshd[18343]: Failed password for invalid user meo from 45.138.72.163 port 46012 ssh2 Aug 24 14:03:00 colin sshd[18510]: Address 45.138.72.163 maps to brabus.club, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 24 14:03:00 colin sshd[18510]: Invalid user vfp from 45.138.72.163 Aug 24 14:03:02 colin sshd[18510]: Failed password for invalid user vfp from 45.138.72.163 port 53358 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.138.72.163	2020-08-27 17:12:48
45.138.72.253	attackspambots	Postfix SASL Login attempt. IP autobanned	2020-08-27 02:54:06
45.138.72.22	attackbots	Icarus honeypot on github	2020-08-10 23:48:17
45.138.72.253	attack	Jul 30 14:05:33 mail postfix/smtps/smtpd[7709]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 30 14:07:32 mail postfix/smtps/smtpd[7713]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 30 14:07:43 mail postfix/smtps/smtpd[7713]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-07-30 22:59:32
45.138.72.166	attack	" "	2020-06-09 06:45:21
45.138.72.166	attackspam	TCP (SYN) 45.138.72.166:48901 -> port 22, len 44	2020-06-04 22:39:08
45.138.72.78	attackspam	May 7 23:40:32 server sshd[4666]: Failed password for invalid user zt from 45.138.72.78 port 51260 ssh2 May 7 23:44:17 server sshd[7738]: Failed password for invalid user zach from 45.138.72.78 port 60618 ssh2 May 7 23:48:00 server sshd[10843]: Failed password for invalid user informix from 45.138.72.78 port 41780 ssh2	2020-05-08 06:29:33
45.138.72.78	attackbotsspam	May 7 16:10:27 localhost sshd[3038267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 user=root May 7 16:10:29 localhost sshd[3038267]: Failed password for root from 45.138.72.78 port 37820 ssh2 ...	2020-05-07 14:54:23
45.138.72.78	attackbots	May 6 03:59:11 XXX sshd[23809]: Invalid user support from 45.138.72.78 port 37036	2020-05-07 08:30:52
45.138.72.78	attack	May 6 23:21:20 santamaria sshd\[30455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 user=root May 6 23:21:22 santamaria sshd\[30455\]: Failed password for root from 45.138.72.78 port 56288 ssh2 May 6 23:25:06 santamaria sshd\[30490\]: Invalid user nagios from 45.138.72.78 May 6 23:25:06 santamaria sshd\[30490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 ...	2020-05-07 07:13:49
45.138.72.78	attackbots	May 3 15:18:50 server sshd[19411]: Failed password for root from 45.138.72.78 port 57560 ssh2 May 3 15:23:09 server sshd[19780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 May 3 15:23:11 server sshd[19780]: Failed password for invalid user cbs from 45.138.72.78 port 40110 ssh2 ...	2020-05-03 21:31:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.138.72.198
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29669
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.138.72.198.			IN	A

;; AUTHORITY SECTION:
.			535	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 17:34:41 CST 2022
;; MSG SIZE  rcvd: 106

Host info

198.72.138.45.in-addr.arpa domain name pointer friendslk.nl.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
198.72.138.45.in-addr.arpa	name = friendslk.nl.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
44.235.128.207	attackbots	TCP (SYN) 44.235.128.207:59636 -> port 4243, len 44	2020-09-30 01:56:54
206.189.91.244	attackspam	Found on Github Combined on 3 lists / proto=6 . srcport=40862 . dstport=6333 . (2368)	2020-09-30 02:21:20
212.170.50.203	attackspambots	Sep 29 15:06:37 gitlab sshd[1989572]: Invalid user sybase from 212.170.50.203 port 45080 Sep 29 15:06:37 gitlab sshd[1989572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.170.50.203 Sep 29 15:06:37 gitlab sshd[1989572]: Invalid user sybase from 212.170.50.203 port 45080 Sep 29 15:06:39 gitlab sshd[1989572]: Failed password for invalid user sybase from 212.170.50.203 port 45080 ssh2 Sep 29 15:10:42 gitlab sshd[1990140]: Invalid user office1 from 212.170.50.203 port 52056 ...	2020-09-30 01:57:09
139.59.7.177	attackspam	Sep 29 12:58:07 scw-focused-cartwright sshd[14311]: Failed password for root from 139.59.7.177 port 60342 ssh2 Sep 29 13:02:59 scw-focused-cartwright sshd[14433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.7.177	2020-09-30 02:02:58
213.141.157.220	attack	Invalid user ghost3 from 213.141.157.220 port 34304	2020-09-30 02:18:57
156.215.66.179	attackbots	20/9/29@12:08:31: FAIL: Alarm-Network address from=156.215.66.179 ...	2020-09-30 01:54:47
165.232.47.175	attackspam	SSH/22 MH Probe, BF, Hack -	2020-09-30 02:13:42
178.88.164.29	attackbots	Sep 29 00:36:28 rotator sshd\[7806\]: Invalid user test from 178.88.164.29Sep 29 00:36:31 rotator sshd\[7806\]: Failed password for invalid user test from 178.88.164.29 port 51728 ssh2Sep 29 00:40:29 rotator sshd\[8609\]: Invalid user oracle from 178.88.164.29Sep 29 00:40:32 rotator sshd\[8609\]: Failed password for invalid user oracle from 178.88.164.29 port 59588 ssh2Sep 29 00:44:36 rotator sshd\[8661\]: Invalid user teamspeak from 178.88.164.29Sep 29 00:44:38 rotator sshd\[8661\]: Failed password for invalid user teamspeak from 178.88.164.29 port 39218 ssh2 ...	2020-09-30 02:05:57
141.98.10.210	attackspam	Sep 29 12:45:33 plusreed sshd[6558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.10.210 user=root Sep 29 12:45:34 plusreed sshd[6558]: Failed password for root from 141.98.10.210 port 35635 ssh2 ...	2020-09-30 01:51:34
182.162.17.249	attackbotsspam	2020-09-29T14:37:51.306338shield sshd\[30388\]: Invalid user shane from 182.162.17.249 port 35287 2020-09-29T14:37:51.315466shield sshd\[30388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.162.17.249 2020-09-29T14:37:52.635473shield sshd\[30388\]: Failed password for invalid user shane from 182.162.17.249 port 35287 ssh2 2020-09-29T14:44:33.716116shield sshd\[31555\]: Invalid user gopher from 182.162.17.249 port 40160 2020-09-29T14:44:33.726605shield sshd\[31555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.162.17.249	2020-09-30 02:23:07
188.40.210.30	attackbots	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-29T08:00:18Z	2020-09-30 01:52:19
45.184.121.32	attackspam	php WP PHPmyadamin ABUSE blocked for 12h	2020-09-30 01:51:53
134.175.191.248	attack	malicious Brute-Force reported by https://www.patrick-binder.de ...	2020-09-30 01:59:32
4.17.231.208	attackspambots	Sep 29 15:04:16 firewall sshd[5574]: Invalid user admin from 4.17.231.208 Sep 29 15:04:17 firewall sshd[5574]: Failed password for invalid user admin from 4.17.231.208 port 38856 ssh2 Sep 29 15:08:39 firewall sshd[5658]: Invalid user leslie from 4.17.231.208 ...	2020-09-30 02:13:28
178.128.85.92	attack	Invalid user admin from 178.128.85.92 port 54840	2020-09-30 02:05:09

Recently Reported IPs

45.138.103.164	45.138.74.176	45.138.86.232	45.139.215.248
45.139.215.182	45.140.173.8	45.14.18.158	45.14.226.233
45.140.206.226	45.14.25.145	45.14.19.242	45.140.174.191
45.140.207.140	45.140.207.149	45.14.244.255	45.140.207.53
45.143.203.51	45.140.207.145	45.142.189.222	45.142.122.161