45.138.72.52 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.138.72.212	attack	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-25 06:28:12
45.138.72.167	attackspam	Port probing on unauthorized port 24272	2020-09-20 03:46:23
45.138.72.167	attack	Port probing on unauthorized port 24272	2020-09-19 19:50:54
45.138.72.83	attackspambots	SSH BruteForce Attack	2020-08-31 18:25:48
45.138.72.163	attackbotsspam	Aug 24 13:58:50 colin sshd[18343]: Address 45.138.72.163 maps to brabus.club, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 24 13:58:50 colin sshd[18343]: Invalid user meo from 45.138.72.163 Aug 24 13:58:52 colin sshd[18343]: Failed password for invalid user meo from 45.138.72.163 port 46012 ssh2 Aug 24 14:03:00 colin sshd[18510]: Address 45.138.72.163 maps to brabus.club, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 24 14:03:00 colin sshd[18510]: Invalid user vfp from 45.138.72.163 Aug 24 14:03:02 colin sshd[18510]: Failed password for invalid user vfp from 45.138.72.163 port 53358 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.138.72.163	2020-08-27 17:12:48
45.138.72.253	attackspambots	Postfix SASL Login attempt. IP autobanned	2020-08-27 02:54:06
45.138.72.22	attackbots	Icarus honeypot on github	2020-08-10 23:48:17
45.138.72.253	attack	Jul 30 14:05:33 mail postfix/smtps/smtpd[7709]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 30 14:07:32 mail postfix/smtps/smtpd[7713]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 30 14:07:43 mail postfix/smtps/smtpd[7713]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-07-30 22:59:32
45.138.72.166	attack	" "	2020-06-09 06:45:21
45.138.72.166	attackspam	TCP (SYN) 45.138.72.166:48901 -> port 22, len 44	2020-06-04 22:39:08
45.138.72.78	attackspam	May 7 23:40:32 server sshd[4666]: Failed password for invalid user zt from 45.138.72.78 port 51260 ssh2 May 7 23:44:17 server sshd[7738]: Failed password for invalid user zach from 45.138.72.78 port 60618 ssh2 May 7 23:48:00 server sshd[10843]: Failed password for invalid user informix from 45.138.72.78 port 41780 ssh2	2020-05-08 06:29:33
45.138.72.78	attackbotsspam	May 7 16:10:27 localhost sshd[3038267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 user=root May 7 16:10:29 localhost sshd[3038267]: Failed password for root from 45.138.72.78 port 37820 ssh2 ...	2020-05-07 14:54:23
45.138.72.78	attackbots	May 6 03:59:11 XXX sshd[23809]: Invalid user support from 45.138.72.78 port 37036	2020-05-07 08:30:52
45.138.72.78	attack	May 6 23:21:20 santamaria sshd\[30455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 user=root May 6 23:21:22 santamaria sshd\[30455\]: Failed password for root from 45.138.72.78 port 56288 ssh2 May 6 23:25:06 santamaria sshd\[30490\]: Invalid user nagios from 45.138.72.78 May 6 23:25:06 santamaria sshd\[30490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 ...	2020-05-07 07:13:49
45.138.72.78	attackbots	May 3 15:18:50 server sshd[19411]: Failed password for root from 45.138.72.78 port 57560 ssh2 May 3 15:23:09 server sshd[19780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 May 3 15:23:11 server sshd[19780]: Failed password for invalid user cbs from 45.138.72.78 port 40110 ssh2 ...	2020-05-03 21:31:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.138.72.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45668
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.138.72.52.			IN	A

;; AUTHORITY SECTION:
.			578	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022010600 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 07 02:57:03 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 52.72.138.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.72.138.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.200.60.74	attack	Aug 15 23:57:05 buvik sshd[20859]: Failed password for root from 113.200.60.74 port 49050 ssh2 Aug 16 00:00:49 buvik sshd[21315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.200.60.74 user=root Aug 16 00:00:52 buvik sshd[21315]: Failed password for root from 113.200.60.74 port 46799 ssh2 ...	2020-08-16 07:09:06
222.186.30.218	attack	2020-08-16T01:41:01.803665n23.at sshd[3242597]: Failed password for root from 222.186.30.218 port 43313 ssh2 2020-08-16T01:41:04.985349n23.at sshd[3242597]: Failed password for root from 222.186.30.218 port 43313 ssh2 2020-08-16T01:41:07.816100n23.at sshd[3242597]: Failed password for root from 222.186.30.218 port 43313 ssh2 ...	2020-08-16 07:43:30
106.13.66.103	attackbotsspam	Aug 15 20:15:46 firewall sshd[23813]: Failed password for root from 106.13.66.103 port 34498 ssh2 Aug 15 20:19:58 firewall sshd[24035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103 user=root Aug 15 20:19:59 firewall sshd[24035]: Failed password for root from 106.13.66.103 port 42484 ssh2 ...	2020-08-16 07:37:20
112.85.42.104	attack	2020-08-16T01:25:33.667901vps751288.ovh.net sshd\[17306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.104 user=root 2020-08-16T01:25:35.947011vps751288.ovh.net sshd\[17306\]: Failed password for root from 112.85.42.104 port 55951 ssh2 2020-08-16T01:25:38.011986vps751288.ovh.net sshd\[17306\]: Failed password for root from 112.85.42.104 port 55951 ssh2 2020-08-16T01:25:40.017209vps751288.ovh.net sshd\[17306\]: Failed password for root from 112.85.42.104 port 55951 ssh2 2020-08-16T01:25:43.013482vps751288.ovh.net sshd\[17314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.104 user=root	2020-08-16 07:27:34
46.29.155.20	attackspam	" "	2020-08-16 07:35:39
51.38.32.230	attack	Aug 15 21:34:57 django-0 sshd[27161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=server.ikadocteur.com user=root Aug 15 21:34:59 django-0 sshd[27161]: Failed password for root from 51.38.32.230 port 52604 ssh2 ...	2020-08-16 07:27:58
47.33.8.145	attack	2020-08-15T22:43:46.418008hz01.yumiweb.com sshd\[27839\]: Invalid user admin from 47.33.8.145 port 52696 2020-08-15T22:43:48.309511hz01.yumiweb.com sshd\[27841\]: Invalid user admin from 47.33.8.145 port 52741 2020-08-15T22:43:50.211724hz01.yumiweb.com sshd\[27843\]: Invalid user admin from 47.33.8.145 port 52809 ...	2020-08-16 07:43:00
129.126.244.51	attack	Bruteforce detected by fail2ban	2020-08-16 07:12:57
167.172.163.162	attackspambots	(sshd) Failed SSH login from 167.172.163.162 (DE/Germany/-): 5 in the last 3600 secs	2020-08-16 07:37:44
94.23.38.191	attack	Aug 15 17:40:24 vps46666688 sshd[11546]: Failed password for root from 94.23.38.191 port 33408 ssh2 ...	2020-08-16 07:29:26
194.15.36.68	attack	2020-08-15T20:08:28.227230correo.[domain] sshd[4835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.15.36.68 2020-08-15T20:08:28.219822correo.[domain] sshd[4835]: Invalid user admin from 194.15.36.68 port 49736 2020-08-15T20:08:30.375305correo.[domain] sshd[4835]: Failed password for invalid user admin from 194.15.36.68 port 49736 ssh2 ...	2020-08-16 07:41:56
148.240.208.123	attackbotsspam	Automatic report - Port Scan Attack	2020-08-16 07:22:46
35.200.165.32	attackbots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-15T20:35:48Z and 2020-08-15T20:43:56Z	2020-08-16 07:39:07
197.40.235.92	attackbots	trying to access non-authorized port	2020-08-16 07:19:35
200.206.81.154	attackbotsspam	2020-08-16T01:10:38.707965ks3355764 sshd[27645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.206.81.154 user=root 2020-08-16T01:10:40.786324ks3355764 sshd[27645]: Failed password for root from 200.206.81.154 port 55381 ssh2 ...	2020-08-16 07:29:57

Recently Reported IPs

176.88.97.4	124.67.119.63	213.205.240.98	53.19.164.205
19.118.188.243	85.98.199.77	37.93.255.122	39.101.149.37
30.241.77.130	222.129.22.116	10.113.186.77	36.75.38.61
53.113.113.110	231.170.234.195	34.200.24.94	145.222.123.23
141.98.212.28	42.56.202.55	36.255.205.133	109.185.205.25