45.138.72.52 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.138.72.212	attack	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-25 06:28:12
45.138.72.167	attackspam	Port probing on unauthorized port 24272	2020-09-20 03:46:23
45.138.72.167	attack	Port probing on unauthorized port 24272	2020-09-19 19:50:54
45.138.72.83	attackspambots	SSH BruteForce Attack	2020-08-31 18:25:48
45.138.72.163	attackbotsspam	Aug 24 13:58:50 colin sshd[18343]: Address 45.138.72.163 maps to brabus.club, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 24 13:58:50 colin sshd[18343]: Invalid user meo from 45.138.72.163 Aug 24 13:58:52 colin sshd[18343]: Failed password for invalid user meo from 45.138.72.163 port 46012 ssh2 Aug 24 14:03:00 colin sshd[18510]: Address 45.138.72.163 maps to brabus.club, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 24 14:03:00 colin sshd[18510]: Invalid user vfp from 45.138.72.163 Aug 24 14:03:02 colin sshd[18510]: Failed password for invalid user vfp from 45.138.72.163 port 53358 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.138.72.163	2020-08-27 17:12:48
45.138.72.253	attackspambots	Postfix SASL Login attempt. IP autobanned	2020-08-27 02:54:06
45.138.72.22	attackbots	Icarus honeypot on github	2020-08-10 23:48:17
45.138.72.253	attack	Jul 30 14:05:33 mail postfix/smtps/smtpd[7709]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 30 14:07:32 mail postfix/smtps/smtpd[7713]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 30 14:07:43 mail postfix/smtps/smtpd[7713]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-07-30 22:59:32
45.138.72.166	attack	" "	2020-06-09 06:45:21
45.138.72.166	attackspam	TCP (SYN) 45.138.72.166:48901 -> port 22, len 44	2020-06-04 22:39:08
45.138.72.78	attackspam	May 7 23:40:32 server sshd[4666]: Failed password for invalid user zt from 45.138.72.78 port 51260 ssh2 May 7 23:44:17 server sshd[7738]: Failed password for invalid user zach from 45.138.72.78 port 60618 ssh2 May 7 23:48:00 server sshd[10843]: Failed password for invalid user informix from 45.138.72.78 port 41780 ssh2	2020-05-08 06:29:33
45.138.72.78	attackbotsspam	May 7 16:10:27 localhost sshd[3038267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 user=root May 7 16:10:29 localhost sshd[3038267]: Failed password for root from 45.138.72.78 port 37820 ssh2 ...	2020-05-07 14:54:23
45.138.72.78	attackbots	May 6 03:59:11 XXX sshd[23809]: Invalid user support from 45.138.72.78 port 37036	2020-05-07 08:30:52
45.138.72.78	attack	May 6 23:21:20 santamaria sshd\[30455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 user=root May 6 23:21:22 santamaria sshd\[30455\]: Failed password for root from 45.138.72.78 port 56288 ssh2 May 6 23:25:06 santamaria sshd\[30490\]: Invalid user nagios from 45.138.72.78 May 6 23:25:06 santamaria sshd\[30490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 ...	2020-05-07 07:13:49
45.138.72.78	attackbots	May 3 15:18:50 server sshd[19411]: Failed password for root from 45.138.72.78 port 57560 ssh2 May 3 15:23:09 server sshd[19780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78 May 3 15:23:11 server sshd[19780]: Failed password for invalid user cbs from 45.138.72.78 port 40110 ssh2 ...	2020-05-03 21:31:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.138.72.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45668
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.138.72.52.			IN	A

;; AUTHORITY SECTION:
.			578	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022010600 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 07 02:57:03 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 52.72.138.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.72.138.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
223.100.24.248	attack	Nov 9 07:28:35 MK-Soft-VM5 sshd[7035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.100.24.248 Nov 9 07:28:37 MK-Soft-VM5 sshd[7035]: Failed password for invalid user david from 223.100.24.248 port 43997 ssh2 ...	2019-11-09 15:38:36
61.136.101.84	attackbotsspam	61.136.101.84 was recorded 68 times by 1 hosts attempting to connect to the following ports: 3128. Incident counter (4h, 24h, all-time): 68, 397, 2994	2019-11-09 15:47:05
144.91.93.239	attack	09.11.2019 06:34:56 Connection to port 5060 blocked by firewall	2019-11-09 15:37:51
89.183.95.27	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/89.183.95.27/ DE - 1H : (64) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DE NAME ASN : ASN13045 IP : 89.183.95.27 CIDR : 89.183.0.0/16 PREFIX COUNT : 8 UNIQUE IP COUNT : 173824 ATTACKS DETECTED ASN13045 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-09 07:28:40 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN - data recovery	2019-11-09 15:35:32
46.38.144.57	attackspam	Nov 9 08:19:07 webserver postfix/smtpd\[15097\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:19:44 webserver postfix/smtpd\[15072\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:20:21 webserver postfix/smtpd\[15099\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:20:59 webserver postfix/smtpd\[14456\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:21:36 webserver postfix/smtpd\[15099\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-11-09 15:24:02
140.115.126.21	attack	Nov 9 07:42:14 venus sshd\[701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.115.126.21 user=root Nov 9 07:42:16 venus sshd\[701\]: Failed password for root from 140.115.126.21 port 56680 ssh2 Nov 9 07:46:29 venus sshd\[731\]: Invalid user lxd from 140.115.126.21 port 38318 ...	2019-11-09 15:59:04
218.150.220.210	attackbots	2019-11-09T06:28:45.058533abusebot-5.cloudsearch.cf sshd\[9389\]: Invalid user bjorn from 218.150.220.210 port 41816	2019-11-09 15:33:20
160.153.147.139	attack	Automatic report - XMLRPC Attack	2019-11-09 15:27:13
106.12.178.127	attackspam	Nov 9 07:49:14 mail sshd[15512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.178.127 Nov 9 07:49:16 mail sshd[15512]: Failed password for invalid user idc0592 from 106.12.178.127 port 48032 ssh2 Nov 9 07:54:15 mail sshd[17313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.178.127	2019-11-09 15:55:13
192.99.245.135	attack	Nov 9 08:07:44 SilenceServices sshd[9214]: Failed password for root from 192.99.245.135 port 58696 ssh2 Nov 9 08:11:31 SilenceServices sshd[10342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.245.135 Nov 9 08:11:33 SilenceServices sshd[10342]: Failed password for invalid user user from 192.99.245.135 port 39298 ssh2	2019-11-09 15:34:02
134.175.240.93	attackspam	Nov 9 06:28:44 ip-172-31-62-245 sshd\[30123\]: Invalid user zhangyan from 134.175.240.93\ Nov 9 06:28:47 ip-172-31-62-245 sshd\[30123\]: Failed password for invalid user zhangyan from 134.175.240.93 port 57372 ssh2\ Nov 9 06:28:49 ip-172-31-62-245 sshd\[30125\]: Invalid user dff from 134.175.240.93\ Nov 9 06:28:51 ip-172-31-62-245 sshd\[30125\]: Failed password for invalid user dff from 134.175.240.93 port 59896 ssh2\ Nov 9 06:28:57 ip-172-31-62-245 sshd\[30127\]: Failed password for root from 134.175.240.93 port 34170 ssh2\	2019-11-09 15:24:49
129.211.62.131	attack	Nov 9 08:37:06 vps666546 sshd\[19935\]: Invalid user lwhite from 129.211.62.131 port 14955 Nov 9 08:37:06 vps666546 sshd\[19935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.62.131 Nov 9 08:37:08 vps666546 sshd\[19935\]: Failed password for invalid user lwhite from 129.211.62.131 port 14955 ssh2 Nov 9 08:42:53 vps666546 sshd\[20085\]: Invalid user 111111 from 129.211.62.131 port 55295 Nov 9 08:42:53 vps666546 sshd\[20085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.62.131 ...	2019-11-09 15:58:12
185.220.70.143	attack	/programs/bitcoin-core-0.16.0/wallet.dat /programs/bitcoin-core-0.14.3/wallet.dat /bitcoin-core-0.15.0/wallet.dat /bitcoin-core-0.11.1/wallet.dat /bitcoin-core-0.10.1/wallet.dat /programs/bitcoin-core-0.18.0/wallet.dat /bitcoin/bitcoin-core-0.12.0/wallet.dat /programs/bitcoin-core-0.15.1/wallet.dat /bitcoin-core-0.14.2/wallet.dat /programs/bitcoin-core-0.18.1/wallet.dat /programs/bitcoin-core-0.16.2/wallet.dat /bitcoin-core-0.13.2/wallet.dat /programs/bitcoin-core-0.11.1/wallet.dat /bitcoin-core-0.14.3/wallet.dat /bitcoin/bitcoin-core-0.18.1/wallet.dat /bitcoin-core-0.10.3/wallet.dat /programs/bitcoin-core-0.14.1/wallet.dat /bitcoin-core-0.17.0/wallet.dat /bitcoin-core-0.16.0/wallet.dat /bitcoin-core-0.17.1/wallet.dat /bitcoin/bitcoin-core-0.15.0.1/wallet.dat /programs/bitcoin-core-0.15.0.1/wallet.dat /bitcoin-core-0.13.1/wallet.dat /bitcoin-core-0.10.4/wallet.dat /bitcoin-core-0.11.2/wallet.dat /bitcoin-core-0.17.0.1/wallet.dat /programs/bitcoin-core-0.10.0/wallet.dat	2019-11-09 15:52:43
120.70.101.103	attackspambots	Nov 9 07:28:30 srv1 sshd[7415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.101.103 Nov 9 07:28:32 srv1 sshd[7415]: Failed password for invalid user steam from 120.70.101.103 port 51554 ssh2 ...	2019-11-09 15:42:47
103.68.70.100	attackbotsspam	Automatic report - XMLRPC Attack	2019-11-09 15:41:29

Recently Reported IPs

176.88.97.4	124.67.119.63	213.205.240.98	53.19.164.205
19.118.188.243	85.98.199.77	37.93.255.122	39.101.149.37
30.241.77.130	222.129.22.116	10.113.186.77	36.75.38.61
53.113.113.110	231.170.234.195	34.200.24.94	145.222.123.23
141.98.212.28	42.56.202.55	36.255.205.133	109.185.205.25