Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: Shavrin Ilya Andreevich

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
May  7 23:40:32 server sshd[4666]: Failed password for invalid user zt from 45.138.72.78 port 51260 ssh2
May  7 23:44:17 server sshd[7738]: Failed password for invalid user zach from 45.138.72.78 port 60618 ssh2
May  7 23:48:00 server sshd[10843]: Failed password for invalid user informix from 45.138.72.78 port 41780 ssh2
2020-05-08 06:29:33
attackbotsspam
May  7 16:10:27 localhost sshd[3038267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78  user=root
May  7 16:10:29 localhost sshd[3038267]: Failed password for root from 45.138.72.78 port 37820 ssh2
...
2020-05-07 14:54:23
attackbots
May  6 03:59:11 XXX sshd[23809]: Invalid user support from 45.138.72.78 port 37036
2020-05-07 08:30:52
attack
May  6 23:21:20 santamaria sshd\[30455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78  user=root
May  6 23:21:22 santamaria sshd\[30455\]: Failed password for root from 45.138.72.78 port 56288 ssh2
May  6 23:25:06 santamaria sshd\[30490\]: Invalid user nagios from 45.138.72.78
May  6 23:25:06 santamaria sshd\[30490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78
...
2020-05-07 07:13:49
attackbots
May  3 15:18:50 server sshd[19411]: Failed password for root from 45.138.72.78 port 57560 ssh2
May  3 15:23:09 server sshd[19780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.78
May  3 15:23:11 server sshd[19780]: Failed password for invalid user cbs from 45.138.72.78 port 40110 ssh2
...
2020-05-03 21:31:54
attackspambots
Invalid user vmadmin from 45.138.72.78 port 43674
2020-05-02 20:14:56
Comments on same subnet:
IP Type Details Datetime
45.138.72.212 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-25 06:28:12
45.138.72.167 attackspam
Port probing on unauthorized port 24272
2020-09-20 03:46:23
45.138.72.167 attack
Port probing on unauthorized port 24272
2020-09-19 19:50:54
45.138.72.83 attackspambots
SSH BruteForce Attack
2020-08-31 18:25:48
45.138.72.163 attackbotsspam
Aug 24 13:58:50 colin sshd[18343]: Address 45.138.72.163 maps to brabus.club, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Aug 24 13:58:50 colin sshd[18343]: Invalid user meo from 45.138.72.163
Aug 24 13:58:52 colin sshd[18343]: Failed password for invalid user meo from 45.138.72.163 port 46012 ssh2
Aug 24 14:03:00 colin sshd[18510]: Address 45.138.72.163 maps to brabus.club, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Aug 24 14:03:00 colin sshd[18510]: Invalid user vfp from 45.138.72.163
Aug 24 14:03:02 colin sshd[18510]: Failed password for invalid user vfp from 45.138.72.163 port 53358 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.138.72.163
2020-08-27 17:12:48
45.138.72.253 attackspambots
Postfix SASL Login attempt. IP autobanned
2020-08-27 02:54:06
45.138.72.22 attackbots
Icarus honeypot on github
2020-08-10 23:48:17
45.138.72.253 attack
Jul 30 14:05:33 mail postfix/smtps/smtpd[7709]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 30 14:07:32 mail postfix/smtps/smtpd[7713]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 30 14:07:43 mail postfix/smtps/smtpd[7713]: warning: unknown[45.138.72.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-07-30 22:59:32
45.138.72.166 attack
" "
2020-06-09 06:45:21
45.138.72.166 attackspam
 TCP (SYN) 45.138.72.166:48901 -> port 22, len 44
2020-06-04 22:39:08
45.138.72.41 attack
Lines containing failures of 45.138.72.41
Mar 16 23:34:14 kopano sshd[6338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.41  user=r.r
Mar 16 23:34:15 kopano sshd[6338]: Failed password for r.r from 45.138.72.41 port 38004 ssh2
Mar 16 23:34:15 kopano sshd[6338]: Received disconnect from 45.138.72.41 port 38004:11: Bye Bye [preauth]
Mar 16 23:34:15 kopano sshd[6338]: Disconnected from authenticating user r.r 45.138.72.41 port 38004 [preauth]
Mar 17 11:21:38 kopano sshd[30859]: Invalid user influxdb from 45.138.72.41 port 44114
Mar 17 11:21:38 kopano sshd[30859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.72.41
Mar 17 11:21:39 kopano sshd[30859]: Failed password for invalid user influxdb from 45.138.72.41 port 44114 ssh2
Mar 17 11:21:39 kopano sshd[30859]: Received disconnect from 45.138.72.41 port 44114:11: Bye Bye [preauth]
Mar 17 11:21:39 kopano sshd[30859]: Disconne........
------------------------------
2020-03-20 03:41:44
45.138.72.79 attack
Feb 14 16:10:58 debian-2gb-nbg1-2 kernel: \[3952283.252910\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.138.72.79 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=44804 PROTO=TCP SPT=51127 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0
2020-02-15 00:52:47
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.138.72.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48086
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.138.72.78.			IN	A

;; AUTHORITY SECTION:
.			233	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050200 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 02 20:14:51 CST 2020
;; MSG SIZE  rcvd: 116
Host info
78.72.138.45.in-addr.arpa domain name pointer vm46785.example.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
78.72.138.45.in-addr.arpa	name = vm46785.example.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
192.35.169.19 attackbots
1592600351 - 06/19/2020 22:59:11 Host: worker-16.sfj.censys-scanner.com/192.35.169.19 Port: 161 UDP Blocked
2020-06-20 05:57:52
62.215.6.11 attackbotsspam
SSH Invalid Login
2020-06-20 06:20:48
45.227.255.224 attackbots
f2b trigger Multiple SASL failures
2020-06-20 05:48:52
51.255.35.41 attack
SSH Invalid Login
2020-06-20 06:04:20
157.245.55.174 attack
Invalid user grant from 157.245.55.174 port 55662
2020-06-20 06:14:33
184.105.247.198 attack
4786/tcp 19/udp 2323/tcp...
[2020-04-19/06-19]36pkt,16pt.(tcp),2pt.(udp)
2020-06-20 06:22:01
52.172.8.181 attack
Jun 19 21:45:11 game-panel sshd[1693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.8.181
Jun 19 21:45:12 game-panel sshd[1693]: Failed password for invalid user teamspeak3 from 52.172.8.181 port 39338 ssh2
Jun 19 21:53:09 game-panel sshd[2095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.8.181
2020-06-20 05:56:51
129.204.46.170 attack
Invalid user deploy from 129.204.46.170 port 49792
2020-06-20 06:02:18
115.84.91.135 attack
'IP reached maximum auth failures for a one day block'
2020-06-20 06:13:13
37.49.227.109 attackbots
3702/udp 7001/udp 32414/udp...
[2020-04-19/06-19]770pkt,1pt.(tcp),14pt.(udp)
2020-06-20 05:46:28
46.38.150.191 attackbots
2020-06-19 21:58:40 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=leanna@csmailer.org)
2020-06-19 21:59:23 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=www-1@csmailer.org)
2020-06-19 22:00:07 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=webapi@csmailer.org)
2020-06-19 22:00:50 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=secure.runescape@csmailer.org)
2020-06-19 22:01:34 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=portable@csmailer.org)
...
2020-06-20 06:04:45
74.82.47.55 attackspam
30005/tcp 631/tcp 873/tcp...
[2020-04-20/06-19]46pkt,14pt.(tcp),2pt.(udp)
2020-06-20 05:58:54
46.38.150.94 attack
2020-06-19 21:40:14 auth_plain authenticator failed for (User) [46.38.150.94]: 535 Incorrect authentication data (set_id=presenter@csmailer.org)
2020-06-19 21:40:43 auth_plain authenticator failed for (User) [46.38.150.94]: 535 Incorrect authentication data (set_id=editParts@csmailer.org)
2020-06-19 21:41:14 auth_plain authenticator failed for (User) [46.38.150.94]: 535 Incorrect authentication data (set_id=allarmi@csmailer.org)
2020-06-19 21:41:44 auth_plain authenticator failed for (User) [46.38.150.94]: 535 Incorrect authentication data (set_id=pws@csmailer.org)
2020-06-19 21:42:15 auth_plain authenticator failed for (User) [46.38.150.94]: 535 Incorrect authentication data (set_id=img05@csmailer.org)
...
2020-06-20 05:52:57
104.140.188.58 attackspam
1433/tcp 161/udp 8047/tcp...
[2020-04-19/06-19]45pkt,17pt.(tcp),1pt.(udp)
2020-06-20 06:24:27
20.185.30.0 attack
" "
2020-06-20 06:09:24

Recently Reported IPs

150.200.35.76 170.33.14.170 203.14.135.182 160.109.38.34
223.86.231.255 96.128.200.248 80.225.205.51 86.90.8.206
15.235.160.239 110.76.148.153 1.212.230.208 141.246.212.13
101.244.156.2 42.116.226.222 132.112.54.159 15.96.63.78
163.167.57.100 172.52.131.162 69.237.140.99 216.46.31.139