Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Mexico

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
45.7.138.40 attack
 TCP (SYN) 45.7.138.40:44113 -> port 26994, len 44
2020-09-13 02:41:08
45.7.138.40 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 15095 proto: tcp cat: Misc Attackbytes: 60
2020-09-12 18:43:48
45.7.138.40 attackspambots
" "
2020-08-28 10:00:50
45.7.138.40 attack
Invalid user port from 45.7.138.40 port 55261
2020-08-20 17:10:52
45.7.138.40 attackspambots
SIP/5060 Probe, BF, Hack -
2020-07-27 18:04:28
45.7.138.40 attackspam
trying to access non-authorized port
2020-07-21 13:07:09
45.7.138.40 attackspam
Jul 14 07:22:23 home sshd[3888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.7.138.40
Jul 14 07:22:25 home sshd[3888]: Failed password for invalid user mts from 45.7.138.40 port 35454 ssh2
Jul 14 07:24:08 home sshd[4031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.7.138.40
...
2020-07-14 14:53:16
45.7.138.40 attackbotsspam
 TCP (SYN) 45.7.138.40:50753 -> port 5569, len 44
2020-07-14 04:16:11
45.7.138.40 attack
Jul 11 16:08:48 debian-2gb-nbg1-2 kernel: \[16735111.903673\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.7.138.40 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=10578 PROTO=TCP SPT=43920 DPT=8314 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-11 23:24:56
45.7.138.40 attackbotsspam
Jul 11 00:55:57 debian-2gb-nbg1-2 kernel: \[16680344.641116\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.7.138.40 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=30578 PROTO=TCP SPT=50491 DPT=8358 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-11 07:14:58
45.7.138.40 attackspambots
 TCP (SYN) 45.7.138.40:50240 -> port 10568, len 44
2020-07-08 21:38:43
45.7.138.40 attackspambots
SSH login attempts.
2020-07-08 13:26:01
45.7.138.40 attackbots
trying to access non-authorized port
2020-07-07 01:21:30
45.7.138.40 attackspambots
Jun 30 08:05:08 rocket sshd[1876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.7.138.40
Jun 30 08:05:09 rocket sshd[1876]: Failed password for invalid user apagar from 45.7.138.40 port 50507 ssh2
Jun 30 08:08:56 rocket sshd[1932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.7.138.40
...
2020-06-30 15:41:32
45.7.138.40 attackbots
Jun 30 02:45:10 itv-usvr-02 sshd[4494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.7.138.40  user=list
Jun 30 02:45:11 itv-usvr-02 sshd[4494]: Failed password for list from 45.7.138.40 port 47924 ssh2
Jun 30 02:48:40 itv-usvr-02 sshd[4706]: Invalid user konrad from 45.7.138.40 port 47169
Jun 30 02:48:40 itv-usvr-02 sshd[4706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.7.138.40
Jun 30 02:48:40 itv-usvr-02 sshd[4706]: Invalid user konrad from 45.7.138.40 port 47169
Jun 30 02:48:42 itv-usvr-02 sshd[4706]: Failed password for invalid user konrad from 45.7.138.40 port 47169 ssh2
2020-06-30 05:29:39
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.7.138.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22488
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.7.138.148.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012902 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 09:51:29 CST 2025
;; MSG SIZE  rcvd: 105
Host info
148.138.7.45.in-addr.arpa domain name pointer ws-pop-ags-45-7-138-148.wibo.mx.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.138.7.45.in-addr.arpa	name = ws-pop-ags-45-7-138-148.wibo.mx.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
49.206.231.3 attack
Honeypot attack, port: 445, PTR: broadband.actcorp.in.
2020-03-08 18:07:51
69.94.134.225 attack
Mar  8 04:28:21 web01 postfix/smtpd[22499]: warning: hostname 69-94-134-225.nca.datanoc.com does not resolve to address 69.94.134.225
Mar  8 04:28:21 web01 postfix/smtpd[22499]: connect from unknown[69.94.134.225]
Mar  8 04:28:21 web01 policyd-spf[22500]: None; identhostnamey=helo; client-ip=69.94.134.225; helo=difficult.eurekafied.com; envelope-from=x@x
Mar  8 04:28:21 web01 policyd-spf[22500]: Pass; identhostnamey=mailfrom; client-ip=69.94.134.225; helo=difficult.eurekafied.com; envelope-from=x@x
Mar x@x
Mar  8 04:28:22 web01 postfix/smtpd[22499]: disconnect from unknown[69.94.134.225]
Mar  8 04:31:47 web01 postfix/smtpd[22526]: warning: hostname 69-94-134-225.nca.datanoc.com does not resolve to address 69.94.134.225
Mar  8 04:31:47 web01 postfix/smtpd[22526]: connect from unknown[69.94.134.225]
Mar  8 04:31:47 web01 policyd-spf[22529]: None; identhostnamey=helo; client-ip=69.94.134.225; helo=difficult.eurekafied.com; envelope-from=x@x
Mar  8 04:31:47 web01 policyd-sp........
-------------------------------
2020-03-08 18:19:17
159.203.27.100 attack
CMS (WordPress or Joomla) login attempt.
2020-03-08 18:08:15
2.229.123.30 attack
1433/tcp
[2020-03-08]1pkt
2020-03-08 18:08:03
87.8.216.119 attack
Mar  8 05:52:25 host sshd[24700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host119-216-dynamic.8-87-r.retail.telecomitalia.it  user=root
Mar  8 05:52:27 host sshd[24700]: Failed password for root from 87.8.216.119 port 42786 ssh2
...
2020-03-08 17:52:26
188.166.42.50 attackspambots
Mar  8 10:57:02 mail.srvfarm.net postfix/smtpd[3334100]: warning: unknown[188.166.42.50]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar  8 10:57:02 mail.srvfarm.net postfix/smtpd[3334100]: lost connection after AUTH from unknown[188.166.42.50]
Mar  8 10:57:21 mail.srvfarm.net postfix/smtpd[3333315]: warning: unknown[188.166.42.50]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar  8 10:57:21 mail.srvfarm.net postfix/smtpd[3333315]: lost connection after AUTH from unknown[188.166.42.50]
Mar  8 10:57:47 mail.srvfarm.net postfix/smtpd[3334106]: warning: unknown[188.166.42.50]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-03-08 18:09:49
185.36.81.23 attackbotsspam
Mar  8 10:44:01 srv01 postfix/smtpd\[29321\]: warning: unknown\[185.36.81.23\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar  8 10:47:37 srv01 postfix/smtpd\[29321\]: warning: unknown\[185.36.81.23\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar  8 10:48:41 srv01 postfix/smtpd\[29321\]: warning: unknown\[185.36.81.23\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar  8 10:50:04 srv01 postfix/smtpd\[32386\]: warning: unknown\[185.36.81.23\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar  8 10:50:34 srv01 postfix/smtpd\[29321\]: warning: unknown\[185.36.81.23\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-03-08 18:04:36
178.251.107.199 attack
DATE:2020-03-08 05:51:54, IP:178.251.107.199, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)
2020-03-08 18:10:08
39.89.249.254 attack
Honeypot attack, port: 81, PTR: PTR record not found
2020-03-08 17:59:11
49.151.248.61 attackspambots
Honeypot attack, port: 445, PTR: dsl.49.151.248.61.pldt.net.
2020-03-08 17:54:10
50.116.63.249 attackspambots
SSH Scan
2020-03-08 17:52:02
63.82.48.83 attackspambots
Mar  8 05:40:01 web01 postfix/smtpd[25065]: connect from sombrero.saparel.com[63.82.48.83]
Mar  8 05:40:01 web01 policyd-spf[25069]: None; identhostnamey=helo; client-ip=63.82.48.83; helo=sombrero.kranbery.com; envelope-from=x@x
Mar  8 05:40:01 web01 policyd-spf[25069]: Pass; identhostnamey=mailfrom; client-ip=63.82.48.83; helo=sombrero.kranbery.com; envelope-from=x@x
Mar x@x
Mar  8 05:40:02 web01 postfix/smtpd[25065]: disconnect from sombrero.saparel.com[63.82.48.83]
Mar  8 05:43:52 web01 postfix/smtpd[25718]: connect from sombrero.saparel.com[63.82.48.83]
Mar  8 05:43:52 web01 policyd-spf[25723]: None; identhostnamey=helo; client-ip=63.82.48.83; helo=sombrero.kranbery.com; envelope-from=x@x
Mar  8 05:43:52 web01 policyd-spf[25723]: Pass; identhostnamey=mailfrom; client-ip=63.82.48.83; helo=sombrero.kranbery.com; envelope-from=x@x
Mar x@x
Mar  8 05:43:53 web01 postfix/smtpd[25718]: disconnect from sombrero.saparel.com[63.82.48.83]
Mar  8 05:44:59 web01 postfix/smtpd[25........
-------------------------------
2020-03-08 18:21:25
69.94.141.95 attackbots
Mar  8 05:44:26 mail.srvfarm.net postfix/smtpd[3235194]: NOQUEUE: reject: RCPT from unknown[69.94.141.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:44:31 mail.srvfarm.net postfix/smtpd[3235189]: NOQUEUE: reject: RCPT from unknown[69.94.141.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:45:24 mail.srvfarm.net postfix/smtpd[3235202]: NOQUEUE: reject: RCPT from unknown[69.94.141.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:45:25 mail.srvfarm.net postfix/smtpd[3235195]: NOQUEUE: reject: RCPT from unknown[69.94.141.95]: 450 4.1.8 : Sender address re
2020-03-08 18:17:55
190.249.170.226 attackbotsspam
trying to access non-authorized port
2020-03-08 18:01:33
196.189.91.138 attackbots
Mar  8 05:52:30 MK-Soft-VM3 sshd[23793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.189.91.138 
Mar  8 05:52:32 MK-Soft-VM3 sshd[23793]: Failed password for invalid user mumble from 196.189.91.138 port 44386 ssh2
...
2020-03-08 17:48:51

Recently Reported IPs

45.220.105.17 53.234.172.82 172.155.249.250 226.67.45.146
71.15.232.131 118.125.102.204 245.17.108.195 159.94.185.80
84.174.141.110 188.18.218.254 123.6.179.16 61.225.240.251
72.91.75.1 186.214.179.218 150.84.58.135 249.219.208.146
57.172.206.8 29.159.96.108 98.49.137.99 141.240.68.14