Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
199.45.154.113 spambotsattackproxy
Postfix attacker IP
2025-03-05 22:38:52
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       199.45.154.0 - 199.45.155.255
CIDR:           199.45.154.0/23
NetName:        CENSY
NetHandle:      NET-199-45-154-0-1
Parent:         NET199 (NET-199-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Censys, Inc. (CENSY)
RegDate:        2022-10-26
Updated:        2024-03-29
Ref:            https://rdap.arin.net/registry/ip/199.45.154.0



OrgName:        Censys, Inc.
OrgId:          CENSY
Address:        116 1/2 S Main Street
City:           Ann Arbor
StateProv:      MI
PostalCode:     48104
Country:        US
RegDate:        2018-08-06
Updated:        2019-08-03
Comment:        https://censys.io
Ref:            https://rdap.arin.net/registry/entity/CENSY


OrgAbuseHandle: CAT20-ARIN
OrgAbuseName:   Censys Abuse Team
OrgAbusePhone:  +1-248-629-0125 
OrgAbuseEmail:  scan-abuse@censys.io
OrgAbuseRef:    https://rdap.arin.net/registry/entity/CAT20-ARIN

OrgNOCHandle: COT12-ARIN
OrgNOCName:   Censys Operations Team
OrgNOCPhone:  +1-248-629-0125 
OrgNOCEmail:  ops@censys.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/COT12-ARIN

OrgTechHandle: COT12-ARIN
OrgTechName:   Censys Operations Team
OrgTechPhone:  +1-248-629-0125 
OrgTechEmail:  ops@censys.com
OrgTechRef:    https://rdap.arin.net/registry/entity/COT12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.45.154.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21502
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;199.45.154.54.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026100301 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 04 12:01:00 CST 2026
;; MSG SIZE  rcvd: 106
Host info
54.154.45.199.in-addr.arpa domain name pointer 54.154.45.199.censys-scanner.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.154.45.199.in-addr.arpa	name = 54.154.45.199.censys-scanner.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
54.36.98.129 attack
2020-04-03T05:45:19.711135  sshd[1106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.98.129  user=root
2020-04-03T05:45:21.957623  sshd[1106]: Failed password for root from 54.36.98.129 port 54182 ssh2
2020-04-03T05:57:01.394819  sshd[1179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.98.129  user=root
2020-04-03T05:57:03.681235  sshd[1179]: Failed password for root from 54.36.98.129 port 51906 ssh2
...
2020-04-03 12:01:54
106.12.34.32 attackspambots
Apr  3 06:53:09 lukav-desktop sshd\[7662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.34.32  user=root
Apr  3 06:53:10 lukav-desktop sshd\[7662\]: Failed password for root from 106.12.34.32 port 40630 ssh2
Apr  3 06:56:49 lukav-desktop sshd\[7878\]: Invalid user chfjiao from 106.12.34.32
Apr  3 06:56:49 lukav-desktop sshd\[7878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.34.32
Apr  3 06:56:51 lukav-desktop sshd\[7878\]: Failed password for invalid user chfjiao from 106.12.34.32 port 58136 ssh2
2020-04-03 12:09:17
106.12.100.184 attack
3x Failed Password
2020-04-03 10:57:20
222.186.173.238 attackspambots
Apr  3 06:01:25 legacy sshd[2988]: Failed password for root from 222.186.173.238 port 30500 ssh2
Apr  3 06:01:29 legacy sshd[2988]: Failed password for root from 222.186.173.238 port 30500 ssh2
Apr  3 06:01:38 legacy sshd[2988]: Failed password for root from 222.186.173.238 port 30500 ssh2
Apr  3 06:01:38 legacy sshd[2988]: error: maximum authentication attempts exceeded for root from 222.186.173.238 port 30500 ssh2 [preauth]
...
2020-04-03 12:03:52
92.63.194.22 attackspam
Apr  3 06:26:43 piServer sshd[20662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.22 
Apr  3 06:26:44 piServer sshd[20662]: Failed password for invalid user admin from 92.63.194.22 port 42653 ssh2
Apr  3 06:27:46 piServer sshd[20769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.22 
...
2020-04-03 12:29:26
106.12.93.141 attack
DATE:2020-04-03 03:20:54, IP:106.12.93.141, PORT:ssh SSH brute force auth (docker-dc)
2020-04-03 11:01:04
217.112.142.110 attack
Apr  3 05:37:00 mail.srvfarm.net postfix/smtpd[2428295]: NOQUEUE: reject: RCPT from unknown[217.112.142.110]: 554 5.7.1 Service unavailable; Client host [217.112.142.110] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Apr  3 05:38:45 mail.srvfarm.net postfix/smtpd[2428264]: NOQUEUE: reject: RCPT from unknown[217.112.142.110]: 554 5.7.1 Service unavailable; Client host [217.112.142.110] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Apr  3 05:38:52 mail.srvfarm.net postfix/smtpd[2428295]: NOQUEUE: reject: RCPT from unknown[217.112.142.110]: 554 5.7.1 Service unavailable; Client host [217.112.142.110] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
2020-04-03 12:37:34
185.234.219.23 attackspambots
Apr  3 05:29:04 web03.srvfarm.net pure-ftpd: (?@185.234.219.23) [WARNING] Authentication failed for user [itdienst]
Apr  3 05:29:07 web03.srvfarm.net pure-ftpd: (?@185.234.219.23) [WARNING] Authentication failed for user [telefona]
Apr  3 05:29:09 web03.srvfarm.net pure-ftpd: (?@185.234.219.23) [WARNING] Authentication failed for user [virtuali]
Apr  3 05:35:44 web03.srvfarm.net pure-ftpd: (?@185.234.219.23) [WARNING] Authentication failed for user [itdienst]
Apr  3 05:35:46 web03.srvfarm.net pure-ftpd: (?@185.234.219.23) [WARNING] Authentication failed for user [telefona]
2020-04-03 12:38:28
68.183.229.218 attackspambots
2020-04-03T05:45:46.649624ns386461 sshd\[14955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.229.218  user=root
2020-04-03T05:45:48.604060ns386461 sshd\[14955\]: Failed password for root from 68.183.229.218 port 48894 ssh2
2020-04-03T05:53:33.944799ns386461 sshd\[22220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.229.218  user=root
2020-04-03T05:53:35.673965ns386461 sshd\[22220\]: Failed password for root from 68.183.229.218 port 44698 ssh2
2020-04-03T05:57:46.799326ns386461 sshd\[26366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.229.218  user=root
...
2020-04-03 12:15:12
46.35.19.18 attackbotsspam
Apr  3 02:20:34 mail sshd[10473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.35.19.18  user=root
Apr  3 02:20:36 mail sshd[10473]: Failed password for root from 46.35.19.18 port 44739 ssh2
Apr  3 02:30:22 mail sshd[25614]: Invalid user yr from 46.35.19.18
Apr  3 02:30:22 mail sshd[25614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.35.19.18
Apr  3 02:30:22 mail sshd[25614]: Invalid user yr from 46.35.19.18
Apr  3 02:30:23 mail sshd[25614]: Failed password for invalid user yr from 46.35.19.18 port 54316 ssh2
...
2020-04-03 10:59:47
37.49.231.127 attack
Apr  3 05:57:05 debian-2gb-nbg1-2 kernel: \[8145266.534866\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=37.49.231.127 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=14259 PROTO=TCP SPT=45939 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-03 12:01:22
5.117.197.119 attackspam
[portscan] Port scan
2020-04-03 11:07:28
95.110.154.101 attackbots
2020-04-03T03:51:07.721701shield sshd\[9158\]: Invalid user hntt from 95.110.154.101 port 52266
2020-04-03T03:51:07.726036shield sshd\[9158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.110.154.101
2020-04-03T03:51:09.746318shield sshd\[9158\]: Failed password for invalid user hntt from 95.110.154.101 port 52266 ssh2
2020-04-03T03:56:26.411942shield sshd\[10786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.110.154.101  user=root
2020-04-03T03:56:28.893620shield sshd\[10786\]: Failed password for root from 95.110.154.101 port 34668 ssh2
2020-04-03 12:34:23
68.183.124.53 attackspam
Apr  3 05:53:37 vps sshd[291739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.124.53
Apr  3 05:53:38 vps sshd[291739]: Failed password for invalid user js from 68.183.124.53 port 46816 ssh2
Apr  3 05:57:04 vps sshd[311504]: Invalid user js from 68.183.124.53 port 57710
Apr  3 05:57:04 vps sshd[311504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.124.53
Apr  3 05:57:05 vps sshd[311504]: Failed password for invalid user js from 68.183.124.53 port 57710 ssh2
...
2020-04-03 12:01:03
54.39.19.48 attack
Brute force attack against VPN service
2020-04-03 11:05:28

Recently Reported IPs

75.84.219.110 162.243.165.206 45.198.224.91 124.29.214.219
39.96.62.130 137.184.230.32 154.12.50.43 123.88.251.215
123.152.87.64 209.38.39.34 188.166.122.87 20.14.76.26
111.174.97.95 34.78.97.252 34.38.112.65 38.156.238.100
8.91.107.28 8.91.107.22 8.91.107.47 20.80.88.106