Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
199.45.154.113 spambotsattackproxy
Postfix attacker IP
2025-03-05 22:38:52
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       199.45.154.0 - 199.45.155.255
CIDR:           199.45.154.0/23
NetName:        CENSY
NetHandle:      NET-199-45-154-0-1
Parent:         NET199 (NET-199-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Censys, Inc. (CENSY)
RegDate:        2022-10-26
Updated:        2024-03-29
Ref:            https://rdap.arin.net/registry/ip/199.45.154.0



OrgName:        Censys, Inc.
OrgId:          CENSY
Address:        116 1/2 S Main Street
City:           Ann Arbor
StateProv:      MI
PostalCode:     48104
Country:        US
RegDate:        2018-08-06
Updated:        2019-08-03
Comment:        https://censys.io
Ref:            https://rdap.arin.net/registry/entity/CENSY


OrgNOCHandle: COT12-ARIN
OrgNOCName:   Censys Operations Team
OrgNOCPhone:  +1-248-629-0125 
OrgNOCEmail:  ops@censys.io
OrgNOCRef:    https://rdap.arin.net/registry/entity/COT12-ARIN

OrgAbuseHandle: CAT20-ARIN
OrgAbuseName:   Censys Abuse Team
OrgAbusePhone:  +1-248-629-0125 
OrgAbuseEmail:  scan-abuse@censys.io
OrgAbuseRef:    https://rdap.arin.net/registry/entity/CAT20-ARIN

OrgTechHandle: COT12-ARIN
OrgTechName:   Censys Operations Team
OrgTechPhone:  +1-248-629-0125 
OrgTechEmail:  ops@censys.io
OrgTechRef:    https://rdap.arin.net/registry/entity/COT12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.45.154.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48129
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;199.45.154.78.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026081600 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 16 18:31:14 CST 2026
;; MSG SIZE  rcvd: 106
Host info
78.154.45.199.in-addr.arpa domain name pointer 78.154.45.199.censys-scanner.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
78.154.45.199.in-addr.arpa	name = 78.154.45.199.censys-scanner.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
194.61.27.245 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-10 07:31:01
149.56.15.136 attackbotsspam
DATE:2020-10-10 00:33:51, IP:149.56.15.136, PORT:ssh SSH brute force auth (docker-dc)
2020-10-10 07:08:24
167.99.202.143 attackbots
2020-10-09T19:20:46.651823mail.broermann.family sshd[23037]: Invalid user test from 167.99.202.143 port 56006
2020-10-09T19:20:49.071154mail.broermann.family sshd[23037]: Failed password for invalid user test from 167.99.202.143 port 56006 ssh2
2020-10-09T19:25:43.260838mail.broermann.family sshd[23475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.202.143  user=root
2020-10-09T19:25:45.441868mail.broermann.family sshd[23475]: Failed password for root from 167.99.202.143 port 33378 ssh2
2020-10-09T19:30:15.235942mail.broermann.family sshd[23888]: Invalid user nagios from 167.99.202.143 port 38994
...
2020-10-10 07:32:29
141.98.216.154 attack
[2020-10-09 13:04:06] NOTICE[1182] chan_sip.c: Registration from '' failed for '141.98.216.154:64175' - Wrong password
[2020-10-09 13:04:06] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-09T13:04:06.633-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1004",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/141.98.216.154/64175",Challenge="684dfbcf",ReceivedChallenge="684dfbcf",ReceivedHash="7ec6ed5a4d900c2619cc7caa12f4fe10"
[2020-10-09 13:07:57] NOTICE[1182] chan_sip.c: Registration from '' failed for '141.98.216.154:49177' - Wrong password
[2020-10-09 13:07:57] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-09T13:07:57.125-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1005",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/141.98.216
...
2020-10-10 07:04:40
111.88.74.159 attackspam
111.88.74.159 - - [08/Oct/2020:21:47:48 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
111.88.74.159 - - [08/Oct/2020:21:47:49 +0100] "POST /wp-login.php HTTP/1.1" 200 7343 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
111.88.74.159 - - [08/Oct/2020:21:50:26 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
...
2020-10-10 07:23:30
54.38.36.210 attack
2020-10-09T01:32:59.643354correo.[domain] sshd[44384]: Invalid user art from 54.38.36.210 port 45844 2020-10-09T01:33:01.445726correo.[domain] sshd[44384]: Failed password for invalid user art from 54.38.36.210 port 45844 ssh2 2020-10-09T01:42:26.727207correo.[domain] sshd[46105]: Invalid user polycom from 54.38.36.210 port 53122 ...
2020-10-10 07:21:40
93.61.134.60 attack
Oct  9 09:53:59 prod4 sshd\[28051\]: Invalid user apache2 from 93.61.134.60
Oct  9 09:54:02 prod4 sshd\[28051\]: Failed password for invalid user apache2 from 93.61.134.60 port 45348 ssh2
Oct  9 09:58:28 prod4 sshd\[30048\]: Invalid user eric from 93.61.134.60
...
2020-10-10 07:16:29
31.135.44.108 attackspambots
Unauthorized connection attempt from IP address 31.135.44.108 on Port 445(SMB)
2020-10-10 07:28:22
43.225.64.246 attackbots
sshguard
2020-10-10 07:12:35
216.196.93.90 attackbots
Brute forcing email accounts
2020-10-10 07:04:13
176.50.16.210 attackspam
IP blocked
2020-10-10 07:09:42
106.75.132.3 attack
2020-10-10T00:49:10.865600mail.standpoint.com.ua sshd[3703]: Failed password for invalid user admin from 106.75.132.3 port 59184 ssh2
2020-10-10T00:52:28.503689mail.standpoint.com.ua sshd[4265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.132.3  user=root
2020-10-10T00:52:30.893562mail.standpoint.com.ua sshd[4265]: Failed password for root from 106.75.132.3 port 56420 ssh2
2020-10-10T00:55:51.343084mail.standpoint.com.ua sshd[4926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.132.3  user=root
2020-10-10T00:55:53.602300mail.standpoint.com.ua sshd[4926]: Failed password for root from 106.75.132.3 port 53642 ssh2
...
2020-10-10 07:25:17
85.106.196.90 attack
Unauthorized connection attempt from IP address 85.106.196.90 on Port 445(SMB)
2020-10-10 07:02:51
118.96.179.145 attackspam
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-10-08T20:45:56Z
2020-10-10 07:31:42
106.46.169.103 attackbots
Unauthorized connection attempt from IP address 106.46.169.103 on Port 445(SMB)
2020-10-10 07:23:42

Recently Reported IPs

85.115.220.247 89.120.128.48 86.215.211.115 84.255.50.25
83.223.3.91 88.164.179.156 79.220.76.32 73.79.195.16
73.246.195.14 65.213.245.163 20.226.112.14 36.6.6.133
223.93.69.241 69.27.185.204 64.233.172.167 64.201.84.100
64.178.250.102 62.8.36.241 2606:4700:10::6814:8119 62.114.175.20