45.154.255.139

Basic Info

City: Stockholm

Region: Stockholm County

Country: Sweden

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.154.255.70	attackbots	45.154.255.70 - - \[11/Sep/2020:03:12:37 +0200\] "GET /index.php\?id=ausland%27%29%29%2F%2A\&id=%2A%2FAS%2F%2A\&id=%2A%2FZQMg%2F%2A\&id=%2A%2FWHERE%2F%2A\&id=%2A%2F9857%3D9857%2F%2A\&id=%2A%2FOR%2F%2A\&id=%2A%2F4629%3DRAISE_ERROR%28CHR%2855%29%7C%7CCHR%2848%29%7C%7CCHR%2848%29%7C%7CCHR%2848%29%7C%7CCHR%2849%29\&id=CHR%28113%29%7C%7CCHR%28120%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%7C%7C%28SELECT%2F%2A\&id=%2A%2F%28CASE%2F%2A\&id=%2A%2FWHEN%2F%2A\&id=%2A%2F%284629%3D4629%29%2F%2A\&id=%2A%2FTHEN%2F%2A\&id=%2A%2F1%2F%2A\&id=%2A%2FELSE%2F%2A\&id=%2A%2F0%2F%2A\&id=%2A%2FEND%29%2F%2A\&id=%2A%2FFROM%2F%2A\&id=%2A%2FSYSIBM.SYSDUMMY1%29%7C%7CCHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28113%29%7C%7CCHR%28113%29%7C%7CCHR%28113%29%29--%2F%2A\&id=%2A%2FfZIf HTTP/1.1" 200 12303 "http://www.firma-lsf.eu:80/index.php" "Googlebot \(compatible Googlebot/2.1 http://www.google.com/bot.html\)" ...	2020-09-12 03:10:49
45.154.255.70	attack	45.154.255.70 - - \[11/Sep/2020:03:12:37 +0200\] "GET /index.php\?id=ausland%27%29%29%2F%2A\&id=%2A%2FAS%2F%2A\&id=%2A%2FZQMg%2F%2A\&id=%2A%2FWHERE%2F%2A\&id=%2A%2F9857%3D9857%2F%2A\&id=%2A%2FOR%2F%2A\&id=%2A%2F4629%3DRAISE_ERROR%28CHR%2855%29%7C%7CCHR%2848%29%7C%7CCHR%2848%29%7C%7CCHR%2848%29%7C%7CCHR%2849%29\&id=CHR%28113%29%7C%7CCHR%28120%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%7C%7C%28SELECT%2F%2A\&id=%2A%2F%28CASE%2F%2A\&id=%2A%2FWHEN%2F%2A\&id=%2A%2F%284629%3D4629%29%2F%2A\&id=%2A%2FTHEN%2F%2A\&id=%2A%2F1%2F%2A\&id=%2A%2FELSE%2F%2A\&id=%2A%2F0%2F%2A\&id=%2A%2FEND%29%2F%2A\&id=%2A%2FFROM%2F%2A\&id=%2A%2FSYSIBM.SYSDUMMY1%29%7C%7CCHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28113%29%7C%7CCHR%28113%29%7C%7CCHR%28113%29%29--%2F%2A\&id=%2A%2FfZIf HTTP/1.1" 200 12303 "http://www.firma-lsf.eu:80/index.php" "Googlebot \(compatible Googlebot/2.1 http://www.google.com/bot.html\)" ...	2020-09-11 19:11:56
45.154.255.68	attackspambots	blogonese.net 45.154.255.68 [02/Sep/2020:18:43:41 +0200] "POST /xmlrpc.php HTTP/1.0" 301 493 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" blogonese.net 45.154.255.68 [02/Sep/2020:18:43:42 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3595 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"	2020-09-04 01:55:13
45.154.255.68	attack	blogonese.net 45.154.255.68 [02/Sep/2020:18:43:41 +0200] "POST /xmlrpc.php HTTP/1.0" 301 493 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" blogonese.net 45.154.255.68 [02/Sep/2020:18:43:42 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3595 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"	2020-09-03 17:19:00
45.154.255.75	attackspambots	GET /wp-config.php.orig HTTP/1.1	2020-09-01 13:56:21
45.154.255.71	attack	(imapd) Failed IMAP login from 45.154.255.71 (SE/Sweden/tor-exit-6.keff.org): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 24 16:20:18 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.154.255.71, lip=5.63.12.44, TLS, session=	2020-08-24 22:59:35
45.154.255.74	attackbotsspam	SQL Injection Attempts	2020-08-06 17:27:31
45.154.255.73	attackspambots	Time: Tue Aug 4 14:53:44 2020 -0300 IP: 45.154.255.73 (SE/Sweden/tor-exit-8.keff.org) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block	2020-08-05 03:27:42
45.154.255.44	attackbotsspam	CMS (WordPress or Joomla) login attempt.	2020-07-04 15:24:40
45.154.255.44	attackspam	02/21/2020-08:25:57.903790 45.154.255.44 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 67	2020-02-21 20:19:19
45.154.255.44	attackspam	02/18/2020-14:22:37.403044 45.154.255.44 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 67	2020-02-19 02:12:49
45.154.255.44	attack	02/16/2020-14:46:40.040992 45.154.255.44 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 67	2020-02-17 02:22:29
45.154.255.44	attackbotsspam	02/13/2020-14:49:11.497672 45.154.255.44 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 67	2020-02-13 23:39:39
45.154.255.44	attackspambots	(From mayjh18@hiroyuki37.funnetwork.xyz) Big Ass Photos - Free Huge Butt Porn, Big Booty Pics http://mistressofsouls.dildo.fetlifeblog.com/?miya chubby porn videos porn by young school girl julie ellis porn dead black ice entertainment porn mr mcmahon porn videos	2020-01-25 14:17:19
45.154.255.44	attack	Web App Attack	2019-11-21 02:29:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.154.255.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45161
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.154.255.139.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061102 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 12 05:06:55 CST 2022
;; MSG SIZE  rcvd: 107

Host info

139.255.154.45.in-addr.arpa domain name pointer cust-139.keff.org.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.255.154.45.in-addr.arpa	name = cust-139.keff.org.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.38.185.121	attackbotsspam	May 3 15:06:13 sigma sshd\[10196\]: Invalid user store from 51.38.185.121May 3 15:06:15 sigma sshd\[10196\]: Failed password for invalid user store from 51.38.185.121 port 33627 ssh2 ...	2020-05-03 22:29:33
119.179.40.37	attack	trying to access non-authorized port	2020-05-03 22:01:28
87.27.16.195	attack	fail2ban	2020-05-03 22:12:10
64.225.114.156	attack	[Sun May 03 14:55:44 2020] - DDoS Attack From IP: 64.225.114.156 Port: 41685	2020-05-03 22:26:36
181.115.221.254	attackspambots	proto=tcp . spt=43415 . dpt=25 . Listed on dnsbl-sorbs plus abuseat-org and barracuda (235)	2020-05-03 22:00:27
159.89.38.228	attack	May 3 12:45:13 game-panel sshd[10714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.38.228 May 3 12:45:15 game-panel sshd[10714]: Failed password for invalid user nexus from 159.89.38.228 port 59738 ssh2 May 3 12:49:10 game-panel sshd[10812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.38.228	2020-05-03 22:30:40
180.76.160.148	attackspam	SSH auth scanning - multiple failed logins	2020-05-03 22:07:39
81.16.122.49	attackspambots	(mod_security) mod_security (id:230011) triggered by 81.16.122.49 (IR/Iran/-): 5 in the last 3600 secs	2020-05-03 22:26:10
129.211.67.139	attackbots	May 3 14:13:21 v22018086721571380 sshd[20798]: Failed password for invalid user luan from 129.211.67.139 port 58722 ssh2	2020-05-03 22:30:55
106.75.7.123	attack	May 3 15:00:28 hosting sshd[9773]: Invalid user edu01 from 106.75.7.123 port 36294 May 3 15:00:28 hosting sshd[9773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.7.123 May 3 15:00:28 hosting sshd[9773]: Invalid user edu01 from 106.75.7.123 port 36294 May 3 15:00:30 hosting sshd[9773]: Failed password for invalid user edu01 from 106.75.7.123 port 36294 ssh2 May 3 15:14:13 hosting sshd[11834]: Invalid user user from 106.75.7.123 port 55008 ...	2020-05-03 21:56:41
112.85.42.173	attackbots	May 3 15:51:36 home sshd[19074]: Failed password for root from 112.85.42.173 port 41781 ssh2 May 3 15:51:52 home sshd[19074]: error: maximum authentication attempts exceeded for root from 112.85.42.173 port 41781 ssh2 [preauth] May 3 15:52:01 home sshd[19122]: Failed password for root from 112.85.42.173 port 15678 ssh2 ...	2020-05-03 21:59:06
107.150.99.76	attackbotsspam	May 3 16:19:42 tuxlinux sshd[48561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.150.99.76 user=root May 3 16:19:44 tuxlinux sshd[48561]: Failed password for root from 107.150.99.76 port 37696 ssh2 May 3 16:19:42 tuxlinux sshd[48561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.150.99.76 user=root May 3 16:19:44 tuxlinux sshd[48561]: Failed password for root from 107.150.99.76 port 37696 ssh2 ...	2020-05-03 22:28:48
166.62.100.99	attack	166.62.100.99 - - \[03/May/2020:14:14:04 +0200\] "POST /wp-login.php HTTP/1.0" 200 6400 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 166.62.100.99 - - \[03/May/2020:14:14:07 +0200\] "POST /wp-login.php HTTP/1.0" 200 6412 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 166.62.100.99 - - \[03/May/2020:14:14:09 +0200\] "POST /wp-login.php HTTP/1.0" 200 6404 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-05-03 21:57:29
222.186.30.57	attack	03.05.2020 14:26:56 SSH access blocked by firewall	2020-05-03 22:28:18
203.194.104.3	attackbots	(imapd) Failed IMAP login from 203.194.104.3 (IN/India/dhcp-194-104-3.in2cable.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 3 16:43:42 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 2 attempts in 8 secs): user=, method=PLAIN, rip=203.194.104.3, lip=5.63.12.44, TLS: Connection closed, session=	2020-05-03 22:17:28

Recently Reported IPs

83.137.158.13	137.226.0.168	194.26.192.172	137.226.0.155
137.226.0.143	138.197.69.179	36.93.35.153	77.202.10.220
116.110.11.208	198.20.69.100	175.100.87.209	94.102.56.10
144.76.99.207	61.191.56.60	47.89.185.178	43.250.107.91
181.78.19.196	5.167.64.121	5.167.64.113	5.167.64.98