45.156.128.153

Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.156.128.17	attack	Malicious IP	2024-04-15 12:12:05
45.156.128.22	botsattack	port attack	2024-03-10 17:48:47
45.156.128.27	attack	hacking	2024-02-16 13:30:44
45.156.128.36	proxy	VPN fraud	2023-05-31 12:39:57
45.156.128.33	proxy	VPN fraud	2023-05-31 12:37:48
45.156.128.20	proxy	VPN fraud connection	2023-05-22 13:09:02

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       45.154.220.0 - 45.157.167.255
CIDR:           45.154.224.0/19, 45.156.0.0/16, 45.157.128.0/19, 45.157.0.0/17, 45.155.0.0/16, 45.157.160.0/21, 45.154.220.0/22
NetName:        RIPE
NetHandle:      NET-45-154-220-0-1
Parent:         NET45 (NET-45-0-0-0-0)
NetType:        Early Registrations, Transferred to RIPE NCC
OriginAS:       
Organization:   RIPE Network Coordination Centre (RIPE)
RegDate:        2014-05-22
Updated:        2025-02-10
Comment:        These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref:            https://rdap.arin.net/registry/ip/45.154.220.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois.ripe.net


OrgName:        RIPE Network Coordination Centre
OrgId:          RIPE
Address:        P.O. Box 10096
City:           Amsterdam
StateProv:      
PostalCode:     1001EB
Country:        NL
RegDate:        
Updated:        2013-07-29
Ref:            https://rdap.arin.net/registry/entity/RIPE

ReferralServer:  whois.ripe.net
ResourceLink:  https://apps.db.ripe.net/db-web-ui/query

OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName:   Abuse Contact
OrgAbusePhone:  +31205354444 
OrgAbuseEmail:  abuse@ripe.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE3850-ARIN

OrgTechHandle: RNO29-ARIN
OrgTechName:   RIPE NCC Operations
OrgTechPhone:  +31 20 535 4444 
OrgTechEmail:  hostmaster@ripe.net
OrgTechRef:    https://rdap.arin.net/registry/entity/RNO29-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.156.128.153
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14461
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.156.128.153.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026091601 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 17 11:30:05 CST 2026
;; MSG SIZE  rcvd: 107

Host info

153.128.156.45.in-addr.arpa domain name pointer sh-ams-nl-gp6-wk122b.internet-census.org.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
153.128.156.45.in-addr.arpa	name = sh-ams-nl-gp6-wk122b.internet-census.org.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
187.121.205.206	attackbots	Jul 11 21:46:55 mail.srvfarm.net postfix/smtps/smtpd[1520486]: warning: unknown[187.121.205.206]: SASL PLAIN authentication failed: Jul 11 21:46:56 mail.srvfarm.net postfix/smtps/smtpd[1520486]: lost connection after AUTH from unknown[187.121.205.206] Jul 11 21:52:05 mail.srvfarm.net postfix/smtps/smtpd[1516964]: warning: unknown[187.121.205.206]: SASL PLAIN authentication failed: Jul 11 21:52:06 mail.srvfarm.net postfix/smtps/smtpd[1516964]: lost connection after AUTH from unknown[187.121.205.206] Jul 11 21:53:21 mail.srvfarm.net postfix/smtpd[1517906]: warning: unknown[187.121.205.206]: SASL PLAIN authentication failed:	2020-07-12 06:54:52
139.59.18.197	attack	215. On Jul 11 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 139.59.18.197.	2020-07-12 06:34:53
187.188.111.161	attack	(imapd) Failed IMAP login from 187.188.111.161 (MX/Mexico/fixed-187-188-111-161.totalplay.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 12 00:35:25 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 21 secs): user=, method=PLAIN, rip=187.188.111.161, lip=5.63.12.44, TLS: Connection closed, session=	2020-07-12 06:54:19
165.227.225.195	attackspambots	Jul 11 20:18:26 rush sshd[11367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.225.195 Jul 11 20:18:28 rush sshd[11367]: Failed password for invalid user mangna from 165.227.225.195 port 43954 ssh2 Jul 11 20:21:35 rush sshd[11412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.225.195 ...	2020-07-12 06:33:09
46.38.150.191	attackspambots	2020-07-11 22:58:18 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=iptv@12345@mail.csmailer.org) 2020-07-11 22:59:35 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=ipart@mail.csmailer.org) 2020-07-11 23:00:49 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=huangwei@mail.csmailer.org) 2020-07-11 23:02:02 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=lvyan520@mail.csmailer.org) 2020-07-11 23:03:18 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=host123@mail.csmailer.org) ...	2020-07-12 06:59:17
111.67.199.188	attackbotsspam	Invalid user tracker from 111.67.199.188 port 42748	2020-07-12 07:01:12
222.186.175.151	attackspambots	Jul 12 00:28:11 nextcloud sshd\[12146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Jul 12 00:28:13 nextcloud sshd\[12146\]: Failed password for root from 222.186.175.151 port 20220 ssh2 Jul 12 00:28:17 nextcloud sshd\[12146\]: Failed password for root from 222.186.175.151 port 20220 ssh2	2020-07-12 06:30:54
200.71.70.168	attack	Jul 11 21:45:03 mail.srvfarm.net postfix/smtpd[1517907]: warning: 200-71-70-168.sferanet.com.br[200.71.70.168]: SASL PLAIN authentication failed: Jul 11 21:45:04 mail.srvfarm.net postfix/smtpd[1517907]: lost connection after AUTH from 200-71-70-168.sferanet.com.br[200.71.70.168] Jul 11 21:46:48 mail.srvfarm.net postfix/smtps/smtpd[1520434]: warning: 200-71-70-168.sferanet.com.br[200.71.70.168]: SASL PLAIN authentication failed: Jul 11 21:46:49 mail.srvfarm.net postfix/smtps/smtpd[1520434]: lost connection after AUTH from 200-71-70-168.sferanet.com.br[200.71.70.168] Jul 11 21:50:33 mail.srvfarm.net postfix/smtps/smtpd[1520435]: warning: 200-71-70-168.sferanet.com.br[200.71.70.168]: SASL PLAIN authentication failed:	2020-07-12 06:53:25
136.49.109.217	attack	Jul 12 00:37:33 h2779839 sshd[18129]: Invalid user chfjiao from 136.49.109.217 port 59388 Jul 12 00:37:33 h2779839 sshd[18129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.49.109.217 Jul 12 00:37:33 h2779839 sshd[18129]: Invalid user chfjiao from 136.49.109.217 port 59388 Jul 12 00:37:34 h2779839 sshd[18129]: Failed password for invalid user chfjiao from 136.49.109.217 port 59388 ssh2 Jul 12 00:41:07 h2779839 sshd[18206]: Invalid user pkomurluoglu from 136.49.109.217 port 55288 Jul 12 00:41:07 h2779839 sshd[18206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.49.109.217 Jul 12 00:41:07 h2779839 sshd[18206]: Invalid user pkomurluoglu from 136.49.109.217 port 55288 Jul 12 00:41:10 h2779839 sshd[18206]: Failed password for invalid user pkomurluoglu from 136.49.109.217 port 55288 ssh2 Jul 12 00:42:27 h2779839 sshd[18225]: Invalid user yarn from 136.49.109.217 port 52622 ...	2020-07-12 07:01:29
119.192.55.49	attackspambots	Jul 12 01:18:45 pkdns2 sshd\[49900\]: Invalid user zxincsap from 119.192.55.49Jul 12 01:18:48 pkdns2 sshd\[49900\]: Failed password for invalid user zxincsap from 119.192.55.49 port 60699 ssh2Jul 12 01:22:19 pkdns2 sshd\[50094\]: Invalid user izefia from 119.192.55.49Jul 12 01:22:21 pkdns2 sshd\[50094\]: Failed password for invalid user izefia from 119.192.55.49 port 59117 ssh2Jul 12 01:25:58 pkdns2 sshd\[50276\]: Invalid user demo from 119.192.55.49Jul 12 01:26:00 pkdns2 sshd\[50276\]: Failed password for invalid user demo from 119.192.55.49 port 57541 ssh2 ...	2020-07-12 07:00:51
118.24.36.247	attackbots	Invalid user gunter from 118.24.36.247 port 46684	2020-07-12 06:51:24
85.208.213.114	attack	Failed password for invalid user pa from 85.208.213.114 port 16110 ssh2	2020-07-12 06:41:47
106.13.173.73	attack	SSH Invalid Login	2020-07-12 06:52:06
211.159.173.25	attackspam	SSH Invalid Login	2020-07-12 06:43:08
111.229.63.223	attack	Jul 11 14:31:04 dignus sshd[15021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.63.223 Jul 11 14:31:05 dignus sshd[15021]: Failed password for invalid user ec2-user from 111.229.63.223 port 53558 ssh2 Jul 11 14:34:39 dignus sshd[15470]: Invalid user zhaoh from 111.229.63.223 port 37368 Jul 11 14:34:39 dignus sshd[15470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.63.223 Jul 11 14:34:41 dignus sshd[15470]: Failed password for invalid user zhaoh from 111.229.63.223 port 37368 ssh2 ...	2020-07-12 06:24:09

Recently Reported IPs

167.99.212.174	35.195.90.168	175.107.216.5	112.43.33.154
157.230.223.100	47.84.105.205	20.12.240.68	100.53.201.86
20.14.94.84	94.231.206.202	148.66.59.210	2606:4700:10::6814:6725
39.128.64.35	101.33.123.17	138.2.102.66	172.237.119.59
2606:4700:10::6816:4149	39.98.121.154	62.213.183.78	43.98.199.229