City: unknown
Region: unknown
Country: Portugal
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.156.128.17 | attack | Malicious IP |
2024-04-15 12:12:05 |
| 45.156.128.22 | botsattack | port attack |
2024-03-10 17:48:47 |
| 45.156.128.27 | attack | hacking |
2024-02-16 13:30:44 |
| 45.156.128.36 | proxy | VPN fraud |
2023-05-31 12:39:57 |
| 45.156.128.33 | proxy | VPN fraud |
2023-05-31 12:37:48 |
| 45.156.128.20 | proxy | VPN fraud connection |
2023-05-22 13:09:02 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.154.220.0 - 45.157.167.255
CIDR: 45.154.224.0/19, 45.157.160.0/21, 45.155.0.0/16, 45.157.0.0/17, 45.156.0.0/16, 45.154.220.0/22, 45.157.128.0/19
NetName: RIPE
NetHandle: NET-45-154-220-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2014-05-22
Updated: 2025-02-10
Comment: These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref: https://rdap.arin.net/registry/ip/45.154.220.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois.ripe.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.156.128.169
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27777
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.156.128.169. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026091802 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 19 02:30:06 CST 2026
;; MSG SIZE rcvd: 107169.128.156.45.in-addr.arpa domain name pointer sh-ams-nl-gp6-wk129b.internet-census.org.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
169.128.156.45.in-addr.arpa name = sh-ams-nl-gp6-wk129b.internet-census.org.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.234.10.48 | attack | Jun 9 13:03:51 ajax sshd[12689]: Failed password for root from 49.234.10.48 port 33516 ssh2 Jun 9 13:08:40 ajax sshd[13394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.10.48 |
2020-06-09 20:45:33 |
| 45.227.255.4 | attackspam | Jun 9 **REMOVED** sshd\[9025\]: Invalid user supervisor from 45.227.255.4 Jun 9 **REMOVED** sshd\[9029\]: Invalid user admin from 45.227.255.4 Jun 9 **REMOVED** sshd\[9031\]: Invalid user operator from 45.227.255.4 |
2020-06-09 20:55:09 |
| 222.186.175.23 | attack | SSH/22 MH Probe, BF, Hack - |
2020-06-09 21:07:47 |
| 27.78.14.83 | attackspam | Jun 9 14:47:43 serwer sshd\[32323\]: Invalid user system from 27.78.14.83 port 39396 Jun 9 14:47:43 serwer sshd\[32323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.78.14.83 Jun 9 14:47:46 serwer sshd\[32323\]: Failed password for invalid user system from 27.78.14.83 port 39396 ssh2 ... |
2020-06-09 20:49:05 |
| 37.59.224.39 | attack | Failed password for invalid user yunhe from 37.59.224.39 port 52875 ssh2 |
2020-06-09 20:59:33 |
| 51.254.143.190 | attackspambots | (sshd) Failed SSH login from 51.254.143.190 (FR/France/190.ip-51-254-143.eu): 5 in the last 3600 secs |
2020-06-09 20:50:55 |
| 222.186.31.127 | attack | Jun 9 12:00:57 ip-172-31-62-245 sshd\[18130\]: Failed password for root from 222.186.31.127 port 32012 ssh2\ Jun 9 12:04:05 ip-172-31-62-245 sshd\[18170\]: Failed password for root from 222.186.31.127 port 50216 ssh2\ Jun 9 12:05:38 ip-172-31-62-245 sshd\[18195\]: Failed password for root from 222.186.31.127 port 61312 ssh2\ Jun 9 12:08:38 ip-172-31-62-245 sshd\[18228\]: Failed password for root from 222.186.31.127 port 40344 ssh2\ Jun 9 12:08:40 ip-172-31-62-245 sshd\[18228\]: Failed password for root from 222.186.31.127 port 40344 ssh2\ |
2020-06-09 20:43:01 |
| 95.217.165.224 | attack | Jun 9 07:40:25 xxxxxxx5185820 sshd[24386]: Invalid user namebob from 95.217.165.224 port 57600 Jun 9 07:40:28 xxxxxxx5185820 sshd[24386]: Failed password for invalid user namebob from 95.217.165.224 port 57600 ssh2 Jun 9 07:40:28 xxxxxxx5185820 sshd[24386]: Received disconnect from 95.217.165.224 port 57600:11: Bye Bye [preauth] Jun 9 07:40:28 xxxxxxx5185820 sshd[24386]: Disconnected from 95.217.165.224 port 57600 [preauth] Jun 9 07:46:42 xxxxxxx5185820 sshd[25278]: Failed password for r.r from 95.217.165.224 port 48480 ssh2 Jun 9 07:46:42 xxxxxxx5185820 sshd[25278]: Received disconnect from 95.217.165.224 port 48480:11: Bye Bye [preauth] Jun 9 07:46:42 xxxxxxx5185820 sshd[25278]: Disconnected from 95.217.165.224 port 48480 [preauth] Jun 9 07:48:28 xxxxxxx5185820 sshd[25478]: Failed password for r.r from 95.217.165.224 port 49240 ssh2 Jun 9 07:48:28 xxxxxxx5185820 sshd[25478]: Received disconnect from 95.217.165.224 port 49240:11: Bye Bye [preauth] Jun 9 07:48........ ------------------------------- |
2020-06-09 21:11:29 |
| 178.175.132.74 | attackbots | Unauthorized access detected from black listed ip! |
2020-06-09 21:09:18 |
| 150.136.102.101 | attack | SSH Brute Force |
2020-06-09 20:48:26 |
| 165.22.52.136 | attackspambots | Lines containing failures of 165.22.52.136 Jun 9 13:51:06 shared04 sshd[2460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.52.136 user=mysql Jun 9 13:51:08 shared04 sshd[2460]: Failed password for mysql from 165.22.52.136 port 46902 ssh2 Jun 9 13:51:09 shared04 sshd[2460]: Received disconnect from 165.22.52.136 port 46902:11: Bye Bye [preauth] Jun 9 13:51:09 shared04 sshd[2460]: Disconnected from authenticating user mysql 165.22.52.136 port 46902 [preauth] Jun 9 14:03:17 shared04 sshd[7273]: Invalid user beb from 165.22.52.136 port 60380 Jun 9 14:03:17 shared04 sshd[7273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.52.136 Jun 9 14:03:19 shared04 sshd[7273]: Failed password for invalid user beb from 165.22.52.136 port 60380 ssh2 Jun 9 14:03:19 shared04 sshd[7273]: Received disconnect from 165.22.52.136 port 60380:11: Bye Bye [preauth] Jun 9 14:03:19 shared04 ss........ ------------------------------ |
2020-06-09 20:52:09 |
| 104.236.22.133 | attackspambots | Jun 9 19:06:48 webhost01 sshd[17244]: Failed password for root from 104.236.22.133 port 34608 ssh2 ... |
2020-06-09 20:37:35 |
| 27.121.43.33 | attack | Fail2Ban Ban Triggered |
2020-06-09 21:04:47 |
| 46.38.145.6 | attackbots | Jun 9 14:22:32 web01.agentur-b-2.de postfix/smtpd[204599]: warning: unknown[46.38.145.6]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 9 14:23:46 web01.agentur-b-2.de postfix/smtpd[199548]: warning: unknown[46.38.145.6]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 9 14:25:43 web01.agentur-b-2.de postfix/smtpd[204599]: warning: unknown[46.38.145.6]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 9 14:27:08 web01.agentur-b-2.de postfix/smtpd[204599]: warning: unknown[46.38.145.6]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 9 14:28:40 web01.agentur-b-2.de postfix/smtpd[207197]: warning: unknown[46.38.145.6]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-06-09 20:45:57 |
| 193.27.228.221 | attack | scans 18 times in preceeding hours on the ports (in chronological order) 32681 25182 22799 34434 35165 34720 31612 28901 36251 34345 24953 26289 31899 26864 40018 40752 40962 40239 |
2020-06-09 20:49:19 |