City: unknown
Region: unknown
Country: Portugal
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.156.129.32 | attack | Malicious IP |
2024-06-11 21:03:25 |
| 45.156.129.23 | attack | hacking |
2024-02-21 16:21:38 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.154.220.0 - 45.157.167.255
CIDR: 45.157.160.0/21, 45.157.128.0/19, 45.154.224.0/19, 45.157.0.0/17, 45.154.220.0/22, 45.156.0.0/16, 45.155.0.0/16
NetName: RIPE
NetHandle: NET-45-154-220-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2014-05-22
Updated: 2025-02-10
Comment: These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref: https://rdap.arin.net/registry/ip/45.154.220.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois.ripe.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.156.129.103
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 775
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.156.129.103. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026031201 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 13 12:30:13 CST 2026
;; MSG SIZE rcvd: 107103.129.156.45.in-addr.arpa domain name pointer sh-chi-us-gp1-wk138d.internet-census.org.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
103.129.156.45.in-addr.arpa name = sh-chi-us-gp1-wk138d.internet-census.org.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 59.124.90.112 | attackspambots | Fail2Ban Ban Triggered |
2020-07-21 05:43:37 |
| 88.214.26.90 | attackspam | SSH Bruteforce Attempt on Honeypot |
2020-07-21 05:30:09 |
| 46.38.150.191 | attackspambots | Jul 20 23:29:56 srv01 postfix/smtpd\[333\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 23:30:14 srv01 postfix/smtpd\[32713\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 23:30:24 srv01 postfix/smtpd\[333\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 23:30:29 srv01 postfix/smtpd\[393\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 23:30:46 srv01 postfix/smtpd\[333\]: warning: unknown\[46.38.150.191\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-21 05:30:51 |
| 1.209.110.88 | attack | Invalid user casa from 1.209.110.88 port 35952 |
2020-07-21 05:23:11 |
| 103.246.240.30 | attackbots | Jul 20 17:31:49 ny01 sshd[20851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.246.240.30 Jul 20 17:31:50 ny01 sshd[20851]: Failed password for invalid user eni from 103.246.240.30 port 56392 ssh2 Jul 20 17:33:34 ny01 sshd[21067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.246.240.30 |
2020-07-21 05:35:32 |
| 181.60.79.253 | attackbotsspam | Invalid user eka from 181.60.79.253 port 43842 |
2020-07-21 05:47:36 |
| 222.186.175.169 | attackspam | Jul 20 23:22:06 nextcloud sshd\[27300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Jul 20 23:22:08 nextcloud sshd\[27300\]: Failed password for root from 222.186.175.169 port 51036 ssh2 Jul 20 23:22:17 nextcloud sshd\[27300\]: Failed password for root from 222.186.175.169 port 51036 ssh2 |
2020-07-21 05:23:29 |
| 221.237.189.26 | attackbotsspam | Jul 20 22:43:28 icecube postfix/smtpd[6766]: disconnect from unknown[221.237.189.26] ehlo=1 auth=0/1 quit=1 commands=2/3 |
2020-07-21 05:53:30 |
| 49.233.199.240 | attack | 2020-07-20T20:21:46.907347ionos.janbro.de sshd[22122]: Invalid user gu from 49.233.199.240 port 41280 2020-07-20T20:21:49.175417ionos.janbro.de sshd[22122]: Failed password for invalid user gu from 49.233.199.240 port 41280 ssh2 2020-07-20T20:36:11.562511ionos.janbro.de sshd[22148]: Invalid user furukawa from 49.233.199.240 port 43408 2020-07-20T20:36:12.030981ionos.janbro.de sshd[22148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.199.240 2020-07-20T20:36:11.562511ionos.janbro.de sshd[22148]: Invalid user furukawa from 49.233.199.240 port 43408 2020-07-20T20:36:13.651936ionos.janbro.de sshd[22148]: Failed password for invalid user furukawa from 49.233.199.240 port 43408 ssh2 2020-07-20T20:43:18.493252ionos.janbro.de sshd[22176]: Invalid user brenda from 49.233.199.240 port 44478 2020-07-20T20:43:19.000132ionos.janbro.de sshd[22176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.199.240 ... |
2020-07-21 05:54:09 |
| 104.211.66.54 | attackbotsspam | IP 104.211.66.54 attacked honeypot on port: 1433 at 7/20/2020 1:43:01 PM |
2020-07-21 05:51:41 |
| 115.236.167.108 | attack | Invalid user zhangkai from 115.236.167.108 port 37292 |
2020-07-21 05:42:04 |
| 137.117.134.83 | attackspam | Invalid user safety from 137.117.134.83 port 49542 |
2020-07-21 05:45:47 |
| 144.172.71.182 | attackspambots | CMS (WordPress or Joomla) login attempt. |
2020-07-21 05:43:10 |
| 5.255.253.98 | attack | [Tue Jul 21 03:43:38.501561 2020] [:error] [pid 27546:tid 140477969983232] [client 5.255.253.98:64090] [client 5.255.253.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XxYB@vRI7sPyKD70o9OK9gAAAcM"] ... |
2020-07-21 05:47:23 |
| 199.19.224.78 | attackbots | " " |
2020-07-21 05:37:42 |