City: unknown
Region: unknown
Country: Portugal
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.156.129.32 | attack | Malicious IP |
2024-06-11 21:03:25 |
| 45.156.129.23 | attack | hacking |
2024-02-21 16:21:38 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.154.220.0 - 45.157.167.255
CIDR: 45.156.0.0/16, 45.154.220.0/22, 45.157.0.0/17, 45.154.224.0/19, 45.157.160.0/21, 45.157.128.0/19, 45.155.0.0/16
NetName: RIPE
NetHandle: NET-45-154-220-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2014-05-22
Updated: 2025-02-10
Comment: These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref: https://rdap.arin.net/registry/ip/45.154.220.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois.ripe.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.156.129.163
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23940
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.156.129.163. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026051802 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 19 13:30:05 CST 2026
;; MSG SIZE rcvd: 107163.129.156.45.in-addr.arpa domain name pointer sh-chi-us-gp6-wk126d.internet-census.org.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
163.129.156.45.in-addr.arpa name = sh-chi-us-gp6-wk126d.internet-census.org.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 60.249.138.198 | attack | DATE:2020-09-08 18:56:05, IP:60.249.138.198, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-09-09 18:56:02 |
| 109.110.52.77 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): |
2020-09-09 18:48:29 |
| 86.59.178.57 | attackbotsspam | $f2bV_matches |
2020-09-09 18:42:23 |
| 45.142.120.192 | attackbots | Sep 9 04:42:39 relay postfix/smtpd\[31841\]: warning: unknown\[45.142.120.192\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 04:43:20 relay postfix/smtpd\[31781\]: warning: unknown\[45.142.120.192\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 04:43:56 relay postfix/smtpd\[31841\]: warning: unknown\[45.142.120.192\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 04:44:38 relay postfix/smtpd\[31851\]: warning: unknown\[45.142.120.192\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 04:45:15 relay postfix/smtpd\[31840\]: warning: unknown\[45.142.120.192\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-09 18:54:12 |
| 142.11.240.221 | attack | E-Mail Spam (RBL) [REJECTED] |
2020-09-09 19:07:40 |
| 191.102.72.178 | attackspambots | Lines containing failures of 191.102.72.178 (max 1000) Sep 7 21:11:48 UTC__SANYALnet-Labs__cac12 sshd[20018]: Connection from 191.102.72.178 port 37064 on 64.137.176.96 port 22 Sep 7 21:11:49 UTC__SANYALnet-Labs__cac12 sshd[20018]: Address 191.102.72.178 maps to fenix.empaquesdelcauca.com.co, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 7 21:11:49 UTC__SANYALnet-Labs__cac12 sshd[20018]: Invalid user db2inst1 from 191.102.72.178 port 37064 Sep 7 21:11:49 UTC__SANYALnet-Labs__cac12 sshd[20018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.102.72.178 Sep 7 21:11:52 UTC__SANYALnet-Labs__cac12 sshd[20018]: Failed password for invalid user db2inst1 from 191.102.72.178 port 37064 ssh2 Sep 7 21:11:52 UTC__SANYALnet-Labs__cac12 sshd[20018]: Received disconnect from 191.102.72.178 port 37064:11: Bye Bye [preauth] Sep 7 21:11:52 UTC__SANYALnet-Labs__cac12 sshd[20018]: Disconnected from 191.102.72.17........ ------------------------------ |
2020-09-09 18:44:30 |
| 84.17.60.215 | attackspambots | fell into ViewStateTrap:vaduz |
2020-09-09 18:55:13 |
| 159.65.149.139 | attackbotsspam | (sshd) Failed SSH login from 159.65.149.139 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 8 12:52:16 optimus sshd[6433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.149.139 user=root Sep 8 12:52:19 optimus sshd[6433]: Failed password for root from 159.65.149.139 port 46602 ssh2 Sep 8 13:07:56 optimus sshd[11136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.149.139 user=root Sep 8 13:07:59 optimus sshd[11136]: Failed password for root from 159.65.149.139 port 55236 ssh2 Sep 8 13:11:56 optimus sshd[12438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.149.139 user=root |
2020-09-09 18:31:35 |
| 112.85.42.173 | attack | Sep 9 12:42:24 jane sshd[16846]: Failed password for root from 112.85.42.173 port 25898 ssh2 Sep 9 12:42:28 jane sshd[16846]: Failed password for root from 112.85.42.173 port 25898 ssh2 ... |
2020-09-09 18:43:19 |
| 49.88.112.116 | attackspambots | Sep 9 11:03:13 localhost sshd[84249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.116 user=root Sep 9 11:03:15 localhost sshd[84249]: Failed password for root from 49.88.112.116 port 44439 ssh2 Sep 9 11:03:17 localhost sshd[84249]: Failed password for root from 49.88.112.116 port 44439 ssh2 Sep 9 11:03:13 localhost sshd[84249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.116 user=root Sep 9 11:03:15 localhost sshd[84249]: Failed password for root from 49.88.112.116 port 44439 ssh2 Sep 9 11:03:17 localhost sshd[84249]: Failed password for root from 49.88.112.116 port 44439 ssh2 Sep 9 11:03:13 localhost sshd[84249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.116 user=root Sep 9 11:03:15 localhost sshd[84249]: Failed password for root from 49.88.112.116 port 44439 ssh2 Sep 9 11:03:17 localhost sshd[84249]: Failed pas ... |
2020-09-09 19:03:38 |
| 63.83.73.195 | attack | Lines containing failures of 63.83.73.195 Sep 8 19:36:30 v2hgb postfix/smtpd[23525]: connect from oxidation.lizstyles.com[63.83.73.195] Sep x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=63.83.73.195 |
2020-09-09 19:08:07 |
| 106.13.82.231 | attackspam | sshd: Failed password for invalid user .... from 106.13.82.231 port 54392 ssh2 (6 attempts) |
2020-09-09 18:57:13 |
| 103.30.151.17 | attackspam | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-09 18:29:08 |
| 82.141.160.66 | attackspambots | Sep 2 16:12:00 mail.srvfarm.net postfix/smtpd[1805931]: warning: unknown[82.141.160.66]: SASL PLAIN authentication failed: Sep 2 16:12:00 mail.srvfarm.net postfix/smtpd[1805931]: lost connection after AUTH from unknown[82.141.160.66] Sep 2 16:18:53 mail.srvfarm.net postfix/smtpd[1808122]: warning: unknown[82.141.160.66]: SASL PLAIN authentication failed: Sep 2 16:18:53 mail.srvfarm.net postfix/smtpd[1808122]: lost connection after AUTH from unknown[82.141.160.66] Sep 2 16:19:16 mail.srvfarm.net postfix/smtpd[1808109]: warning: unknown[82.141.160.66]: SASL PLAIN authentication failed: |
2020-09-09 18:56:54 |
| 132.232.137.62 | attackbotsspam | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): |
2020-09-09 18:51:28 |