Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
45.156.129.32 attack
Malicious IP
2024-06-11 21:03:25
45.156.129.23 attack
hacking
2024-02-21 16:21:38
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       45.154.220.0 - 45.157.167.255
CIDR:           45.154.224.0/19, 45.154.220.0/22, 45.157.160.0/21, 45.156.0.0/16, 45.157.0.0/17, 45.157.128.0/19, 45.155.0.0/16
NetName:        RIPE
NetHandle:      NET-45-154-220-0-1
Parent:         NET45 (NET-45-0-0-0-0)
NetType:        Early Registrations, Transferred to RIPE NCC
OriginAS:       
Organization:   RIPE Network Coordination Centre (RIPE)
RegDate:        2014-05-22
Updated:        2025-02-10
Comment:        These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref:            https://rdap.arin.net/registry/ip/45.154.220.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois.ripe.net


OrgName:        RIPE Network Coordination Centre
OrgId:          RIPE
Address:        P.O. Box 10096
City:           Amsterdam
StateProv:      
PostalCode:     1001EB
Country:        NL
RegDate:        
Updated:        2013-07-29
Ref:            https://rdap.arin.net/registry/entity/RIPE

ReferralServer:  whois.ripe.net
ResourceLink:  https://apps.db.ripe.net/db-web-ui/query

OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName:   Abuse Contact
OrgAbusePhone:  +31205354444 
OrgAbuseEmail:  abuse@ripe.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE3850-ARIN

OrgTechHandle: RNO29-ARIN
OrgTechName:   RIPE NCC Operations
OrgTechPhone:  +31 20 535 4444 
OrgTechEmail:  hostmaster@ripe.net
OrgTechRef:    https://rdap.arin.net/registry/entity/RNO29-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.156.129.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15193
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.156.129.195.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026031801 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 19 01:30:07 CST 2026
;; MSG SIZE  rcvd: 107
Host info
195.129.156.45.in-addr.arpa domain name pointer sh-chi-us-gd17-wk102d.internet-census.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
195.129.156.45.in-addr.arpa	name = sh-chi-us-gd17-wk102d.internet-census.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
51.68.71.144 attack
Jul 16 08:37:00 legacy sshd[5014]: Failed password for root from 51.68.71.144 port 55492 ssh2
Jul 16 08:41:41 legacy sshd[5164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.71.144
Jul 16 08:41:42 legacy sshd[5164]: Failed password for invalid user teamspeak3 from 51.68.71.144 port 53524 ssh2
...
2019-07-16 14:44:11
137.74.194.226 attackbots
Jul 16 07:17:28 localhost sshd\[58818\]: Invalid user store from 137.74.194.226 port 52732
Jul 16 07:17:28 localhost sshd\[58818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.194.226
...
2019-07-16 14:19:15
103.215.222.41 attackspam
xmlrpc attack
2019-07-16 14:44:47
180.170.140.252 attack
2019-07-16T08:49:41.377162  sshd[25664]: Invalid user administracion from 180.170.140.252 port 3233
2019-07-16T08:49:41.388669  sshd[25664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.170.140.252
2019-07-16T08:49:41.377162  sshd[25664]: Invalid user administracion from 180.170.140.252 port 3233
2019-07-16T08:49:43.873831  sshd[25664]: Failed password for invalid user administracion from 180.170.140.252 port 3233 ssh2
2019-07-16T08:53:31.777995  sshd[25709]: Invalid user mongod from 180.170.140.252 port 59714
...
2019-07-16 14:59:07
172.245.56.247 attackbots
2019-07-16T06:21:44.572701lon01.zurich-datacenter.net sshd\[19509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vortex.secunit.org  user=root
2019-07-16T06:21:46.067360lon01.zurich-datacenter.net sshd\[19509\]: Failed password for root from 172.245.56.247 port 47642 ssh2
2019-07-16T06:26:20.616494lon01.zurich-datacenter.net sshd\[19636\]: Invalid user jenkins from 172.245.56.247 port 49002
2019-07-16T06:26:20.620993lon01.zurich-datacenter.net sshd\[19636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vortex.secunit.org
2019-07-16T06:26:22.342960lon01.zurich-datacenter.net sshd\[19636\]: Failed password for invalid user jenkins from 172.245.56.247 port 49002 ssh2
...
2019-07-16 14:35:33
159.65.164.133 attack
2019-07-16T06:16:42.717538abusebot-5.cloudsearch.cf sshd\[28614\]: Invalid user mysql from 159.65.164.133 port 44930
2019-07-16 14:30:23
2607:f8b0:4000:812::2013 attack
http://aaappstoresidd06.ikanl.biz/
216.58.194.147
2607:f8b0:4000:812::2013

redirecting to

http://128.199.129.239/kopet
128.199.129.239

redirecting to

https://paypal-logins.org/repository1.php
138.68.247.144


Received: from source:[209.85.166.68] helo:mail-io1-f68.google.com
Return-Path: 
Message-ID: <5_____@mx.google.com>
From: Apple 
X-Google-Original-From: Apple <26412607@54668840.97510204.it>
Date: Mon, 15 Jul 2019 22:55:23 +0200
To: undisclosed-recipients:;
Subject: 支払いの問題でAppleIDがロックされました。 【 報告 】
2019-07-16 14:16:31
51.68.139.151 attackbots
2019-07-16T01:34:03.579915abusebot-3.cloudsearch.cf sshd\[2992\]: Invalid user admin from 51.68.139.151 port 41064
2019-07-16 14:40:26
51.254.129.128 attackbots
Jul 16 08:04:42 core01 sshd\[11383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.129.128  user=root
Jul 16 08:04:44 core01 sshd\[11383\]: Failed password for root from 51.254.129.128 port 47913 ssh2
...
2019-07-16 14:32:27
178.128.82.133 attackspambots
Jul 16 09:46:30 server01 sshd\[20705\]: Invalid user mariajose from 178.128.82.133
Jul 16 09:46:30 server01 sshd\[20705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.82.133
Jul 16 09:46:31 server01 sshd\[20705\]: Failed password for invalid user mariajose from 178.128.82.133 port 48514 ssh2
...
2019-07-16 14:58:16
50.250.83.177 attackbots
Brute force attempt
2019-07-16 14:24:36
200.117.87.108 attack
Unauthorised access (Jul 16) SRC=200.117.87.108 LEN=40 TTL=49 ID=57436 TCP DPT=23 WINDOW=8689 SYN 
Unauthorised access (Jul 16) SRC=200.117.87.108 LEN=40 TTL=49 ID=57436 TCP DPT=23 WINDOW=8689 SYN
2019-07-16 14:43:51
142.93.101.148 attackbots
Jul 16 07:45:48 meumeu sshd[22250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.148 
Jul 16 07:45:50 meumeu sshd[22250]: Failed password for invalid user redmine from 142.93.101.148 port 42692 ssh2
Jul 16 07:50:30 meumeu sshd[23130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.148 
...
2019-07-16 14:07:08
216.58.194.147 attackspam
http://aaappstoresidd06.ikanl.biz/
216.58.194.147
2607:f8b0:4000:812::2013

redirecting to

http://128.199.129.239/kopet
128.199.129.239

redirecting to

https://paypal-logins.org/repository1.php
138.68.247.144


Received: from source:[209.85.166.68] helo:mail-io1-f68.google.com
Return-Path: 
Message-ID: <5_____@mx.google.com>
From: Apple 
X-Google-Original-From: Apple <26412607@54668840.97510204.it>
Date: Mon, 15 Jul 2019 22:55:23 +0200
To: undisclosed-recipients:;
Subject: 支払いの問題でAppleIDがロックされました。 【 報告 】
2019-07-16 14:42:42
185.220.101.21 attackspambots
3 failed attempts at connecting to SSH.
2019-07-16 14:06:28

Recently Reported IPs

85.217.149.74 198.72.9.139 51.91.165.10 198.202.255.217
82.27.17.146 56.42.185.171 110.77.187.11 2606:4700:10::ac43:173e
2606:4700:10::6814:8687 2606:4700:10::ac43:1115 2606:4700:10::6814:6218 110.77.248.39
2606:4700:10::6814:7273 2606:4700:10::6814:8526 2606:4700:10::6816:113 2606:4700:10::ac43:1256
2606:4700:10::6814:7673 14.207.194.70 2606:4700:10::6814:6081 109.167.82.38