City: unknown
Region: unknown
Country: Portugal
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.156.129.32 | attack | Malicious IP |
2024-06-11 21:03:25 |
| 45.156.129.23 | attack | hacking |
2024-02-21 16:21:38 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.154.220.0 - 45.157.167.255
CIDR: 45.154.224.0/19, 45.154.220.0/22, 45.157.160.0/21, 45.156.0.0/16, 45.157.0.0/17, 45.157.128.0/19, 45.155.0.0/16
NetName: RIPE
NetHandle: NET-45-154-220-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2014-05-22
Updated: 2025-02-10
Comment: These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref: https://rdap.arin.net/registry/ip/45.154.220.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois.ripe.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.156.129.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15193
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.156.129.195. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026031801 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 19 01:30:07 CST 2026
;; MSG SIZE rcvd: 107
195.129.156.45.in-addr.arpa domain name pointer sh-chi-us-gd17-wk102d.internet-census.org.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
195.129.156.45.in-addr.arpa name = sh-chi-us-gd17-wk102d.internet-census.org.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.68.71.144 | attack | Jul 16 08:37:00 legacy sshd[5014]: Failed password for root from 51.68.71.144 port 55492 ssh2 Jul 16 08:41:41 legacy sshd[5164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.71.144 Jul 16 08:41:42 legacy sshd[5164]: Failed password for invalid user teamspeak3 from 51.68.71.144 port 53524 ssh2 ... |
2019-07-16 14:44:11 |
| 137.74.194.226 | attackbots | Jul 16 07:17:28 localhost sshd\[58818\]: Invalid user store from 137.74.194.226 port 52732 Jul 16 07:17:28 localhost sshd\[58818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.194.226 ... |
2019-07-16 14:19:15 |
| 103.215.222.41 | attackspam | xmlrpc attack |
2019-07-16 14:44:47 |
| 180.170.140.252 | attack | 2019-07-16T08:49:41.377162 sshd[25664]: Invalid user administracion from 180.170.140.252 port 3233 2019-07-16T08:49:41.388669 sshd[25664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.170.140.252 2019-07-16T08:49:41.377162 sshd[25664]: Invalid user administracion from 180.170.140.252 port 3233 2019-07-16T08:49:43.873831 sshd[25664]: Failed password for invalid user administracion from 180.170.140.252 port 3233 ssh2 2019-07-16T08:53:31.777995 sshd[25709]: Invalid user mongod from 180.170.140.252 port 59714 ... |
2019-07-16 14:59:07 |
| 172.245.56.247 | attackbots | 2019-07-16T06:21:44.572701lon01.zurich-datacenter.net sshd\[19509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vortex.secunit.org user=root 2019-07-16T06:21:46.067360lon01.zurich-datacenter.net sshd\[19509\]: Failed password for root from 172.245.56.247 port 47642 ssh2 2019-07-16T06:26:20.616494lon01.zurich-datacenter.net sshd\[19636\]: Invalid user jenkins from 172.245.56.247 port 49002 2019-07-16T06:26:20.620993lon01.zurich-datacenter.net sshd\[19636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vortex.secunit.org 2019-07-16T06:26:22.342960lon01.zurich-datacenter.net sshd\[19636\]: Failed password for invalid user jenkins from 172.245.56.247 port 49002 ssh2 ... |
2019-07-16 14:35:33 |
| 159.65.164.133 | attack | 2019-07-16T06:16:42.717538abusebot-5.cloudsearch.cf sshd\[28614\]: Invalid user mysql from 159.65.164.133 port 44930 |
2019-07-16 14:30:23 |
| 2607:f8b0:4000:812::2013 | attack | http://aaappstoresidd06.ikanl.biz/ 216.58.194.147 2607:f8b0:4000:812::2013 redirecting to http://128.199.129.239/kopet 128.199.129.239 redirecting to https://paypal-logins.org/repository1.php 138.68.247.144 Received: from source:[209.85.166.68] helo:mail-io1-f68.google.com Return-Path: |
2019-07-16 14:16:31 |
| 51.68.139.151 | attackbots | 2019-07-16T01:34:03.579915abusebot-3.cloudsearch.cf sshd\[2992\]: Invalid user admin from 51.68.139.151 port 41064 |
2019-07-16 14:40:26 |
| 51.254.129.128 | attackbots | Jul 16 08:04:42 core01 sshd\[11383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.129.128 user=root Jul 16 08:04:44 core01 sshd\[11383\]: Failed password for root from 51.254.129.128 port 47913 ssh2 ... |
2019-07-16 14:32:27 |
| 178.128.82.133 | attackspambots | Jul 16 09:46:30 server01 sshd\[20705\]: Invalid user mariajose from 178.128.82.133 Jul 16 09:46:30 server01 sshd\[20705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.82.133 Jul 16 09:46:31 server01 sshd\[20705\]: Failed password for invalid user mariajose from 178.128.82.133 port 48514 ssh2 ... |
2019-07-16 14:58:16 |
| 50.250.83.177 | attackbots | Brute force attempt |
2019-07-16 14:24:36 |
| 200.117.87.108 | attack | Unauthorised access (Jul 16) SRC=200.117.87.108 LEN=40 TTL=49 ID=57436 TCP DPT=23 WINDOW=8689 SYN Unauthorised access (Jul 16) SRC=200.117.87.108 LEN=40 TTL=49 ID=57436 TCP DPT=23 WINDOW=8689 SYN |
2019-07-16 14:43:51 |
| 142.93.101.148 | attackbots | Jul 16 07:45:48 meumeu sshd[22250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.148 Jul 16 07:45:50 meumeu sshd[22250]: Failed password for invalid user redmine from 142.93.101.148 port 42692 ssh2 Jul 16 07:50:30 meumeu sshd[23130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.148 ... |
2019-07-16 14:07:08 |
| 216.58.194.147 | attackspam | http://aaappstoresidd06.ikanl.biz/ 216.58.194.147 2607:f8b0:4000:812::2013 redirecting to http://128.199.129.239/kopet 128.199.129.239 redirecting to https://paypal-logins.org/repository1.php 138.68.247.144 Received: from source:[209.85.166.68] helo:mail-io1-f68.google.com Return-Path: |
2019-07-16 14:42:42 |
| 185.220.101.21 | attackspambots | 3 failed attempts at connecting to SSH. |
2019-07-16 14:06:28 |