City: Salvador
Region: Bahia
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.162.63.250 | attackspam | (mod_security) mod_security (id:350202) triggered by 45.162.63.250 (AR/Argentina/-): 5 in the last 14400 secs; ID: rub |
2020-08-12 20:10:21 |
| 45.162.60.143 | attack | Unauthorized connection attempt from IP address 45.162.60.143 on Port 445(SMB) |
2020-05-31 06:05:28 |
| 45.162.67.254 | attackspambots | Unauthorized connection attempt detected from IP address 45.162.67.254 to port 445 [J] |
2020-01-05 03:57:31 |
| 45.162.62.94 | attack | BURG,WP GET /wp-login.php |
2019-12-23 19:43:53 |
| 45.162.67.254 | attackspam | Port Scan: TCP/445 |
2019-09-16 07:03:04 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.160.0.0 - 45.177.235.255
CIDR: 45.177.224.0/21, 45.177.0.0/17, 45.160.0.0/12, 45.176.0.0/16, 45.177.232.0/22, 45.177.128.0/18, 45.177.192.0/19
NetName: LACNIC
NetHandle: NET-45-160-0-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2014-09-10
Updated: 2025-02-19
Ref: https://rdap.arin.net/registry/ip/45.160.0.0
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink: whois.lacnic.net
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
ReferralServer: whois://whois.lacnic.net
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechEmail: whois-contact@lacnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.lacnic.net.
% IP Client: 124.223.158.242
% Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-09-01T16:53:28-03:00 - 124.223.158.242
inetnum: 45.162.4.0/22
aut-num: AS268492
abuse-c: JASOU128
owner: JL Provedor
ownerid: 11.793.436/0001-00
responsible: Jamerson Souza dos Santos
owner-c: JASOU128
tech-c: JUAOL137
inetrev: 45.162.4.0/22
nserver: ns1.jlprovedor.com.br
nsstat: 20260828 AA
nslastaa: 20260828
nserver: ns2.jlprovedor.com.br
nsstat: 20260828 AA
nslastaa: 20260828
created: 20180829
changed: 20231003
nic-hdl-br: JASOU128
person: Jamerson Souza
created: 20141224
changed: 20250516
nic-hdl-br: JUAOL137
person: Juliano Antunes de Oliveira
created: 20191125
changed: 20260311
% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.162.6.224
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3052
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.162.6.224. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026090101 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 02 03:53:28 CST 2026
;; MSG SIZE rcvd: 105224.6.162.45.in-addr.arpa domain name pointer 45-162-6-224.cgnat.jlprovedor.com.br.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
224.6.162.45.in-addr.arpa name = 45-162-6-224.cgnat.jlprovedor.com.br.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 102.164.108.43 | attackbots | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-10-01 15:43:44 |
| 106.54.255.57 | attack | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-01T05:05:04Z and 2020-10-01T05:10:49Z |
2020-10-01 15:49:15 |
| 213.141.131.22 | attackbots | Invalid user ian from 213.141.131.22 port 36138 |
2020-10-01 15:44:00 |
| 139.199.123.152 | attackspam | $f2bV_matches |
2020-10-01 15:26:24 |
| 116.31.152.88 | attackbots | 1601498318 - 09/30/2020 22:38:38 Host: 116.31.152.88/116.31.152.88 Port: 23 TCP Blocked ... |
2020-10-01 15:36:37 |
| 103.251.45.235 | attackspam | Invalid user joao from 103.251.45.235 port 46022 |
2020-10-01 15:54:28 |
| 172.112.226.49 | attack | Fail2Ban Ban Triggered HTTP SQL Injection Attempt |
2020-10-01 15:59:23 |
| 220.76.205.178 | attack | prod11 ... |
2020-10-01 15:52:53 |
| 77.50.75.162 | attack | Oct 1 06:42:55 game-panel sshd[18930]: Failed password for root from 77.50.75.162 port 49400 ssh2 Oct 1 06:46:46 game-panel sshd[19089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.50.75.162 Oct 1 06:46:48 game-panel sshd[19089]: Failed password for invalid user dk from 77.50.75.162 port 56674 ssh2 |
2020-10-01 15:41:45 |
| 185.56.153.236 | attackspam | s2.hscode.pl - SSH Attack |
2020-10-01 15:44:53 |
| 122.51.31.40 | attackbots | (sshd) Failed SSH login from 122.51.31.40 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 1 01:15:19 server2 sshd[1828]: Invalid user minecraft from 122.51.31.40 Oct 1 01:15:19 server2 sshd[1828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.31.40 Oct 1 01:15:21 server2 sshd[1828]: Failed password for invalid user minecraft from 122.51.31.40 port 50100 ssh2 Oct 1 01:17:51 server2 sshd[3885]: Invalid user richard from 122.51.31.40 Oct 1 01:17:51 server2 sshd[3885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.31.40 |
2020-10-01 16:04:21 |
| 51.161.51.154 | attackbotsspam | DATE:2020-09-30 22:35:43, IP:51.161.51.154, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq) |
2020-10-01 16:01:28 |
| 106.37.223.54 | attack | Sep 30 20:09:49 tdfoods sshd\[25206\]: Invalid user haldaemon from 106.37.223.54 Sep 30 20:09:49 tdfoods sshd\[25206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.223.54 Sep 30 20:09:52 tdfoods sshd\[25206\]: Failed password for invalid user haldaemon from 106.37.223.54 port 33267 ssh2 Sep 30 20:15:08 tdfoods sshd\[25529\]: Invalid user francisco from 106.37.223.54 Sep 30 20:15:08 tdfoods sshd\[25529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.223.54 |
2020-10-01 15:16:22 |
| 27.128.244.13 | attack | Oct 1 07:07:56 email sshd\[22099\]: Invalid user git from 27.128.244.13 Oct 1 07:07:56 email sshd\[22099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.244.13 Oct 1 07:07:58 email sshd\[22099\]: Failed password for invalid user git from 27.128.244.13 port 33044 ssh2 Oct 1 07:15:39 email sshd\[23428\]: Invalid user ts3 from 27.128.244.13 Oct 1 07:15:39 email sshd\[23428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.244.13 ... |
2020-10-01 15:44:24 |
| 20.185.42.104 | attackspam | 20 attempts against mh-ssh on soil |
2020-10-01 15:42:18 |