Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Juazeiro

Region: Bahia

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       45.160.0.0 - 45.177.235.255
CIDR:           45.176.0.0/16, 45.177.0.0/17, 45.177.128.0/18, 45.160.0.0/12, 45.177.192.0/19, 45.177.232.0/22, 45.177.224.0/21
NetName:        LACNIC
NetHandle:      NET-45-160-0-0-1
Parent:         NET45 (NET-45-0-0-0-0)
NetType:        Transferred to LACNIC
OriginAS:       
Organization:   Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate:        2014-09-10
Updated:        2025-02-19
Ref:            https://rdap.arin.net/registry/ip/45.160.0.0

ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink:  whois.lacnic.net


OrgName:        Latin American and Caribbean IP address Regional Registry
OrgId:          LACNIC
Address:        Rambla Republica de Mexico 6125
City:           Montevideo
StateProv:      
PostalCode:     11400
Country:        UY
RegDate:        2002-07-27
Updated:        2018-03-15
Ref:            https://rdap.arin.net/registry/entity/LACNIC

ReferralServer:  whois://whois.lacnic.net
ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois

OrgTechHandle: LACNIC-ARIN
OrgTechName:   LACNIC Whois Info
OrgTechPhone:  +598-2604-2222 
OrgTechEmail:  whois-contact@lacnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/LACNIC-ARIN

OrgAbuseHandle: LWI100-ARIN
OrgAbuseName:   LACNIC Whois Info
OrgAbusePhone:  +598-2604-2222 
OrgAbuseEmail:  abuse@lacnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/LWI100-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.lacnic.net.

% IP Client: 124.223.158.242
 % Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-04-09T18:42:30-03:00 - 124.223.158.242

inetnum:     45.166.96.0/22
aut-num:     AS267959
abuse-c:     ANSFR105
owner:       A. de Souza Freitas - Com�rcio
ownerid:     10.769.612/0001-05
responsible: Ant�nio de Souza Freitas
owner-c:     ANSFR105
tech-c:      ANSFR105
created:     20181108
changed:     20230727

nic-hdl-br:  ANSFR105
person:      Ant�nio de Souza Freitas
created:     20180620
changed:     20250313

% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.166.96.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18460
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.166.96.25.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026040902 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 10 05:42:30 CST 2026
;; MSG SIZE  rcvd: 105
Host info
Host 25.96.166.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 25.96.166.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
162.243.137.24 attackspam
 TCP (SYN) 162.243.137.24:33016 -> port 47808, len 44
2020-05-25 06:38:50
203.147.79.174 attackspam
no
2020-05-25 06:57:50
121.153.248.139 attackspam
Lines containing failures of 121.153.248.139 (max 1000)
May 22 20:58:26 UTC__SANYALnet-Labs__cac12 sshd[32666]: Connection from 121.153.248.139 port 34026 on 64.137.176.104 port 22
May 22 20:58:28 UTC__SANYALnet-Labs__cac12 sshd[32666]: Invalid user admin from 121.153.248.139 port 34026
May 22 20:58:28 UTC__SANYALnet-Labs__cac12 sshd[32666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.153.248.139
May 22 20:58:30 UTC__SANYALnet-Labs__cac12 sshd[32666]: Failed password for invalid user admin from 121.153.248.139 port 34026 ssh2
May 22 20:58:30 UTC__SANYALnet-Labs__cac12 sshd[32666]: Connection closed by 121.153.248.139 port 34026 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=121.153.248.139
2020-05-25 07:00:01
178.128.221.162 attackbots
411. On May 24 2020 experienced a Brute Force SSH login attempt -> 3 unique times by 178.128.221.162.
2020-05-25 07:12:09
41.208.68.4 attack
SSH_attack
2020-05-25 07:00:32
49.232.168.32 attackbots
Invalid user ztw from 49.232.168.32 port 34822
2020-05-25 07:14:47
46.209.20.216 attack
Unauthorized connection attempt from IP address 46.209.20.216 on Port 445(SMB)
2020-05-25 06:42:46
80.82.78.100 attackspam
Port Scan detected!
...
2020-05-25 06:56:18
125.25.17.36 attack
1590352206 - 05/24/2020 22:30:06 Host: 125.25.17.36/125.25.17.36 Port: 445 TCP Blocked
2020-05-25 06:59:26
149.28.78.169 attackspam
2020-05-24T21:38:12.393410abusebot-6.cloudsearch.cf sshd[31270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.78.169  user=root
2020-05-24T21:38:14.905046abusebot-6.cloudsearch.cf sshd[31270]: Failed password for root from 149.28.78.169 port 60176 ssh2
2020-05-24T21:38:15.499458abusebot-6.cloudsearch.cf sshd[31275]: Invalid user admin from 149.28.78.169 port 53274
2020-05-24T21:38:15.507110abusebot-6.cloudsearch.cf sshd[31275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.78.169
2020-05-24T21:38:15.499458abusebot-6.cloudsearch.cf sshd[31275]: Invalid user admin from 149.28.78.169 port 53274
2020-05-24T21:38:17.431283abusebot-6.cloudsearch.cf sshd[31275]: Failed password for invalid user admin from 149.28.78.169 port 53274 ssh2
2020-05-24T21:38:18.276510abusebot-6.cloudsearch.cf sshd[31281]: Invalid user admin from 149.28.78.169 port 37278
...
2020-05-25 07:16:30
194.127.178.52 attackspam
May-24-20 20:14:07 m1-51247-12402 [Worker_1] 194.127.178.52 [SMTP Error] 535 5.7.8 Error: authentication failed: Invalid authentication mechanism
May-24-20 20:55:36 m1-53725-07092 [Worker_1] 194.127.178.52 [SMTP Error] 535 5.7.8 Error: authentication failed: Invalid authentication mechanism
May-24-20 21:09:30 m1-54569-13451 [Worker_1] 194.127.178.52 [SMTP Error] 535 5.7.8 Error: authentication failed: Invalid authentication mechanism
May-24-20 21:23:23 m1-55402-03812 [Worker_1] 194.127.178.52 [SMTP Error] 535 5.7.8 Error: authentication failed: Invalid authentication mechanism
May-24-20 21:36:50 m1-56209-00216 [Worker_1] 194.127.178.52 [SMTP Error] 535 5.7.8 Error: authentication failed: Invalid authentication mechanism
...
2020-05-25 07:05:23
222.186.52.39 attackspam
24.05.2020 22:46:21 SSH access blocked by firewall
2020-05-25 06:48:19
2a02:a03f:3e3b:d900:54b:b86f:c5be:637a attack
May 25 00:19:13 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=2a02:a03f:3e3b:d900:54b:b86f:c5be:637a, lip=2a01:7e01:e001:164::, session=
May 25 00:19:19 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3e3b:d900:54b:b86f:c5be:637a, lip=2a01:7e01:e001:164::, session=
May 25 00:19:19 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3e3b:d900:54b:b86f:c5be:637a, lip=2a01:7e01:e001:164::, session=
May 25 00:19:31 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3e3b:d900:54b:b86f:c5be:637a, lip=2a01:7e01:e001:164::, session=
2020-05-25 06:51:44
154.43.128.23 attack
Time:     Sun May 24 17:00:02 2020 -0300
IP:       154.43.128.23 (US/United States/-)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked:  Permanent Block
2020-05-25 06:58:52
157.245.12.36 attackspam
May 25 00:25:02 server sshd[20879]: Failed password for root from 157.245.12.36 port 38964 ssh2
May 25 00:28:18 server sshd[21172]: Failed password for root from 157.245.12.36 port 40828 ssh2
May 25 00:31:36 server sshd[21475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.12.36
...
2020-05-25 06:41:07

Recently Reported IPs

209.173.247.210 2606:4700:10::6814:7917 2606:4700:10::6814:8451 2606:4700:10::6816:707
2606:4700:10::6816:3003 2606:4700:10::6816:4424 2606:4700:10::6814:6687 2606:4700:10::6816:459
2606:4700:10::ac43:2438 2606:4700:10::6816:4949 2606:4700:10::6816:1828 37.230.157.251
9.124.106.134 57.42.190.115 232.227.53.235 218.134.69.181
214.44.136.178 171.40.80.116 129.113.199.205 213.177.179.193