City: Niterói
Region: Rio de Janeiro
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.231.208.0 - 45.239.255.255
CIDR: 45.232.0.0/13, 45.231.224.0/19, 45.231.208.0/20
NetName: LACNIC
NetHandle: NET-45-231-208-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2014-09-05
Updated: 2022-07-06
Ref: https://rdap.arin.net/registry/ip/45.231.208.0
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink: whois.lacnic.net
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
ReferralServer: whois://whois.lacnic.net
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechEmail: whois-contact@lacnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.lacnic.net.
% IP Client: 124.223.158.242
% Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-10-17T16:00:19-03:00 - 124.223.158.242
inetnum: 45.234.212.0/22
aut-num: AS267373
abuse-c: WEMEL10
owner: �GIL TECOMUNICACOES LTDA
ownerid: 31.210.733/0001-84
responsible: Thais de Souza Cruz
owner-c: THSCR70
tech-c: WEMEL10
inetrev: 45.234.212.0/22
nserver: ns2.hrvirtual.com.br [lame - not published]
nsstat: 20261017 UH
nslastaa: 20220723
nserver: ns3.hrvirtual.com.br [lame - not published]
nsstat: 20261017 UH
nslastaa: 20200326
created: 20180409
changed: 20260924
nic-hdl-br: THSCR70
person: Thais de Souza Cruz
created: 20221219
changed: 20260420
nic-hdl-br: WEMEL10
person: wesley mello
created: 20120807
changed: 20230823
% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.234.212.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57498
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.234.212.72. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026101701 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 18 03:00:19 CST 2026
;; MSG SIZE rcvd: 106
Host 72.212.234.45.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 72.212.234.45.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 116.248.172.135 | attackspam | port scan and connect, tcp 1433 (ms-sql-s) |
2020-09-17 07:37:13 |
| 112.85.42.181 | attackbots | Sep 16 17:06:31 propaganda sshd[21982]: Connection from 112.85.42.181 port 26506 on 10.0.0.161 port 22 rdomain "" Sep 16 17:06:31 propaganda sshd[21982]: Unable to negotiate with 112.85.42.181 port 26506: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] |
2020-09-17 08:08:43 |
| 208.169.84.226 | attackbotsspam | Wordpress attack |
2020-09-17 08:04:39 |
| 177.86.126.88 | attackspambots | Automatic report - Port Scan Attack |
2020-09-17 08:06:39 |
| 85.248.227.164 | attackspambots | CMS (WordPress or Joomla) login attempt. |
2020-09-17 07:40:56 |
| 122.51.221.3 | attackspam | 2020-09-16T18:59:33.639655mail.broermann.family sshd[16362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.221.3 2020-09-16T18:59:33.417289mail.broermann.family sshd[16362]: Invalid user dff from 122.51.221.3 port 52130 2020-09-16T18:59:35.673000mail.broermann.family sshd[16362]: Failed password for invalid user dff from 122.51.221.3 port 52130 ssh2 2020-09-16T18:59:37.832987mail.broermann.family sshd[16364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.221.3 user=root 2020-09-16T18:59:39.414732mail.broermann.family sshd[16364]: Failed password for root from 122.51.221.3 port 54276 ssh2 ... |
2020-09-17 07:38:20 |
| 196.216.228.34 | attack | $f2bV_matches |
2020-09-17 07:41:38 |
| 167.71.196.176 | attackbotsspam | Sep 17 01:39:52 server sshd[17511]: Failed password for invalid user web from 167.71.196.176 port 60350 ssh2 Sep 17 01:44:05 server sshd[19834]: Failed password for invalid user dalia from 167.71.196.176 port 39496 ssh2 Sep 17 01:48:06 server sshd[21884]: Failed password for root from 167.71.196.176 port 46878 ssh2 |
2020-09-17 08:07:12 |
| 123.59.195.46 | attackbotsspam | 2020-09-16T12:23:46.602099dreamphreak.com sshd[312915]: Invalid user malis from 123.59.195.46 port 60381 2020-09-16T12:23:48.446611dreamphreak.com sshd[312915]: Failed password for invalid user malis from 123.59.195.46 port 60381 ssh2 ... |
2020-09-17 07:46:41 |
| 106.54.219.237 | attack | Scanned 1 times in the last 24 hours on port 22 |
2020-09-17 08:05:58 |
| 144.172.93.157 | attackbotsspam | 2020-09-16 12:03:40.217683-0500 localhost smtpd[40120]: NOQUEUE: reject: RCPT from unknown[144.172.93.157]: 554 5.7.1 Service unavailable; Client host [144.172.93.157] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= |
2020-09-17 07:52:46 |
| 106.12.201.16 | attackspam | $f2bV_matches |
2020-09-17 07:55:09 |
| 181.129.14.218 | attackbots | SSH Brute-force |
2020-09-17 08:13:04 |
| 159.65.8.65 | attackspambots | Sep 17 01:40:28 vm1 sshd[26275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.8.65 Sep 17 01:40:29 vm1 sshd[26275]: Failed password for invalid user git from 159.65.8.65 port 45286 ssh2 ... |
2020-09-17 07:59:28 |
| 89.248.160.150 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 73 - port: 1039 proto: udp cat: Misc Attackbytes: 71 |
2020-09-17 07:34:41 |