City: Goiânia
Region: Goias
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.231.208.0 - 45.239.255.255
CIDR: 45.231.224.0/19, 45.231.208.0/20, 45.232.0.0/13
NetName: LACNIC
NetHandle: NET-45-231-208-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2014-09-05
Updated: 2022-07-06
Ref: https://rdap.arin.net/registry/ip/45.231.208.0
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink: whois.lacnic.net
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
ReferralServer: whois://whois.lacnic.net
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechEmail: whois-contact@lacnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.lacnic.net.
% IP Client: 124.223.158.242
% Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2025-12-01T11:52:44-03:00 - 124.223.158.242
inetnum: 45.238.0.0/22
aut-num: AS268305
abuse-c: TITLM6
owner: T & I TELECOMUNICA��ES LTDA ME
ownerid: 24.821.995/0001-10
responsible: TIAGO HENRIQUE
owner-c: TITLM6
tech-c: TITLM6
inetrev: 45.238.0.0/22
nserver: ns1.netmaisfibra.net.br
nsstat: 20251201 AA
nslastaa: 20251201
nserver: ns2.netmaisfibra.net.br
nsstat: 20251201 AA
nslastaa: 20251201
created: 20180613
changed: 20180613
nic-hdl-br: TITLM6
person: T & I Telecomunica��es LTDA - ME
created: 20171213
changed: 20231008
% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.238.0.168
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61409
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.238.0.168. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025120100 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 01 22:52:44 CST 2025
;; MSG SIZE rcvd: 105168.0.238.45.in-addr.arpa domain name pointer 45-238-0-168.netmaisfibra.net.br.
b'168.0.238.45.in-addr.arpa name = 45-238-0-168.netmaisfibra.net.br.
Authoritative answers can be found from:
'| IP | Type | Details | Datetime |
|---|---|---|---|
| 36.65.86.64 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-26 08:46:23 |
| 87.236.212.51 | attackbotsspam | Feb 26 00:29:06 h2177944 kernel: \[5871123.801652\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=87.236.212.51 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=49876 PROTO=TCP SPT=44051 DPT=34444 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 26 00:29:06 h2177944 kernel: \[5871123.801666\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=87.236.212.51 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=49876 PROTO=TCP SPT=44051 DPT=34444 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 26 00:37:00 h2177944 kernel: \[5871597.375126\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=87.236.212.51 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=56448 PROTO=TCP SPT=44051 DPT=21111 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 26 00:37:00 h2177944 kernel: \[5871597.375142\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=87.236.212.51 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=56448 PROTO=TCP SPT=44051 DPT=21111 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 26 00:52:38 h2177944 kernel: \[5872535.288862\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=87.236.212.51 DST=85.214.1 |
2020-02-26 08:18:03 |
| 202.191.127.90 | attackspambots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-26 08:29:49 |
| 151.213.6.241 | attackbots | Invalid user nx from 151.213.6.241 port 59427 |
2020-02-26 08:36:08 |
| 171.83.24.244 | attackspambots | Fail2Ban Ban Triggered |
2020-02-26 08:52:42 |
| 162.243.135.50 | attack | 1582678044 - 02/26/2020 01:47:24 Host: zg0213a-437.stretchoid.com/162.243.135.50 Port: 1900 UDP Blocked |
2020-02-26 08:54:52 |
| 201.64.22.66 | attackspam | Unauthorized connection attempt from IP address 201.64.22.66 on Port 445(SMB) |
2020-02-26 08:46:51 |
| 103.81.156.56 | attackbots | Feb 26 01:47:20 vpn01 sshd[11075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.81.156.56 Feb 26 01:47:23 vpn01 sshd[11075]: Failed password for invalid user qichen from 103.81.156.56 port 3016 ssh2 ... |
2020-02-26 08:56:19 |
| 139.199.115.210 | attackbots | Feb 26 02:41:55 lukav-desktop sshd\[21510\]: Invalid user test from 139.199.115.210 Feb 26 02:41:55 lukav-desktop sshd\[21510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.115.210 Feb 26 02:41:57 lukav-desktop sshd\[21510\]: Failed password for invalid user test from 139.199.115.210 port 17523 ssh2 Feb 26 02:47:22 lukav-desktop sshd\[24416\]: Invalid user sandbox from 139.199.115.210 Feb 26 02:47:22 lukav-desktop sshd\[24416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.115.210 |
2020-02-26 08:56:05 |
| 27.59.142.199 | attackspambots | Unauthorized connection attempt from IP address 27.59.142.199 on Port 445(SMB) |
2020-02-26 08:47:43 |
| 85.105.120.215 | attackbotsspam | Unauthorized connection attempt from IP address 85.105.120.215 on Port 445(SMB) |
2020-02-26 08:49:17 |
| 18.220.69.238 | attackbots | Email rejected due to spam filtering |
2020-02-26 08:42:46 |
| 84.48.9.252 | attackbotsspam | Unauthorized connection attempt from IP address 84.48.9.252 on Port 445(SMB) |
2020-02-26 08:22:47 |
| 171.248.145.126 | attackbots | Automatic report - Port Scan Attack |
2020-02-26 08:28:33 |
| 49.35.225.12 | attack | Unauthorized connection attempt from IP address 49.35.225.12 on Port 445(SMB) |
2020-02-26 08:24:40 |