城市(city): unknown
省份(region): unknown
国家(country): Portugal
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.156.129.32 | attack | Malicious IP |
2024-06-11 21:03:25 |
| 45.156.129.23 | attack | hacking |
2024-02-21 16:21:38 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.154.220.0 - 45.157.167.255
CIDR: 45.157.160.0/21, 45.154.224.0/19, 45.155.0.0/16, 45.157.0.0/17, 45.156.0.0/16, 45.154.220.0/22, 45.157.128.0/19
NetName: RIPE
NetHandle: NET-45-154-220-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2014-05-22
Updated: 2025-02-10
Comment: These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref: https://rdap.arin.net/registry/ip/45.154.220.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois.ripe.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.156.129.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20357
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.156.129.91. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026041703 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 18 05:30:22 CST 2026
;; MSG SIZE rcvd: 106
91.129.156.45.in-addr.arpa domain name pointer sh-chi-us-gp1-wk136b.internet-census.org.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
91.129.156.45.in-addr.arpa name = sh-chi-us-gp1-wk136b.internet-census.org.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 24.234.220.6 | attackspambots | (sshd) Failed SSH login from 24.234.220.6 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 1 12:47:25 server2 sshd[17005]: Invalid user admin from 24.234.220.6 Sep 1 12:47:27 server2 sshd[17005]: Failed password for invalid user admin from 24.234.220.6 port 53454 ssh2 Sep 1 12:47:27 server2 sshd[17093]: Invalid user admin from 24.234.220.6 Sep 1 12:47:29 server2 sshd[17093]: Failed password for invalid user admin from 24.234.220.6 port 53511 ssh2 Sep 1 12:47:30 server2 sshd[17167]: Invalid user admin from 24.234.220.6 |
2020-09-02 21:32:19 |
| 198.199.72.47 | attackbotsspam | firewall-block, port(s): 24521/tcp |
2020-09-02 21:34:39 |
| 115.164.41.93 | attackspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-09-02 22:09:38 |
| 60.199.223.17 | attackbots | Icarus honeypot on github |
2020-09-02 21:29:32 |
| 212.70.149.4 | attackspambots | Sep 2 15:37:09 srv01 postfix/smtpd\[29919\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 15:37:25 srv01 postfix/smtpd\[31145\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 15:37:29 srv01 postfix/smtpd\[29919\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 15:37:43 srv01 postfix/smtpd\[31145\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 15:40:19 srv01 postfix/smtpd\[32054\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-02 21:41:11 |
| 160.153.245.123 | attack | 160.153.245.123 - - [02/Sep/2020:14:00:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 160.153.245.123 - - [02/Sep/2020:14:00:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 160.153.245.123 - - [02/Sep/2020:14:01:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-02 21:42:44 |
| 107.189.11.160 | attackspambots | Sep 2 15:44:19 bsd01 sshd[96811]: Invalid user oracle from 107.189.11.160 port 46282 Sep 2 15:44:19 bsd01 sshd[96813]: Invalid user vagrant from 107.189.11.160 port 46276 Sep 2 15:44:19 bsd01 sshd[96806]: Invalid user ubuntu from 107.189.11.160 port 46272 Sep 2 15:44:19 bsd01 sshd[96807]: Invalid user centos from 107.189.11.160 port 46274 Sep 2 15:44:19 bsd01 sshd[96809]: Invalid user admin from 107.189.11.160 port 46270 ... |
2020-09-02 22:12:51 |
| 152.32.164.141 | attackspam | Sep 2 10:03:40 firewall sshd[14113]: Invalid user julian from 152.32.164.141 Sep 2 10:03:42 firewall sshd[14113]: Failed password for invalid user julian from 152.32.164.141 port 57404 ssh2 Sep 2 10:07:54 firewall sshd[14142]: Invalid user student10 from 152.32.164.141 ... |
2020-09-02 21:45:38 |
| 177.246.211.58 | attackspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-09-02 22:02:14 |
| 87.251.73.238 | attack | [MK-VM6] Blocked by UFW |
2020-09-02 21:44:43 |
| 218.92.0.248 | attackbots | Sep 1 20:56:14 vlre-nyc-1 sshd\[5506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.248 user=root Sep 1 20:56:16 vlre-nyc-1 sshd\[5506\]: Failed password for root from 218.92.0.248 port 7645 ssh2 Sep 1 20:56:20 vlre-nyc-1 sshd\[5506\]: Failed password for root from 218.92.0.248 port 7645 ssh2 Sep 1 20:56:23 vlre-nyc-1 sshd\[5506\]: Failed password for root from 218.92.0.248 port 7645 ssh2 Sep 1 20:56:26 vlre-nyc-1 sshd\[5506\]: Failed password for root from 218.92.0.248 port 7645 ssh2 Sep 1 20:56:30 vlre-nyc-1 sshd\[5506\]: Failed password for root from 218.92.0.248 port 7645 ssh2 Sep 1 20:56:34 vlre-nyc-1 sshd\[5522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.248 user=root Sep 1 20:56:37 vlre-nyc-1 sshd\[5522\]: Failed password for root from 218.92.0.248 port 35085 ssh2 Sep 1 20:56:51 vlre-nyc-1 sshd\[5522\]: Failed password for root from 218.92.0.248 port 3508 ... |
2020-09-02 21:38:11 |
| 118.25.64.152 | attack | Sep 2 13:14:20 abendstille sshd\[18060\]: Invalid user oracle from 118.25.64.152 Sep 2 13:14:20 abendstille sshd\[18060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.64.152 Sep 2 13:14:22 abendstille sshd\[18060\]: Failed password for invalid user oracle from 118.25.64.152 port 55098 ssh2 Sep 2 13:19:53 abendstille sshd\[23308\]: Invalid user ten from 118.25.64.152 Sep 2 13:19:53 abendstille sshd\[23308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.64.152 ... |
2020-09-02 22:12:33 |
| 34.68.146.105 | attack | Invalid user postgres from 34.68.146.105 port 33358 |
2020-09-02 21:41:58 |
| 189.204.140.49 | attack | Unauthorized connection attempt from IP address 189.204.140.49 on Port 445(SMB) |
2020-09-02 22:04:31 |
| 36.82.13.72 | attackspambots | 1598978823 - 09/01/2020 18:47:03 Host: 36.82.13.72/36.82.13.72 Port: 445 TCP Blocked |
2020-09-02 21:53:30 |