城市(city): Chapadinha
省份(region): Maranhao
国家(country): Brazil
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.165.12.2 | attackspambots | Automatic report - Port Scan Attack |
2020-08-05 15:26:55 |
| 45.165.126.149 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/45.165.126.149/ BR - 1H : (827) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN268700 IP : 45.165.126.149 CIDR : 45.165.124.0/22 PREFIX COUNT : 1 UNIQUE IP COUNT : 1024 WYKRYTE ATAKI Z ASN268700 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-09-26 03:26:40 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.160.0.0 - 45.177.235.255
CIDR: 45.177.232.0/22, 45.177.224.0/21, 45.177.192.0/19, 45.177.128.0/18, 45.176.0.0/16, 45.160.0.0/12, 45.177.0.0/17
NetName: LACNIC
NetHandle: NET-45-160-0-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2014-09-10
Updated: 2025-02-19
Ref: https://rdap.arin.net/registry/ip/45.160.0.0
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink: whois.lacnic.net
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
ReferralServer: whois://whois.lacnic.net
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechEmail: whois-contact@lacnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.lacnic.net.
% IP Client: 124.223.158.242
% Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-10-17T13:02:27-03:00 - 124.223.158.242
inetnum: 45.165.12.0/22
aut-num: AS268663
abuse-c: MAR1115
owner: R G DE SOUSA LTDA
ownerid: 21.897.077/0001-86
responsible: RAFAELLE GOMES DE SOUSA
owner-c: RAGSO242
tech-c: MAR1115
inetrev: 45.165.12.0/22
nserver: ns1.chapa.net.br [lame - not published]
nsstat: 20261016 UH
nslastaa: 20251124
nserver: ns2.chapa.net.br [lame - not published]
nsstat: 20261016 UH
nslastaa: 20251124
created: 20181023
changed: 20241023
nic-hdl-br: RAGSO242
person: Rafaelle Gomes de Sousa
created: 20210903
changed: 20260309
nic-hdl-br: MAR1115
person: Mousaniel Almeida dos Reis
created: 20031010
changed: 20240820
% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.165.12.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46538
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.165.12.59. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026101700 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 18 00:02:28 CST 2026
;; MSG SIZE rcvd: 105Host 59.12.165.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 59.12.165.45.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 194.228.3.191 | attack | Oct 16 13:59:16 hcbbdb sshd\[7136\]: Invalid user z from 194.228.3.191 Oct 16 13:59:16 hcbbdb sshd\[7136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.228.3.191 Oct 16 13:59:18 hcbbdb sshd\[7136\]: Failed password for invalid user z from 194.228.3.191 port 52363 ssh2 Oct 16 14:03:31 hcbbdb sshd\[7568\]: Invalid user nera from 194.228.3.191 Oct 16 14:03:31 hcbbdb sshd\[7568\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.228.3.191 |
2019-10-16 23:54:33 |
| 36.159.108.8 | attackbots | Oct 16 01:31:25 php1 sshd\[5825\]: Invalid user 123456 from 36.159.108.8 Oct 16 01:31:25 php1 sshd\[5825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.159.108.8 Oct 16 01:31:27 php1 sshd\[5825\]: Failed password for invalid user 123456 from 36.159.108.8 port 33724 ssh2 Oct 16 01:35:25 php1 sshd\[6333\]: Invalid user pass from 36.159.108.8 Oct 16 01:35:25 php1 sshd\[6333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.159.108.8 |
2019-10-16 23:27:32 |
| 143.215.172.79 | attack | Port scan on 1 port(s): 53 |
2019-10-16 23:56:40 |
| 103.138.148.63 | attackbots | Oct 15 16:35:00 h2034429 sshd[1397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.138.148.63 user=r.r Oct 15 16:35:02 h2034429 sshd[1397]: Failed password for r.r from 103.138.148.63 port 46628 ssh2 Oct 15 16:35:02 h2034429 sshd[1397]: Received disconnect from 103.138.148.63 port 46628:11: Bye Bye [preauth] Oct 15 16:35:02 h2034429 sshd[1397]: Disconnected from 103.138.148.63 port 46628 [preauth] Oct 15 16:47:51 h2034429 sshd[1647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.138.148.63 user=r.r Oct 15 16:47:53 h2034429 sshd[1647]: Failed password for r.r from 103.138.148.63 port 42968 ssh2 Oct 15 16:47:53 h2034429 sshd[1647]: Received disconnect from 103.138.148.63 port 42968:11: Bye Bye [preauth] Oct 15 16:47:53 h2034429 sshd[1647]: Disconnected from 103.138.148.63 port 42968 [preauth] Oct 15 16:52:02 h2034429 sshd[1700]: pam_unix(sshd:auth): authentication failure; lognam........ ------------------------------- |
2019-10-16 23:46:50 |
| 72.2.6.128 | attack | Oct 16 17:42:48 dedicated sshd[1724]: Invalid user progroomsales from 72.2.6.128 port 47922 Oct 16 17:42:48 dedicated sshd[1724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.2.6.128 Oct 16 17:42:48 dedicated sshd[1724]: Invalid user progroomsales from 72.2.6.128 port 47922 Oct 16 17:42:49 dedicated sshd[1724]: Failed password for invalid user progroomsales from 72.2.6.128 port 47922 ssh2 Oct 16 17:46:38 dedicated sshd[2203]: Invalid user boinc from 72.2.6.128 port 58302 |
2019-10-16 23:47:57 |
| 121.15.140.178 | attackbots | Oct 16 14:26:51 h2177944 sshd\[9006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.15.140.178 user=root Oct 16 14:26:53 h2177944 sshd\[9006\]: Failed password for root from 121.15.140.178 port 48534 ssh2 Oct 16 14:33:47 h2177944 sshd\[9476\]: Invalid user kharpern from 121.15.140.178 port 56574 Oct 16 14:33:47 h2177944 sshd\[9476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.15.140.178 ... |
2019-10-16 23:42:51 |
| 117.33.230.4 | attackspambots | SSH brutforce |
2019-10-16 23:50:19 |
| 142.93.201.168 | attackspambots | Oct 16 14:46:25 work-partkepr sshd\[22717\]: Invalid user ace021 from 142.93.201.168 port 40090 Oct 16 14:46:25 work-partkepr sshd\[22717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168 ... |
2019-10-16 23:34:22 |
| 124.156.240.114 | attack | 2019-10-16 13:07:30 GET /tools/phpMyAdmin/index.php et al. |
2019-10-16 23:57:25 |
| 46.176.228.249 | attackspam | Telnet Server BruteForce Attack |
2019-10-16 23:22:35 |
| 216.218.206.87 | attack | 3389BruteforceFW23 |
2019-10-16 23:56:23 |
| 139.155.33.169 | attackspambots | Oct 16 13:41:51 master sshd[6816]: Failed password for root from 139.155.33.169 port 53118 ssh2 Oct 16 14:14:52 master sshd[7167]: Failed password for root from 139.155.33.169 port 50174 ssh2 Oct 16 14:20:03 master sshd[7217]: Failed password for root from 139.155.33.169 port 58056 ssh2 |
2019-10-16 23:15:37 |
| 185.173.35.49 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-16 23:49:11 |
| 51.68.134.26 | attack | TCP Port: 25 _ invalid blocked barracudacentral also spam-sorbs _ _ _ _ (739) |
2019-10-16 23:51:20 |
| 201.22.59.4 | attackbots | Automatic report - Port Scan Attack |
2019-10-16 23:31:33 |