Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Peru

Internet Service Provider: Red Cientifica Peruana

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspambots
2020-09-05 18:54:33 1kEbSP-0005Gk-Od SMTP connection from \(gw054.dynamic.nubyx.pe\) \[209.45.48.29\]:28110 I=\[193.107.88.166\]:25 closed by DROP in ACL
2020-09-05 18:54:52 1kEbSj-0005H7-9r SMTP connection from \(gw054.dynamic.nubyx.pe\) \[209.45.48.29\]:28232 I=\[193.107.88.166\]:25 closed by DROP in ACL
2020-09-05 18:55:06 1kEbSw-0005Ig-Ue SMTP connection from \(gw054.dynamic.nubyx.pe\) \[209.45.48.29\]:35787 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-09-06 20:24:23
attackspam
2020-09-05 18:54:33 1kEbSP-0005Gk-Od SMTP connection from \(gw054.dynamic.nubyx.pe\) \[209.45.48.29\]:28110 I=\[193.107.88.166\]:25 closed by DROP in ACL
2020-09-05 18:54:52 1kEbSj-0005H7-9r SMTP connection from \(gw054.dynamic.nubyx.pe\) \[209.45.48.29\]:28232 I=\[193.107.88.166\]:25 closed by DROP in ACL
2020-09-05 18:55:06 1kEbSw-0005Ig-Ue SMTP connection from \(gw054.dynamic.nubyx.pe\) \[209.45.48.29\]:35787 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-09-06 12:03:31
attack
2020-09-05 18:54:33 1kEbSP-0005Gk-Od SMTP connection from \(gw054.dynamic.nubyx.pe\) \[209.45.48.29\]:28110 I=\[193.107.88.166\]:25 closed by DROP in ACL
2020-09-05 18:54:52 1kEbSj-0005H7-9r SMTP connection from \(gw054.dynamic.nubyx.pe\) \[209.45.48.29\]:28232 I=\[193.107.88.166\]:25 closed by DROP in ACL
2020-09-05 18:55:06 1kEbSw-0005Ig-Ue SMTP connection from \(gw054.dynamic.nubyx.pe\) \[209.45.48.29\]:35787 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-09-06 04:28:26
Comments on same subnet:
IP Type Details Datetime
209.45.48.28 attackbots
Invalid user user01 from 209.45.48.28 port 40996
2020-09-27 03:56:19
209.45.48.138 attackbotsspam
Unauthorized connection attempt from IP address 209.45.48.138 on Port 445(SMB)
2020-05-31 19:47:53
209.45.48.138 attack
1578086558 - 01/03/2020 22:22:38 Host: 209.45.48.138/209.45.48.138 Port: 445 TCP Blocked
2020-01-04 06:59:21
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 209.45.48.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6535
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;209.45.48.29.			IN	A

;; AUTHORITY SECTION:
.			383	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090500 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 06 04:28:21 CST 2020
;; MSG SIZE  rcvd: 116
Host info
29.48.45.209.in-addr.arpa domain name pointer static-4829.flx.com.pe.
Nslookup info:
Server:		100.100.2.138
Address:	100.100.2.138#53

Non-authoritative answer:
29.48.45.209.in-addr.arpa	name = static-4829.flx.com.pe.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
188.166.34.129 attack
$f2bV_matches
2020-05-28 16:29:10
139.199.80.67 attack
Invalid user dahlman from 139.199.80.67 port 51264
2020-05-28 16:36:08
95.37.51.109 attackspambots
May 28 04:35:18 ws26vmsma01 sshd[70464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.37.51.109
...
2020-05-28 16:16:44
64.227.111.37 attackspambots
May 28 10:19:55 debian-2gb-nbg1-2 kernel: \[12912786.123094\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=64.227.111.37 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=57432 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0
2020-05-28 16:25:50
106.12.55.87 attackspambots
Invalid user coremail from 106.12.55.87 port 49794
2020-05-28 16:05:15
51.68.44.154 attackbotsspam
May 28 06:58:56 ip-172-31-62-245 sshd\[20610\]: Failed password for root from 51.68.44.154 port 33591 ssh2\
May 28 07:02:35 ip-172-31-62-245 sshd\[20643\]: Invalid user Server from 51.68.44.154\
May 28 07:02:37 ip-172-31-62-245 sshd\[20643\]: Failed password for invalid user Server from 51.68.44.154 port 36861 ssh2\
May 28 07:06:10 ip-172-31-62-245 sshd\[20664\]: Invalid user test from 51.68.44.154\
May 28 07:06:12 ip-172-31-62-245 sshd\[20664\]: Failed password for invalid user test from 51.68.44.154 port 40141 ssh2\
2020-05-28 16:12:38
106.13.178.153 attackbotsspam
2020-05-28T06:54:55.186857ollin.zadara.org sshd[3929]: Invalid user nagios from 106.13.178.153 port 49326
2020-05-28T06:54:57.370388ollin.zadara.org sshd[3929]: Failed password for invalid user nagios from 106.13.178.153 port 49326 ssh2
...
2020-05-28 16:12:21
181.30.28.219 attackspam
Brute-force attempt banned
2020-05-28 16:26:47
39.155.207.62 attackspam
FTP/21 MH Probe, BF, Hack -
2020-05-28 16:36:59
111.230.231.196 attack
May 28 09:34:28 prox sshd[30411]: Failed password for root from 111.230.231.196 port 33492 ssh2
2020-05-28 16:45:10
106.13.226.152 attackbotsspam
May 28 09:01:09 sso sshd[31953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.226.152
May 28 09:01:11 sso sshd[31953]: Failed password for invalid user centos from 106.13.226.152 port 24251 ssh2
...
2020-05-28 16:14:36
220.158.148.132 attack
SSH login attempts.
2020-05-28 16:45:51
192.119.111.14 attackspambots
SSH login attempts.
2020-05-28 16:21:16
103.242.200.38 attackspam
SSH login attempts.
2020-05-28 16:47:42
45.249.95.44 attack
May 27 11:00:02 finn sshd[12759]: Invalid user info from 45.249.95.44 port 46216
May 27 11:00:02 finn sshd[12759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.249.95.44
May 27 11:00:04 finn sshd[12759]: Failed password for invalid user info from 45.249.95.44 port 46216 ssh2
May 27 11:00:04 finn sshd[12759]: Received disconnect from 45.249.95.44 port 46216:11: Bye Bye [preauth]
May 27 11:00:04 finn sshd[12759]: Disconnected from 45.249.95.44 port 46216 [preauth]
May 27 11:08:42 finn sshd[15306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.249.95.44  user=r.r
May 27 11:08:44 finn sshd[15306]: Failed password for r.r from 45.249.95.44 port 49008 ssh2
May 27 11:08:44 finn sshd[15306]: Received disconnect from 45.249.95.44 port 49008:11: Bye Bye [preauth]
May 27 11:08:44 finn sshd[15306]: Disconnected from 45.249.95.44 port 49008 [preauth]


........
-----------------------------------------------
https://www.blocklist.de
2020-05-28 16:38:35

Recently Reported IPs

130.44.205.115 144.148.201.46 43.101.55.56 193.199.86.139
202.11.189.89 155.118.142.58 86.184.179.1 166.110.230.235
106.18.60.92 197.34.20.76 192.151.146.252 208.115.198.54
185.176.27.234 95.122.205.4 183.166.137.124 193.135.139.188
210.167.28.72 61.190.161.47 181.210.135.2 103.87.28.153