Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: TT1 Datacenter UG (haftungsbeschraenkt)

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
[MK-Root1] Blocked by UFW
2020-10-01 07:51:03
attackbots
 TCP (SYN) 45.129.33.129:47355 -> port 1402, len 44
2020-10-01 00:21:30
attackbots
 TCP (SYN) 45.129.33.129:47355 -> port 1434, len 44
2020-09-30 16:42:28
Comments on same subnet:
IP Type Details Datetime
45.129.33.168 attack
Dec 13 21:22:00 router.asus.com kernel: DROP IN=eth0 OUT= MAC=b8:86:87:f3:ff:58:00:01:5c:98:9a:46:08:00 SRC=45.129.33.168 DST=AA.BB.CC.DD LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=22869 PROTO=TCP SPT=59221 DPT=21398 SEQ=3578506072 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 

Scans from the 45.129.33.0/24 range have been incessant.  hostslick.de does not respond to email.
2020-12-14 11:37:48
45.129.33.122 attackbots
Port-scan: detected 150 distinct ports within a 24-hour window.
2020-10-14 07:07:41
45.129.33.147 attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 39601 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 06:03:33
45.129.33.9 attackbotsspam
 TCP (SYN) 45.129.33.9:53668 -> port 10226, len 44
2020-10-14 05:49:00
45.129.33.12 attack
 TCP (SYN) 45.129.33.12:54343 -> port 60282, len 44
2020-10-14 05:48:33
45.129.33.19 attack
ET DROP Dshield Block Listed Source group 1 - port: 4578 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:48:01
45.129.33.22 attackbotsspam
ET DROP Dshield Block Listed Source group 1 - port: 6367 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:47:49
45.129.33.53 attackbotsspam
ET DROP Dshield Block Listed Source group 1 - port: 7394 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:47:33
45.129.33.56 attackbots
ET DROP Dshield Block Listed Source group 1 - port: 13478 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:47:02
45.129.33.80 attackspam
 TCP (SYN) 45.129.33.80:56794 -> port 5319, len 44
2020-10-14 05:46:44
45.129.33.101 attackspam
ET DROP Dshield Block Listed Source group 1 - port: 39596 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:46:12
45.129.33.142 attackspam
ET DROP Dshield Block Listed Source group 1 - port: 39635 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:45:42
45.129.33.145 attack
ET DROP Dshield Block Listed Source group 1 - port: 39557 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:45:18
45.129.33.13 attack
ET DROP Dshield Block Listed Source group 1 - port: 9853 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:30:31
45.129.33.18 attack
ET DROP Dshield Block Listed Source group 1 - port: 4098 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:29:45
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.129.33.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7598
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.129.33.129.			IN	A

;; AUTHORITY SECTION:
.			503	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020093000 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 30 16:42:19 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 129.33.129.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 129.33.129.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
212.64.29.136 attack
Jun 30 11:19:23 ns382633 sshd\[13377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.29.136  user=root
Jun 30 11:19:26 ns382633 sshd\[13377\]: Failed password for root from 212.64.29.136 port 37848 ssh2
Jun 30 11:29:16 ns382633 sshd\[15291\]: Invalid user test1 from 212.64.29.136 port 54334
Jun 30 11:29:16 ns382633 sshd\[15291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.29.136
Jun 30 11:29:18 ns382633 sshd\[15291\]: Failed password for invalid user test1 from 212.64.29.136 port 54334 ssh2
2020-07-01 16:37:06
49.233.196.186 attackbotsspam
Jun 29 19:59:04 garuda sshd[934160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.196.186  user=r.r
Jun 29 19:59:06 garuda sshd[934160]: Failed password for r.r from 49.233.196.186 port 51908 ssh2
Jun 29 19:59:06 garuda sshd[934160]: Received disconnect from 49.233.196.186: 11: Bye Bye [preauth]
Jun 29 20:09:37 garuda sshd[936868]: Connection closed by 49.233.196.186 [preauth]
Jun 29 20:14:37 garuda sshd[938057]: Connection closed by 49.233.196.186 [preauth]
Jun 29 20:19:15 garuda sshd[939402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.196.186  user=r.r
Jun 29 20:19:18 garuda sshd[939402]: Failed password for r.r from 49.233.196.186 port 58658 ssh2
Jun 29 20:19:18 garuda sshd[939402]: Received disconnect from 49.233.196.186: 11: Bye Bye [preauth]
Jun 29 20:24:16 garuda sshd[940775]: Connection closed by 49.233.196.186 [preauth]
Jun 29 20:28:49 garuda sshd[941972]: Inva........
-------------------------------
2020-07-01 16:31:37
143.208.193.240 attackbotsspam
 TCP (SYN) 143.208.193.240:60118 -> port 23, len 44
2020-07-01 16:57:32
159.89.43.61 attackspam
firewall-block, port(s): 19877/tcp
2020-07-01 16:44:24
220.134.236.9 attackbotsspam
Honeypot attack, port: 81, PTR: 220-134-236-9.HINET-IP.hinet.net.
2020-07-01 16:49:47
128.14.209.230 attack
 TCP (SYN) 128.14.209.230:34707 -> port 80, len 40
2020-07-01 16:29:58
209.97.170.74 attackbots
06/30/2020-13:37:40.996498 209.97.170.74 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-01 16:34:06
222.186.42.137 attack
2020-06-30T14:52:27.457661na-vps210223 sshd[17169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137  user=root
2020-06-30T14:52:29.322614na-vps210223 sshd[17169]: Failed password for root from 222.186.42.137 port 52808 ssh2
2020-06-30T14:52:27.457661na-vps210223 sshd[17169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137  user=root
2020-06-30T14:52:29.322614na-vps210223 sshd[17169]: Failed password for root from 222.186.42.137 port 52808 ssh2
2020-06-30T14:52:31.005252na-vps210223 sshd[17169]: Failed password for root from 222.186.42.137 port 52808 ssh2
...
2020-07-01 16:40:54
42.179.87.174 attackspambots
 TCP (SYN) 42.179.87.174:32247 -> port 23, len 44
2020-07-01 17:16:23
78.128.113.6 attack
Icarus honeypot on github
2020-07-01 17:14:12
116.255.139.236 attack
Jun 30 16:16:10 *** sshd[1614]: User backup from 116.255.139.236 not allowed because not listed in AllowUsers
2020-07-01 16:35:55
47.75.1.243 attackbotsspam
 TCP (SYN) 47.75.1.243:54526 -> port 9304, len 44
2020-07-01 16:56:59
202.72.243.198 attack
SSH invalid-user multiple login try
2020-07-01 16:34:29
162.214.97.24 attackspam
TCP port : 10742
2020-07-01 17:13:08
208.100.26.228 attack
[Tue Jun 02 03:54:34 2020] - DDoS Attack From IP: 208.100.26.228 Port: 40246
2020-07-01 17:03:33

Recently Reported IPs

186.121.200.114 167.114.52.16 87.182.217.77 115.56.182.221
104.248.131.113 177.41.186.19 31.140.142.53 135.185.99.152
37.49.230.173 49.234.126.83 211.233.134.49 133.106.34.30
125.19.30.200 40.204.111.201 232.91.61.217 109.237.97.128
171.48.58.213 195.136.45.136 158.101.63.194 101.251.154.142