Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Daltony Carlos Tavares Caetano Munhoz ME

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
Aug 22 15:55:34 mail.srvfarm.net postfix/smtpd[2319740]: warning: unknown[45.6.27.192]: SASL PLAIN authentication failed: 
Aug 22 15:55:34 mail.srvfarm.net postfix/smtpd[2319740]: lost connection after AUTH from unknown[45.6.27.192]
Aug 22 15:56:10 mail.srvfarm.net postfix/smtpd[2321913]: warning: unknown[45.6.27.192]: SASL PLAIN authentication failed: 
Aug 22 15:56:11 mail.srvfarm.net postfix/smtpd[2321913]: lost connection after AUTH from unknown[45.6.27.192]
Aug 22 15:59:12 mail.srvfarm.net postfix/smtpd[2321919]: warning: unknown[45.6.27.192]: SASL PLAIN authentication failed:
2020-08-24 00:24:32
Comments on same subnet:
IP Type Details Datetime
45.6.27.193 attackbotsspam
SMTP Brute Force attempt
2020-09-01 08:31:56
45.6.27.165 attackspambots
Aug 27 06:09:08 mail.srvfarm.net postfix/smtpd[1379979]: warning: unknown[45.6.27.165]: SASL PLAIN authentication failed: 
Aug 27 06:09:08 mail.srvfarm.net postfix/smtpd[1379979]: lost connection after AUTH from unknown[45.6.27.165]
Aug 27 06:15:20 mail.srvfarm.net postfix/smtpd[1379984]: warning: unknown[45.6.27.165]: SASL PLAIN authentication failed: 
Aug 27 06:15:20 mail.srvfarm.net postfix/smtpd[1379984]: lost connection after AUTH from unknown[45.6.27.165]
Aug 27 06:15:58 mail.srvfarm.net postfix/smtpd[1383272]: warning: unknown[45.6.27.165]: SASL PLAIN authentication failed:
2020-08-28 07:16:48
45.6.27.242 attackbotsspam
Attempted Brute Force (dovecot)
2020-08-19 18:40:12
45.6.27.242 attackbots
Aug 14 23:40:14 mail.srvfarm.net postfix/smtpd[736663]: warning: unknown[45.6.27.242]: SASL PLAIN authentication failed: 
Aug 14 23:40:15 mail.srvfarm.net postfix/smtpd[736663]: lost connection after AUTH from unknown[45.6.27.242]
Aug 14 23:43:03 mail.srvfarm.net postfix/smtpd[738025]: warning: unknown[45.6.27.242]: SASL PLAIN authentication failed: 
Aug 14 23:43:04 mail.srvfarm.net postfix/smtpd[738025]: lost connection after AUTH from unknown[45.6.27.242]
Aug 14 23:47:18 mail.srvfarm.net postfix/smtpd[735694]: warning: unknown[45.6.27.242]: SASL PLAIN authentication failed:
2020-08-15 17:25:45
45.6.27.250 attackspambots
Distributed brute force attack
2020-07-31 16:44:00
45.6.27.252 attackspam
Jul 16 05:06:06 mail.srvfarm.net postfix/smtps/smtpd[685693]: warning: unknown[45.6.27.252]: SASL PLAIN authentication failed: 
Jul 16 05:06:07 mail.srvfarm.net postfix/smtps/smtpd[685693]: lost connection after AUTH from unknown[45.6.27.252]
Jul 16 05:10:00 mail.srvfarm.net postfix/smtps/smtpd[686166]: warning: unknown[45.6.27.252]: SASL PLAIN authentication failed: 
Jul 16 05:10:01 mail.srvfarm.net postfix/smtps/smtpd[686166]: lost connection after AUTH from unknown[45.6.27.252]
Jul 16 05:15:18 mail.srvfarm.net postfix/smtpd[700172]: warning: unknown[45.6.27.252]: SASL PLAIN authentication failed:
2020-07-16 16:17:10
45.6.27.211 attackbotsspam
Unauthorized connection attempt from IP address 45.6.27.211 on port 587
2020-07-08 11:06:12
45.6.27.147 attackbots
Brute force attempt
2020-06-24 06:32:07
45.6.27.244 attack
(BR/Brazil/-) SMTP Bruteforcing attempts
2020-06-19 13:21:51
45.6.27.249 attackspam
Jun 16 05:30:58 mail.srvfarm.net postfix/smtps/smtpd[956697]: warning: unknown[45.6.27.249]: SASL PLAIN authentication failed: 
Jun 16 05:30:58 mail.srvfarm.net postfix/smtps/smtpd[956697]: lost connection after AUTH from unknown[45.6.27.249]
Jun 16 05:31:26 mail.srvfarm.net postfix/smtpd[921415]: warning: unknown[45.6.27.249]: SASL PLAIN authentication failed: 
Jun 16 05:31:26 mail.srvfarm.net postfix/smtpd[921415]: lost connection after AUTH from unknown[45.6.27.249]
Jun 16 05:39:10 mail.srvfarm.net postfix/smtps/smtpd[937456]: warning: unknown[45.6.27.249]: SASL PLAIN authentication failed:
2020-06-16 15:49:02
45.6.27.147 attackspam
(BR/Brazil/-) SMTP Bruteforcing attempts
2020-06-05 12:57:40
45.6.27.248 attackbots
(BR/Brazil/-) SMTP Bruteforcing attempts
2020-06-05 12:53:03
45.6.27.171 attack
Jul 15 08:19:09 rigel postfix/smtpd[32407]: connect from unknown[45.6.27.171]
Jul 15 08:19:14 rigel postfix/smtpd[32407]: warning: unknown[45.6.27.171]: SASL CRAM-MD5 authentication failed: authentication failure
Jul 15 08:19:14 rigel postfix/smtpd[32407]: warning: unknown[45.6.27.171]: SASL PLAIN authentication failed: authentication failure
Jul 15 08:19:16 rigel postfix/smtpd[32407]: warning: unknown[45.6.27.171]: SASL LOGIN authentication failed: authentication failure


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.6.27.171
2019-07-15 18:39:11
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.6.27.192
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8828
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.6.27.192.			IN	A

;; AUTHORITY SECTION:
.			475	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082300 1800 900 604800 86400

;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 24 00:24:27 CST 2020
;; MSG SIZE  rcvd: 115
Host info
Host 192.27.6.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 192.27.6.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
218.255.86.106 attackbotsspam
<6 unauthorized SSH connections
2020-09-04 15:10:34
45.129.33.154 attackbotsspam
Sep  3 21:25:04   TCP Attack: SRC=45.129.33.154 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=246  PROTO=TCP SPT=52314 DPT=5522 WINDOW=1024 RES=0x00 SYN URGP=0
2020-09-04 15:18:57
115.73.247.7 attack
Automatic report - Port Scan Attack
2020-09-04 14:44:50
113.250.255.232 attackbots
Sep  4 05:30:14 santamaria sshd\[9395\]: Invalid user steam from 113.250.255.232
Sep  4 05:30:14 santamaria sshd\[9395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.250.255.232
Sep  4 05:30:16 santamaria sshd\[9395\]: Failed password for invalid user steam from 113.250.255.232 port 6820 ssh2
...
2020-09-04 14:53:58
192.241.221.249 attackspam
Sep  3 09:47:31 propaganda sshd[2944]: Connection from 192.241.221.249 port 34394 on 10.0.0.161 port 22 rdomain ""
Sep  3 09:47:41 propaganda sshd[2944]: error: kex_exchange_identification: Connection closed by remote host
2020-09-04 15:08:08
85.18.98.208 attack
$f2bV_matches
2020-09-04 15:14:57
222.186.175.215 attackbotsspam
Sep  4 09:01:19 jane sshd[11304]: Failed password for root from 222.186.175.215 port 33650 ssh2
Sep  4 09:01:23 jane sshd[11304]: Failed password for root from 222.186.175.215 port 33650 ssh2
...
2020-09-04 15:13:08
65.50.209.87 attackbots
Sep  3 18:10:40 rush sshd[18829]: Failed password for root from 65.50.209.87 port 60326 ssh2
Sep  3 18:14:14 rush sshd[18943]: Failed password for root from 65.50.209.87 port 35028 ssh2
Sep  3 18:17:52 rush sshd[19052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.50.209.87
...
2020-09-04 14:57:47
188.146.174.107 attack
2020-09-03 11:34:36.973977-0500  localhost smtpd[17531]: NOQUEUE: reject: RCPT from 188.146.174.107.nat.umts.dynamic.t-mobile.pl[188.146.174.107]: 554 5.7.1 Service unavailable; Client host [188.146.174.107] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/188.146.174.107; from= to= proto=ESMTP helo=<188.146.174.107.nat.umts.dynamic.t-mobile.pl>
2020-09-04 14:52:23
164.132.47.139 attackbotsspam
2020-09-03T22:27:06.065477abusebot-4.cloudsearch.cf sshd[1956]: Invalid user desliga from 164.132.47.139 port 35182
2020-09-03T22:27:06.071993abusebot-4.cloudsearch.cf sshd[1956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.ip-164-132-47.eu
2020-09-03T22:27:06.065477abusebot-4.cloudsearch.cf sshd[1956]: Invalid user desliga from 164.132.47.139 port 35182
2020-09-03T22:27:07.992069abusebot-4.cloudsearch.cf sshd[1956]: Failed password for invalid user desliga from 164.132.47.139 port 35182 ssh2
2020-09-03T22:30:49.285009abusebot-4.cloudsearch.cf sshd[2101]: Invalid user tatiana from 164.132.47.139 port 40912
2020-09-03T22:30:49.290726abusebot-4.cloudsearch.cf sshd[2101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.ip-164-132-47.eu
2020-09-03T22:30:49.285009abusebot-4.cloudsearch.cf sshd[2101]: Invalid user tatiana from 164.132.47.139 port 40912
2020-09-03T22:30:51.491362abusebot-4.cloudsearch.
...
2020-09-04 15:18:06
138.197.130.138 attackspambots
2020-09-04T08:17:48+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-09-04 14:47:52
189.234.178.212 attack
20/9/3@12:48:14: FAIL: Alarm-Network address from=189.234.178.212
20/9/3@12:48:14: FAIL: Alarm-Network address from=189.234.178.212
20/9/3@12:48:14: FAIL: Alarm-Network address from=189.234.178.212
...
2020-09-04 14:40:30
2.202.194.246 attack
Lines containing failures of 2.202.194.246
Sep  2 01:24:44 metroid sshd[2609]: User r.r from 2.202.194.246 not allowed because listed in DenyUsers
Sep  2 01:24:44 metroid sshd[2609]: Received disconnect from 2.202.194.246 port 42198:11: Bye Bye [preauth]
Sep  2 01:24:44 metroid sshd[2609]: Disconnected from invalid user r.r 2.202.194.246 port 42198 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=2.202.194.246
2020-09-04 15:05:40
74.56.131.113 attackspambots
Sep  4 08:34:18 PorscheCustomer sshd[13262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.56.131.113
Sep  4 08:34:21 PorscheCustomer sshd[13262]: Failed password for invalid user bro from 74.56.131.113 port 60822 ssh2
Sep  4 08:37:52 PorscheCustomer sshd[13382]: Failed password for postgres from 74.56.131.113 port 36024 ssh2
...
2020-09-04 15:16:03
58.87.78.80 attackbots
Sep  4 07:49:44 lnxweb61 sshd[7730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.78.80
2020-09-04 15:04:08

Recently Reported IPs

47.99.119.218 87.197.140.226 195.123.241.39 51.89.1.63
125.227.141.115 103.70.128.23 98.126.18.108 176.40.242.132
78.129.129.190 185.159.68.91 85.66.165.118 114.236.209.69
161.35.151.186 4.141.240.191 183.231.118.94 178.35.22.171
51.151.98.36 109.171.166.109 205.227.89.237 136.221.17.47