45.43.21.18 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): IonSwitch LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Aug 4 07:27:29 pixelmemory sshd[3403805]: Failed password for root from 45.43.21.18 port 57146 ssh2 Aug 4 07:33:41 pixelmemory sshd[3415149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.43.21.18 user=root Aug 4 07:33:43 pixelmemory sshd[3415149]: Failed password for root from 45.43.21.18 port 42202 ssh2 Aug 4 07:39:45 pixelmemory sshd[3425511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.43.21.18 user=root Aug 4 07:39:47 pixelmemory sshd[3425511]: Failed password for root from 45.43.21.18 port 55488 ssh2 ...	2020-08-05 00:21:11
attackbots	Brute-force attempt banned	2020-08-01 12:42:53

类型

评论内容

时间

attack

Aug  4 07:27:29 pixelmemory sshd[3403805]: Failed password for root from 45.43.21.18 port 57146 ssh2
Aug  4 07:33:41 pixelmemory sshd[3415149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.43.21.18  user=root
Aug  4 07:33:43 pixelmemory sshd[3415149]: Failed password for root from 45.43.21.18 port 42202 ssh2
Aug  4 07:39:45 pixelmemory sshd[3425511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.43.21.18  user=root
Aug  4 07:39:47 pixelmemory sshd[3425511]: Failed password for root from 45.43.21.18 port 55488 ssh2
...

2020-08-05 00:21:11

attackbots

Brute-force attempt banned

2020-08-01 12:42:53

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.43.21.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58644
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.43.21.18.			IN	A

;; AUTHORITY SECTION:
.			114	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020073101 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 01 12:42:49 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 18.21.43.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 18.21.43.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
222.186.175.202	attackspambots	Sep 3 21:49:16 host sshd\[21420\]: Unable to negotiate with 222.186.175.202 port 56026: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\]	2020-09-04 03:53:08
118.76.188.43	attackspam	(Sep 3) LEN=40 TTL=46 ID=35780 TCP DPT=8080 WINDOW=59479 SYN (Sep 3) LEN=40 TTL=46 ID=55373 TCP DPT=8080 WINDOW=54094 SYN (Sep 2) LEN=40 TTL=46 ID=57650 TCP DPT=8080 WINDOW=54094 SYN (Sep 2) LEN=40 TTL=46 ID=15088 TCP DPT=8080 WINDOW=59479 SYN (Sep 2) LEN=40 TTL=46 ID=25431 TCP DPT=8080 WINDOW=59479 SYN (Sep 2) LEN=40 TTL=46 ID=2325 TCP DPT=8080 WINDOW=59479 SYN (Sep 1) LEN=40 TTL=46 ID=61807 TCP DPT=8080 WINDOW=54094 SYN (Aug 31) LEN=40 TTL=46 ID=30372 TCP DPT=8080 WINDOW=54094 SYN (Aug 30) LEN=40 TTL=46 ID=60720 TCP DPT=8080 WINDOW=59479 SYN (Aug 30) LEN=40 TTL=46 ID=54456 TCP DPT=8080 WINDOW=54094 SYN	2020-09-04 04:02:39
182.50.29.236	attackspambots	Port Scan ...	2020-09-04 04:20:40
41.130.228.49	attackbotsspam	TCP (SYN) 41.130.228.49:61590 -> port 445, len 52	2020-09-04 04:25:33
51.68.121.235	attack	Invalid user test2 from 51.68.121.235 port 37352	2020-09-04 03:52:35
159.89.157.126	attackspambots	TCP (SYN) 159.89.157.126:31234 -> port 443, len 44	2020-09-04 04:06:48
91.200.113.219	attackspam	TCP (SYN) 91.200.113.219:23614 -> port 7547, len 40	2020-09-04 04:23:28
155.4.61.15	attack	TCP (SYN) 155.4.61.15:51120 -> port 23, len 40	2020-09-04 04:16:19
103.255.123.249	attackspambots	Icarus honeypot on github	2020-09-04 03:54:00
132.145.242.238	attackspam	Sep 3 19:51:55 ns382633 sshd\[29565\]: Invalid user probe from 132.145.242.238 port 47006 Sep 3 19:51:55 ns382633 sshd\[29565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 Sep 3 19:51:57 ns382633 sshd\[29565\]: Failed password for invalid user probe from 132.145.242.238 port 47006 ssh2 Sep 3 19:55:48 ns382633 sshd\[30271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 user=root Sep 3 19:55:51 ns382633 sshd\[30271\]: Failed password for root from 132.145.242.238 port 53150 ssh2	2020-09-04 04:02:15
158.140.180.125	attackspambots	TCP (SYN) 158.140.180.125:61359 -> port 445, len 52	2020-09-04 04:16:05
185.189.211.234	attackspam	TCP (SYN) 185.189.211.234:55237 -> port 5900, len 52	2020-09-04 04:09:41
111.43.3.36	attackspambots	TCP (SYN) 111.43.3.36:19854 -> port 1433, len 44	2020-09-04 04:11:36
188.166.60.28	attackbots	Unauthorized connection attempt detected from IP address 188.166.60.28 to port 23 [T]	2020-09-04 04:14:40
158.177.128.27	attack	Auto Detect Rule! proto TCP (SYN), 158.177.128.27:55912->gjan.info:1433, len 40	2020-09-04 04:15:42

最近上报的IP列表

173.212.244.60	14.179.10.203	38.231.99.6	107.210.53.119
186.157.68.22	46.180.169.130	193.50.141.119	50.169.142.65
176.166.15.2	78.109.232.19	175.221.177.27	13.38.108.176
107.165.208.149	31.30.37.212	153.25.191.68	165.131.2.70
154.97.100.46	53.235.52.242	52.229.35.240	47.200.209.175