46.21.245.21 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): LLC Upravlyayushaya Kompaniya Nash Dom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt from IP address 46.21.245.21 on Port 445(SMB)	2020-02-22 19:09:45

相同子网IP讨论:

IP	类型	评论内容	时间
46.21.245.107	attack	Automatic report - Port Scan Attack	2020-05-27 17:36:53

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 46.21.245.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12855
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;46.21.245.21.			IN	A

;; AUTHORITY SECTION:
.			583	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022102 1800 900 604800 86400

;; Query time: 126 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 19:09:40 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

21.245.21.46.in-addr.arpa domain name pointer pppoe-dynamic-pool-21.u2net.ru.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.245.21.46.in-addr.arpa	name = pppoe-dynamic-pool-21.u2net.ru.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
179.186.247.26	attack	23/tcp [2019-10-06]1pkt	2019-10-07 01:07:55
193.112.241.141	attackbots	Oct 6 13:38:36 debian64 sshd\[26080\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.241.141 user=root Oct 6 13:38:38 debian64 sshd\[26080\]: Failed password for root from 193.112.241.141 port 39872 ssh2 Oct 6 13:41:40 debian64 sshd\[27043\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.241.141 user=root ...	2019-10-07 01:20:14
63.41.9.210	attackbots	Oct 6 13:22:59 Ubuntu-1404-trusty-64-minimal sshd\[3645\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.41.9.210 user=root Oct 6 13:23:01 Ubuntu-1404-trusty-64-minimal sshd\[3645\]: Failed password for root from 63.41.9.210 port 41069 ssh2 Oct 6 13:40:49 Ubuntu-1404-trusty-64-minimal sshd\[19349\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.41.9.210 user=root Oct 6 13:40:50 Ubuntu-1404-trusty-64-minimal sshd\[19349\]: Failed password for root from 63.41.9.210 port 39127 ssh2 Oct 6 13:41:36 Ubuntu-1404-trusty-64-minimal sshd\[19553\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.41.9.210 user=root	2019-10-07 01:23:40
58.220.249.130	attackspam	10/06/2019-07:41:04.494997 58.220.249.130 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 54	2019-10-07 01:39:15
42.119.75.25	attack	Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=44696 TCP DPT=8080 WINDOW=39814 SYN Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=43552 TCP DPT=8080 WINDOW=39814 SYN Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=60912 TCP DPT=8080 WINDOW=39814 SYN Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=50945 TCP DPT=8080 WINDOW=287 SYN	2019-10-07 01:10:08
110.244.75.92	attackbots	Unauthorised access (Oct 6) SRC=110.244.75.92 LEN=40 TTL=49 ID=3636 TCP DPT=8080 WINDOW=52735 SYN	2019-10-07 01:21:06
125.76.225.11	attack	ThinkPHP Remote Code Execution Vulnerability	2019-10-07 01:32:35
62.234.109.155	attackspambots	Oct 6 16:02:41 sshgateway sshd\[4221\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.109.155 user=root Oct 6 16:02:44 sshgateway sshd\[4221\]: Failed password for root from 62.234.109.155 port 59403 ssh2 Oct 6 16:08:13 sshgateway sshd\[4242\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.109.155 user=root	2019-10-07 01:37:49
186.153.138.2	attack	$f2bV_matches	2019-10-07 01:02:31
222.186.180.147	attack	Oct 6 19:06:30 SilenceServices sshd[15715]: Failed password for root from 222.186.180.147 port 45284 ssh2 Oct 6 19:06:34 SilenceServices sshd[15715]: Failed password for root from 222.186.180.147 port 45284 ssh2 Oct 6 19:06:38 SilenceServices sshd[15715]: Failed password for root from 222.186.180.147 port 45284 ssh2 Oct 6 19:06:43 SilenceServices sshd[15715]: Failed password for root from 222.186.180.147 port 45284 ssh2	2019-10-07 01:10:45
176.37.147.250	attack	Automatic report - Banned IP Access	2019-10-07 01:22:50
94.191.87.254	attack	SSH brutforce	2019-10-07 01:36:06
195.14.36.199	attack	Port 1433 Scan	2019-10-07 01:18:52
200.119.125.194	attackspam	2019-10-06T09:04:03.143642MailD postfix/smtpd[30651]: NOQUEUE: reject: RCPT from static-200-119-125-194.static.etb.net.co[200.119.125.194]: 554 5.7.1 Service unavailable; Client host [200.119.125.194] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?200.119.125.194; from= to= proto=ESMTP helo= 2019-10-06T09:29:07.252228MailD postfix/smtpd[359]: NOQUEUE: reject: RCPT from static-200-119-125-194.static.etb.net.co[200.119.125.194]: 554 5.7.1 Service unavailable; Client host [200.119.125.194] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?200.119.125.194; from= to= proto=ESMTP helo= 2019-10-06T13:41:42.833059MailD postfix/smtpd[17236]: NOQUEUE: reject: RCPT from static-200-119-125-194.static.etb.net.co[200.119.125.194]: 554 5.7.1 Service unavailable; Client host [200.119.125	2019-10-07 01:18:11
49.234.44.48	attackspam	Oct 6 02:58:26 kapalua sshd\[16281\]: Invalid user Science@2017 from 49.234.44.48 Oct 6 02:58:26 kapalua sshd\[16281\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.44.48 Oct 6 02:58:28 kapalua sshd\[16281\]: Failed password for invalid user Science@2017 from 49.234.44.48 port 59153 ssh2 Oct 6 03:02:42 kapalua sshd\[16689\]: Invalid user !QAZ2wsx3edc from 49.234.44.48 Oct 6 03:02:42 kapalua sshd\[16689\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.44.48	2019-10-07 01:07:05

最近上报的IP列表

202.160.126.107	180.241.224.174	244.197.109.112	113.184.123.29
95.31.99.152	101.16.179.172	233.232.121.61	10.224.100.110
110.54.246.39	57.210.144.81	61.150.81.131	36.77.95.58
235.32.198.89	254.107.134.70	24.66.196.190	136.225.196.169
55.203.231.108	187.111.214.153	212.215.77.74	13.53.200.149