城市(city): unknown
省份(region): unknown
国家(country): Iran
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '46.245.48.0 - 46.245.63.255'
% Abuse contact for '46.245.48.0 - 46.245.63.255' is 'lir@sotoon.ir'
inetnum: 46.245.48.0 - 46.245.63.255
netname: IR-SOTOON-20101231
country: IR
org: ORG-HUCC1-RIPE
admin-c: SCS600-RIPE
tech-c: SCS600-RIPE
status: ALLOCATED PA
mnt-by: lir-ir-sotoon-1-MNT
mnt-by: RIPE-NCC-HM-MNT
created: 2026-07-31T08:37:37Z
last-modified: 2026-07-31T08:37:37Z
source: RIPE
organisation: ORG-HUCC1-RIPE
org-name: Hezardastan Unit Cloud Computing PJSC
org-type: LIR
address: Unit 8, Third Floor, Science and Technology Building,
Beheshti University, No 0, Darakeh Street
address: 1983960053
address: Tehran
address: IRAN, ISLAMIC REPUBLIC OF
country: IR
reg-nr: 14008261158 / 539778
phone: +982192001131
admin-c: SCS600-RIPE
tech-c: SCS600-RIPE
abuse-c: AR62601-RIPE
mnt-ref: lir-ir-sotoon-1-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: lir-ir-sotoon-1-MNT
created: 2021-03-03T14:59:49Z
last-modified: 2026-06-03T07:47:50Z
source: RIPE # Filtered
person: Sotoon Cloud Support
address: No. 20, Rachel Corrie 27 , Alvand st.
phone: +982192001131
org: ORG-HUCC1-RIPE
nic-hdl: SCS600-RIPE
mnt-by: lir-ir-sotoon-1-MNT
created: 2025-01-25T23:34:53Z
last-modified: 2025-01-25T23:34:53Z
source: RIPE # Filtered
% Information related to '46.245.48.0/20AS49801'
route: 46.245.48.0/20
origin: AS49801
created: 2026-07-31T17:12:11Z
last-modified: 2026-07-31T17:12:11Z
source: RIPE
mnt-by: lir-ir-sotoon-1-MNT
% This query was served by the RIPE Database Query Service version 1.124 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 46.245.49.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9336
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;46.245.49.92. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082702 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 28 09:13:33 CST 2026
;; MSG SIZE rcvd: 105Host 92.49.245.46.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 92.49.245.46.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 67.205.162.223 | attack | $f2bV_matches |
2020-04-23 12:16:23 |
| 187.199.194.93 | spambotsattackproxy | access to accounts not allowed data theft cards etc charges money to another card false identity scam etc |
2020-04-23 11:21:56 |
| 213.180.203.143 | attackbots | [Thu Apr 23 10:55:55.295400 2020] [:error] [pid 1385:tid 140011974424320] [client 213.180.203.143:62826] [client 213.180.203.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XqERy0zRDYCvRusdpssivgAAA1g"] ... |
2020-04-23 12:19:59 |
| 94.191.64.14 | attackbots | Apr 23 05:52:23 srv01 sshd[17040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.64.14 user=root Apr 23 05:52:25 srv01 sshd[17040]: Failed password for root from 94.191.64.14 port 40885 ssh2 Apr 23 05:56:16 srv01 sshd[17389]: Invalid user yl from 94.191.64.14 port 24132 Apr 23 05:56:16 srv01 sshd[17389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.64.14 Apr 23 05:56:16 srv01 sshd[17389]: Invalid user yl from 94.191.64.14 port 24132 Apr 23 05:56:18 srv01 sshd[17389]: Failed password for invalid user yl from 94.191.64.14 port 24132 ssh2 ... |
2020-04-23 12:03:23 |
| 46.231.9.134 | attackspam | Postfix RBL failed |
2020-04-23 12:03:07 |
| 187.199.194.93 | spambotsattackproxy | access to accounts not allowed data theft cards etc charges money to another card false identity scam etc |
2020-04-23 11:05:06 |
| 185.244.39.117 | attack | SQL Injection |
2020-04-23 12:22:49 |
| 176.37.100.247 | attackspam | "Unauthorized connection attempt on SSHD detected" |
2020-04-23 12:20:26 |
| 14.63.162.98 | attack | Apr 22 23:08:36 askasleikir sshd[21614]: Failed password for invalid user rf from 14.63.162.98 port 40226 ssh2 |
2020-04-23 12:17:53 |
| 178.62.75.60 | attackbotsspam | (sshd) Failed SSH login from 178.62.75.60 (GB/United Kingdom/-): 5 in the last 3600 secs |
2020-04-23 12:13:32 |
| 111.30.9.82 | attackbots | invalid user ip from 111.30.9.82 port 35736 |
2020-04-23 08:22:11 |
| 187.199.194.93 | spambotsattackproxy | access to accounts not allowed data theft cards etc charges money to another card false identity scam etc |
2020-04-23 11:05:06 |
| 114.67.91.168 | attackbotsspam | Fail2Ban Ban Triggered (2) |
2020-04-23 12:06:27 |
| 193.112.19.70 | attackbots | SSH Brute-Forcing (server1) |
2020-04-23 12:00:28 |
| 159.89.3.128 | attackbotsspam | Fail2Ban - SSH Bruteforce Attempt |
2020-04-23 12:25:17 |