Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.239.49.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62865
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;21.239.49.245.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400

;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 04:14:28 CST 2025
;; MSG SIZE  rcvd: 106
Host info
Host 245.49.239.21.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 245.49.239.21.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
37.59.148.234 attackspam
timhelmke.de 37.59.148.234 [01/Oct/2020:09:50:00 +0200] "POST /wp-login.php HTTP/1.1" 200 6650 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
timhelmke.de 37.59.148.234 [01/Oct/2020:09:50:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4050 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-10-01 20:07:15
117.223.181.82 attack
2020-09-30 19:31:38.600688-0500  localhost sshd[59474]: Failed password for invalid user user1 from 117.223.181.82 port 53460 ssh2
2020-10-01 20:04:22
217.133.58.148 attackspam
217.133.58.148 (IT/Italy/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  1 06:57:41 server2 sshd[980]: Failed password for root from 217.133.58.148 port 45157 ssh2
Oct  1 07:12:27 server2 sshd[14053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.67.180  user=root
Oct  1 07:02:24 server2 sshd[5303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.53.186.113  user=root
Oct  1 07:02:26 server2 sshd[5303]: Failed password for root from 60.53.186.113 port 2840 ssh2
Oct  1 07:01:24 server2 sshd[4545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.38.246  user=root
Oct  1 07:01:26 server2 sshd[4545]: Failed password for root from 117.121.38.246 port 58624 ssh2

IP Addresses Blocked:
2020-10-01 19:52:22
87.251.70.83 attack
Threat Management Alert 2: Attempted Information Leak. Signature ET SCAN MS Terminal Server Traffic on Non-standard Port. From: 87.251.70.83:47254, to: 192.168.x.x:5001, protocol: TCP
2020-10-01 20:08:17
41.237.140.72 attackspam
23/tcp
[2020-09-30]1pkt
2020-10-01 20:05:31
110.49.70.242 attackbotsspam
Oct  1 19:25:16 web1 sshd[14282]: Invalid user felipe from 110.49.70.242 port 44234
Oct  1 19:25:16 web1 sshd[14282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.70.242
Oct  1 19:25:16 web1 sshd[14282]: Invalid user felipe from 110.49.70.242 port 44234
Oct  1 19:25:18 web1 sshd[14282]: Failed password for invalid user felipe from 110.49.70.242 port 44234 ssh2
Oct  1 19:52:51 web1 sshd[23386]: Invalid user bob from 110.49.70.242 port 43474
Oct  1 19:52:51 web1 sshd[23386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.70.242
Oct  1 19:52:51 web1 sshd[23386]: Invalid user bob from 110.49.70.242 port 43474
Oct  1 19:52:53 web1 sshd[23386]: Failed password for invalid user bob from 110.49.70.242 port 43474 ssh2
Oct  1 20:54:16 web1 sshd[11764]: Invalid user git from 110.49.70.242 port 40016
...
2020-10-01 19:45:39
193.122.98.148 attack
fail2ban -- 193.122.98.148
...
2020-10-01 19:49:50
166.62.100.99 attackbotsspam
166.62.100.99 - - [01/Oct/2020:10:36:12 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-01 19:46:44
175.182.95.48 attack
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-01 19:54:08
138.68.253.149 attackspambots
Time:     Thu Oct  1 10:55:46 2020 +0000
IP:       138.68.253.149 (US/United States/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Oct  1 10:51:54 29-1 sshd[18268]: Invalid user hari from 138.68.253.149 port 58058
Oct  1 10:51:55 29-1 sshd[18268]: Failed password for invalid user hari from 138.68.253.149 port 58058 ssh2
Oct  1 10:54:06 29-1 sshd[18607]: Invalid user www from 138.68.253.149 port 37444
Oct  1 10:54:08 29-1 sshd[18607]: Failed password for invalid user www from 138.68.253.149 port 37444 ssh2
Oct  1 10:55:45 29-1 sshd[18854]: Invalid user ubuntu from 138.68.253.149 port 39752
2020-10-01 19:33:33
2800:4b0:800d:74e8:cddc:bb56:f78:3034 attack
WordPress wp-login brute force :: 2800:4b0:800d:74e8:cddc:bb56:f78:3034 0.072 BYPASS [30/Sep/2020:20:41:55  0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2549 "https://[censored_2]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
2020-10-01 20:03:25
122.51.254.221 attackbots
Oct  1 00:14:44 ns381471 sshd[11919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.254.221
Oct  1 00:14:46 ns381471 sshd[11919]: Failed password for invalid user rex from 122.51.254.221 port 41638 ssh2
2020-10-01 19:37:50
103.224.82.26 attackbots
Honeypot hit.
2020-10-01 19:42:04
36.68.221.236 attack
DATE:2020-09-30 22:33:44, IP:36.68.221.236, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2020-10-01 19:31:22
221.6.32.34 attack
Oct  1 09:24:27 124388 sshd[17519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.6.32.34
Oct  1 09:24:27 124388 sshd[17519]: Invalid user quagga from 221.6.32.34 port 59026
Oct  1 09:24:29 124388 sshd[17519]: Failed password for invalid user quagga from 221.6.32.34 port 59026 ssh2
Oct  1 09:27:37 124388 sshd[17638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.6.32.34  user=root
Oct  1 09:27:39 124388 sshd[17638]: Failed password for root from 221.6.32.34 port 36304 ssh2
2020-10-01 19:42:58

Recently Reported IPs

95.102.123.19 64.120.159.49 120.22.137.246 30.166.138.168
203.91.143.7 124.135.27.63 118.185.213.33 9.161.97.227
170.250.97.246 150.137.221.39 120.160.71.132 77.155.192.160
23.210.245.250 206.80.234.216 169.64.208.173 233.254.80.5
210.43.107.66 229.49.245.219 53.26.152.63 166.253.33.62