45.238.21.212 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Chile

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.238.210.213	attack	Automatic report - Port Scan Attack	2019-09-14 03:52:28
45.238.210.22	attack	Aug 6 19:41:20 ns3367391 sshd\[16972\]: Invalid user admin from 45.238.210.22 port 36639 Aug 6 19:41:20 ns3367391 sshd\[16972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.238.210.22 ...	2019-08-07 03:07:57
45.238.210.38	attack	Automatic report - Port Scan Attack	2019-07-17 08:14:18

Type

Details

Datetime

45.238.210.213

attack

Automatic report - Port Scan Attack

2019-09-14 03:52:28

45.238.210.22

attack

Aug  6 19:41:20 ns3367391 sshd\[16972\]: Invalid user admin from 45.238.210.22 port 36639
Aug  6 19:41:20 ns3367391 sshd\[16972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.238.210.22
...

2019-08-07 03:07:57

45.238.210.38

attack

Automatic report - Port Scan Attack

2019-07-17 08:14:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.238.21.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40124
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.238.21.212.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 15:22:16 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 212.21.238.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 212.21.238.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
61.164.96.126	attackbots	Unauthorised access (Feb 4) SRC=61.164.96.126 LEN=40 TTL=53 ID=15840 TCP DPT=8080 WINDOW=54687 SYN Unauthorised access (Feb 4) SRC=61.164.96.126 LEN=40 TTL=53 ID=33497 TCP DPT=8080 WINDOW=47871 SYN Unauthorised access (Feb 3) SRC=61.164.96.126 LEN=40 TTL=53 ID=28830 TCP DPT=8080 WINDOW=54687 SYN Unauthorised access (Feb 3) SRC=61.164.96.126 LEN=40 TTL=53 ID=22746 TCP DPT=8080 WINDOW=54687 SYN Unauthorised access (Feb 2) SRC=61.164.96.126 LEN=40 TTL=53 ID=8870 TCP DPT=8080 WINDOW=54687 SYN Unauthorised access (Feb 2) SRC=61.164.96.126 LEN=40 TTL=53 ID=4508 TCP DPT=8080 WINDOW=54687 SYN	2020-02-05 05:19:51
36.153.21.30	attackbots	Honeypot attack, port: 5555, PTR: PTR record not found	2020-02-05 05:16:25
93.174.93.231	attackbots	slow and persistent scanner	2020-02-05 05:08:18
217.99.189.80	attackspambots	Feb 4 21:05:18 h2065291 sshd[9945]: Invalid user pi from 217.99.189.80 Feb 4 21:05:18 h2065291 sshd[9947]: Invalid user pi from 217.99.189.80 Feb 4 21:05:20 h2065291 sshd[9945]: Failed password for invalid user pi from 217.99.189.80 port 49808 ssh2 Feb 4 21:05:20 h2065291 sshd[9945]: Connection closed by 217.99.189.80 [preauth] Feb 4 21:05:20 h2065291 sshd[9947]: Failed password for invalid user pi from 217.99.189.80 port 49812 ssh2 Feb 4 21:05:21 h2065291 sshd[9947]: Connection closed by 217.99.189.80 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=217.99.189.80	2020-02-05 04:48:06
185.198.162.54	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-05 05:00:34
171.25.193.234	attackspambots	02/04/2020-21:20:44.265682 171.25.193.234 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 16	2020-02-05 04:49:28
106.13.18.86	attack	Invalid user zhouh from 106.13.18.86 port 43454 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.18.86 Failed password for invalid user zhouh from 106.13.18.86 port 43454 ssh2 Invalid user azureuser from 106.13.18.86 port 50014 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.18.86	2020-02-05 05:19:02
190.85.145.162	attackbotsspam	Feb 4 10:36:37 web9 sshd\[23848\]: Invalid user gestion from 190.85.145.162 Feb 4 10:36:37 web9 sshd\[23848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.145.162 Feb 4 10:36:39 web9 sshd\[23848\]: Failed password for invalid user gestion from 190.85.145.162 port 39594 ssh2 Feb 4 10:41:30 web9 sshd\[24730\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.145.162 user=root Feb 4 10:41:32 web9 sshd\[24730\]: Failed password for root from 190.85.145.162 port 44238 ssh2	2020-02-05 05:00:16
162.243.131.51	attackbots	firewall-block, port(s): 9443/tcp	2020-02-05 05:20:19
84.224.192.24	attackspambots	Feb 4 21:20:32 grey postfix/smtpd\[25091\]: NOQUEUE: reject: RCPT from netacc-gpn-4-192-24.pool.telenor.hu\[84.224.192.24\]: 554 5.7.1 Service unavailable\; Client host \[84.224.192.24\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?84.224.192.24\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-05 05:01:48
193.17.189.83	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 04-02-2020 20:20:16.	2020-02-05 05:22:06
212.47.241.15	attack	Feb 4 11:02:02 web9 sshd\[28267\]: Invalid user haro from 212.47.241.15 Feb 4 11:02:02 web9 sshd\[28267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.241.15 Feb 4 11:02:05 web9 sshd\[28267\]: Failed password for invalid user haro from 212.47.241.15 port 49678 ssh2 Feb 4 11:04:45 web9 sshd\[28645\]: Invalid user test from 212.47.241.15 Feb 4 11:04:45 web9 sshd\[28645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.241.15	2020-02-05 05:07:24
217.115.10.131	attack	02/04/2020-21:20:26.436390 217.115.10.131 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 56	2020-02-05 05:09:16
189.206.30.150	attackbotsspam	Feb 4 21:20:35 grey postfix/smtpd\[24787\]: NOQUEUE: reject: RCPT from unknown\[189.206.30.150\]: 554 5.7.1 Service unavailable\; Client host \[189.206.30.150\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=189.206.30.150\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-05 04:58:49
112.85.42.94	attack	Feb 4 20:45:35 game-panel sshd[4450]: Failed password for root from 112.85.42.94 port 27828 ssh2 Feb 4 20:45:37 game-panel sshd[4450]: Failed password for root from 112.85.42.94 port 27828 ssh2 Feb 4 20:45:39 game-panel sshd[4450]: Failed password for root from 112.85.42.94 port 27828 ssh2	2020-02-05 05:11:05

Recently Reported IPs

196.1.197.94	58.11.37.113	112.192.150.154	45.79.146.206
81.174.34.93	59.2.59.214	178.94.49.9	123.178.227.182
128.1.91.92	1.182.203.192	59.23.253.228	45.33.77.207
120.239.160.0	69.144.132.129	197.53.80.26	101.227.68.26
189.115.118.248	37.245.57.229	181.45.4.159	187.163.103.149