102.65.21.213 - IPInfo

Basic Info

City: Cape Town

Region: Western Cape

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
102.65.21.191	attackbotsspam	Telnet Server BruteForce Attack	2019-11-08 04:47:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.65.21.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56203
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;102.65.21.213.			IN	A

;; AUTHORITY SECTION:
.			192	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021122501 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 26 10:19:47 CST 2021
;; MSG SIZE  rcvd: 106

Host info

213.21.65.102.in-addr.arpa domain name pointer 102-65-21-213.ftth.web.africa.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
213.21.65.102.in-addr.arpa	name = 102-65-21-213.ftth.web.africa.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.175.93.14	attackbots	Fail2Ban Ban Triggered	2019-07-24 12:12:01
5.62.41.147	attack	\[2019-07-24 00:13:21\] NOTICE\[20804\] chan_sip.c: Registration from '\' failed for '5.62.41.147:4048' - Wrong password \[2019-07-24 00:13:21\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-24T00:13:21.655-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1549",SessionID="0x7f06f823f758",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.147/58521",Challenge="48bd357c",ReceivedChallenge="48bd357c",ReceivedHash="3fec1cb3a29914c7361032a2d2ece143" \[2019-07-24 00:13:59\] NOTICE\[20804\] chan_sip.c: Registration from '\' failed for '5.62.41.147:4003' - Wrong password \[2019-07-24 00:13:59\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-24T00:13:59.903-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1074",SessionID="0x7f06f804c2c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.147/5	2019-07-24 12:15:24
190.9.12.172	attack	Automatic report - Port Scan Attack	2019-07-24 12:43:31
84.211.48.147	attack	Tue, 23 Jul 2019 20:08:23 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-24 12:22:02
206.189.44.77	attackspambots	WordPress brute force	2019-07-24 12:17:55
125.63.116.106	attackbots	Too many connections or unauthorized access detected from Arctic banned ip	2019-07-24 12:35:45
162.243.144.171	attackspam	Port scan: Attack repeated for 24 hours	2019-07-24 12:41:56
40.77.167.90	attackspam	Automatic report - Banned IP Access	2019-07-24 12:22:21
211.147.216.19	attackbots	Jul 24 09:57:01 areeb-Workstation sshd\[25477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.147.216.19 user=www-data Jul 24 09:57:03 areeb-Workstation sshd\[25477\]: Failed password for www-data from 211.147.216.19 port 32870 ssh2 Jul 24 09:59:27 areeb-Workstation sshd\[25876\]: Invalid user asa from 211.147.216.19 Jul 24 09:59:27 areeb-Workstation sshd\[25876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.147.216.19 ...	2019-07-24 12:46:48
51.38.237.214	attackspambots	Jul 24 06:14:03 SilenceServices sshd[11032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.237.214 Jul 24 06:14:05 SilenceServices sshd[11032]: Failed password for invalid user test from 51.38.237.214 port 57984 ssh2 Jul 24 06:15:11 SilenceServices sshd[11811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.237.214	2019-07-24 12:19:21
182.172.15.249	attack	2019-07-23T23:10:01.128614hz01.yumiweb.com sshd\[6406\]: Invalid user hadoop from 182.172.15.249 port 51314 2019-07-23T23:12:59.751544hz01.yumiweb.com sshd\[6409\]: Invalid user hadoop from 182.172.15.249 port 54678 2019-07-23T23:15:31.869945hz01.yumiweb.com sshd\[6421\]: Invalid user centos from 182.172.15.249 port 58050 ...	2019-07-24 12:48:22
187.87.15.100	attackbotsspam	failed_logins	2019-07-24 12:27:51
222.186.52.123	attackbots	Jul 24 05:45:59 MainVPS sshd[9288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.123 user=root Jul 24 05:46:01 MainVPS sshd[9288]: Failed password for root from 222.186.52.123 port 38770 ssh2 Jul 24 05:46:08 MainVPS sshd[9300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.123 user=root Jul 24 05:46:10 MainVPS sshd[9300]: Failed password for root from 222.186.52.123 port 12732 ssh2 Jul 24 05:46:38 MainVPS sshd[9335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.123 user=root Jul 24 05:46:40 MainVPS sshd[9335]: Failed password for root from 222.186.52.123 port 56972 ssh2 ...	2019-07-24 12:04:34
18.232.35.53	attack	Jul 23 20:08:43 TCP Attack: SRC=18.232.35.53 DST=[Masked] LEN=250 TOS=0x00 PREC=0x00 TTL=234 DF PROTO=TCP SPT=44626 DPT=80 WINDOW=913 RES=0x00 ACK PSH URGP=0	2019-07-24 12:14:03
88.247.110.88	attackbotsspam	2019-07-24T04:28:17.337581abusebot-7.cloudsearch.cf sshd\[18402\]: Invalid user ls from 88.247.110.88 port 64491	2019-07-24 12:31:45

Recently Reported IPs

187.174.165.149	39.99.111.67	241.14.116.141	158.145.131.203
16.188.170.135	19.236.97.77	241.19.254.87	145.255.21.195
129.54.208.33	24.196.234.17	41.208.73.71	165.16.41.239
145.80.110.111	135.63.136.232	10.130.88.177	158.54.196.30
112.97.179.246	147.114.143.153	211.233.129.103	84.125.190.122