103.21.207.54 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.21.207.3	attackspambots	Brute force attempt	2019-07-18 00:21:03
103.21.207.3	attackspambots	failed_logins	2019-07-04 15:44:42

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.21.207.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18485
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.21.207.54.			IN	A

;; AUTHORITY SECTION:
.			593	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 17:12:21 CST 2022
;; MSG SIZE  rcvd: 106

Host info

54.207.21.103.in-addr.arpa domain name pointer 207.54.Customer.PermanaNet-AS131746.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.207.21.103.in-addr.arpa	name = 207.54.Customer.PermanaNet-AS131746.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
157.245.211.180	attackbotsspam	frenzy	2020-08-24 15:01:41
217.165.23.53	attackbotsspam	Aug 24 11:22:48 dhoomketu sshd[2621395]: Invalid user student from 217.165.23.53 port 55330 Aug 24 11:22:48 dhoomketu sshd[2621395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.165.23.53 Aug 24 11:22:48 dhoomketu sshd[2621395]: Invalid user student from 217.165.23.53 port 55330 Aug 24 11:22:49 dhoomketu sshd[2621395]: Failed password for invalid user student from 217.165.23.53 port 55330 ssh2 Aug 24 11:27:00 dhoomketu sshd[2621435]: Invalid user tester from 217.165.23.53 port 34054 ...	2020-08-24 14:50:57
51.83.73.127	attackbotsspam	Aug 24 06:16:51 jumpserver sshd[23510]: Invalid user cacti from 51.83.73.127 port 33456 Aug 24 06:16:53 jumpserver sshd[23510]: Failed password for invalid user cacti from 51.83.73.127 port 33456 ssh2 Aug 24 06:20:37 jumpserver sshd[23559]: Invalid user tgu from 51.83.73.127 port 41314 ...	2020-08-24 14:57:10
175.123.253.220	attackspambots	Aug 24 08:50:06 eventyay sshd[11162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.123.253.220 Aug 24 08:50:08 eventyay sshd[11162]: Failed password for invalid user sami from 175.123.253.220 port 44240 ssh2 Aug 24 08:54:50 eventyay sshd[11323]: Failed password for root from 175.123.253.220 port 52094 ssh2 ...	2020-08-24 14:57:54
129.204.186.151	attack	Aug 24 02:18:35 george sshd[16718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.186.151 user=root Aug 24 02:18:37 george sshd[16718]: Failed password for root from 129.204.186.151 port 37104 ssh2 Aug 24 02:21:52 george sshd[16760]: Invalid user kishore from 129.204.186.151 port 37246 Aug 24 02:21:52 george sshd[16760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.186.151 Aug 24 02:21:53 george sshd[16760]: Failed password for invalid user kishore from 129.204.186.151 port 37246 ssh2 ...	2020-08-24 14:29:12
2a02:750:7:3305::28e	attackspam	WordPress wp-login brute force :: 2a02:750:7:3305::28e 0.064 BYPASS [24/Aug/2020:03:54:20 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2573 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-24 14:21:46
185.220.101.213	attack	$f2bV_matches	2020-08-24 14:48:54
217.147.225.148	attack	IP blocked	2020-08-24 15:02:41
183.134.104.148	attackbotsspam	Input Traffic from this IP, but critial abuseconfidencescore	2020-08-24 14:43:10
3.25.69.93	attackspambots	WordPress XMLRPC scan :: 3.25.69.93 0.464 - [24/Aug/2020:03:53:59 0000] www.[censored_1] "POST //xmlrpc.php HTTP/1.1" 503 18223 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "HTTP/1.1"	2020-08-24 14:36:12
162.247.72.199	attackspam	Aug 24 06:45:35 *** sshd[7826]: Invalid user admin from 162.247.72.199	2020-08-24 15:01:28
139.99.192.189	attack	[2020-08-24 02:08:33] NOTICE[1185] chan_sip.c: Registration from '"322"' failed for '139.99.192.189:23369' - Wrong password [2020-08-24 02:08:33] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-24T02:08:33.794-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="322",SessionID="0x7f10c4239d98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.192.189/23369",Challenge="11cf6f0a",ReceivedChallenge="11cf6f0a",ReceivedHash="265c52b28983f18d23133d93ab72aca2" [2020-08-24 02:10:46] NOTICE[1185] chan_sip.c: Registration from '"323"' failed for '139.99.192.189:33802' - Wrong password [2020-08-24 02:10:46] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-24T02:10:46.457-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="323",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139. ...	2020-08-24 14:57:28
200.56.1.142	attackspambots	Automatic report - Port Scan Attack	2020-08-24 14:53:47
104.131.55.92	attackspambots	Aug 24 08:11:42 vps639187 sshd\[28949\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.92 user=root Aug 24 08:11:44 vps639187 sshd\[28949\]: Failed password for root from 104.131.55.92 port 51686 ssh2 Aug 24 08:16:19 vps639187 sshd\[29061\]: Invalid user jaime from 104.131.55.92 port 35906 Aug 24 08:16:19 vps639187 sshd\[29061\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.92 ...	2020-08-24 14:26:58
43.226.150.92	attackbotsspam	Aug 24 06:09:55 buvik sshd[9944]: Invalid user julia from 43.226.150.92 Aug 24 06:09:56 buvik sshd[9944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.150.92 Aug 24 06:09:57 buvik sshd[9944]: Failed password for invalid user julia from 43.226.150.92 port 35608 ssh2 ...	2020-08-24 14:23:16

Recently Reported IPs

103.21.2.211	103.21.207.114	103.21.207.42	103.21.207.87
103.21.217.181	103.21.217.44	103.21.219.68	101.108.107.60
103.21.229.93	103.21.229.103	103.21.229.116	103.21.229.98
103.21.225.82	103.21.230.114	103.21.230.67	103.21.225.142
103.21.228.99	101.108.107.63	103.21.231.131	103.21.225.135