Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Central

Region: Central and Western District

Country: Hong Kong

Internet Service Provider: UCloud Hong Kong

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackspambots
2020-09-02T19:05:11.912849lavrinenko.info sshd[21052]: Invalid user ysw from 103.210.21.207 port 42092
2020-09-02T19:05:11.919652lavrinenko.info sshd[21052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
2020-09-02T19:05:11.912849lavrinenko.info sshd[21052]: Invalid user ysw from 103.210.21.207 port 42092
2020-09-02T19:05:13.790515lavrinenko.info sshd[21052]: Failed password for invalid user ysw from 103.210.21.207 port 42092 ssh2
2020-09-02T19:09:00.624782lavrinenko.info sshd[21117]: Invalid user zxb from 103.210.21.207 port 54428
...
2020-09-03 00:24:09
attack
Invalid user beo from 103.210.21.207 port 59572
2020-09-02 15:53:44
attack
Sep  2 02:35:09 vpn01 sshd[7258]: Failed password for root from 103.210.21.207 port 49742 ssh2
Sep  2 02:38:49 vpn01 sshd[7327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
...
2020-09-02 08:57:53
attackspam
bruteforce detected
2020-08-31 15:49:21
attackspam
Invalid user pmb from 103.210.21.207 port 40606
2020-08-25 22:16:41
attackbots
2020-08-19T18:34:37.446142abusebot.cloudsearch.cf sshd[16327]: Invalid user lucia from 103.210.21.207 port 41516
2020-08-19T18:34:37.451904abusebot.cloudsearch.cf sshd[16327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
2020-08-19T18:34:37.446142abusebot.cloudsearch.cf sshd[16327]: Invalid user lucia from 103.210.21.207 port 41516
2020-08-19T18:34:39.184028abusebot.cloudsearch.cf sshd[16327]: Failed password for invalid user lucia from 103.210.21.207 port 41516 ssh2
2020-08-19T18:41:19.218165abusebot.cloudsearch.cf sshd[16581]: Invalid user support from 103.210.21.207 port 51500
2020-08-19T18:41:19.223545abusebot.cloudsearch.cf sshd[16581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
2020-08-19T18:41:19.218165abusebot.cloudsearch.cf sshd[16581]: Invalid user support from 103.210.21.207 port 51500
2020-08-19T18:41:21.145910abusebot.cloudsearch.cf sshd[16581]: Failed pass
...
2020-08-20 04:04:33
attackbotsspam
failed root login
2020-08-19 17:55:58
attackspambots
2020-07-21T08:20:56.867533morrigan.ad5gb.com sshd[38446]: Failed password for invalid user amsftp from 103.210.21.207 port 34172 ssh2
2020-07-21T08:20:57.205812morrigan.ad5gb.com sshd[38446]: Disconnected from invalid user amsftp 103.210.21.207 port 34172 [preauth]
2020-07-21 21:27:38
attackbots
Jul 20 01:16:45 NPSTNNYC01T sshd[28582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
Jul 20 01:16:47 NPSTNNYC01T sshd[28582]: Failed password for invalid user squid from 103.210.21.207 port 39568 ssh2
Jul 20 01:24:00 NPSTNNYC01T sshd[29552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
...
2020-07-20 13:37:50
attackspambots
Jun 24 13:18:53 jumpserver sshd[200439]: Invalid user user from 103.210.21.207 port 41130
Jun 24 13:18:55 jumpserver sshd[200439]: Failed password for invalid user user from 103.210.21.207 port 41130 ssh2
Jun 24 13:24:01 jumpserver sshd[200457]: Invalid user shane from 103.210.21.207 port 36894
...
2020-06-24 22:21:31
attackbotsspam
prod11
...
2020-06-22 14:16:57
attackbots
2020-06-19T14:25:30.411735shield sshd\[1777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207  user=root
2020-06-19T14:25:32.058322shield sshd\[1777\]: Failed password for root from 103.210.21.207 port 41660 ssh2
2020-06-19T14:29:01.418494shield sshd\[2803\]: Invalid user frank from 103.210.21.207 port 41216
2020-06-19T14:29:01.422187shield sshd\[2803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
2020-06-19T14:29:03.701130shield sshd\[2803\]: Failed password for invalid user frank from 103.210.21.207 port 41216 ssh2
2020-06-20 03:15:28
attackbots
2020-06-16T16:45:01.571697  sshd[31765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
2020-06-16T16:45:01.556060  sshd[31765]: Invalid user system from 103.210.21.207 port 57206
2020-06-16T16:45:03.661364  sshd[31765]: Failed password for invalid user system from 103.210.21.207 port 57206 ssh2
2020-06-16T18:46:03.446133  sshd[2558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207  user=root
2020-06-16T18:46:05.816471  sshd[2558]: Failed password for root from 103.210.21.207 port 55692 ssh2
...
2020-06-17 03:52:32
attackspambots
Dec 16 06:53:56 kapalua sshd\[15613\]: Invalid user 123456 from 103.210.21.207
Dec 16 06:53:56 kapalua sshd\[15613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
Dec 16 06:53:58 kapalua sshd\[15613\]: Failed password for invalid user 123456 from 103.210.21.207 port 35852 ssh2
Dec 16 07:00:58 kapalua sshd\[16289\]: Invalid user sync0000 from 103.210.21.207
Dec 16 07:00:58 kapalua sshd\[16289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
2019-12-17 03:43:41
attackspam
Dec 16 10:37:13 ns37 sshd[31233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
2019-12-16 18:05:13
attack
Oct 27 22:12:38 markkoudstaal sshd[17728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
Oct 27 22:12:40 markkoudstaal sshd[17728]: Failed password for invalid user aart from 103.210.21.207 port 52688 ssh2
Oct 27 22:17:08 markkoudstaal sshd[18208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.207
2019-10-28 06:00:34
Comments on same subnet:
IP Type Details Datetime
103.210.21.57 attack
2020-08-20T14:22:55.399391shield sshd\[4462\]: Invalid user marcus from 103.210.21.57 port 37472
2020-08-20T14:22:55.408758shield sshd\[4462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.57
2020-08-20T14:22:57.117818shield sshd\[4462\]: Failed password for invalid user marcus from 103.210.21.57 port 37472 ssh2
2020-08-20T14:27:15.552134shield sshd\[4788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.57  user=root
2020-08-20T14:27:17.621519shield sshd\[4788\]: Failed password for root from 103.210.21.57 port 54106 ssh2
2020-08-21 01:33:14
103.210.21.57 attackspam
(sshd) Failed SSH login from 103.210.21.57 (HK/Hong Kong/-): 5 in the last 3600 secs
2020-08-01 00:15:21
103.210.21.57 attackbots
$f2bV_matches
2020-07-24 20:46:43
103.210.21.57 attack
Invalid user testuser from 103.210.21.57 port 35656
2020-07-16 14:16:31
103.210.21.57 attack
Jul  5 19:30:32 rocket sshd[29421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.57
Jul  5 19:30:35 rocket sshd[29421]: Failed password for invalid user nfsnobody from 103.210.21.57 port 49336 ssh2
Jul  5 19:35:55 rocket sshd[29792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.57
...
2020-07-06 03:44:17
103.210.213.69 attackspam
namecheap spam
2019-10-03 13:47:07
103.210.21.165 attackspambots
Jul 29 13:34:35 herz-der-gamer sshd[2755]: Failed password for invalid user callofduty from 103.210.21.165 port 56026 ssh2
...
2019-07-29 19:52:29
103.210.21.165 attackbots
Jul 29 01:48:39 OPSO sshd\[8267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.165  user=root
Jul 29 01:48:41 OPSO sshd\[8267\]: Failed password for root from 103.210.21.165 port 47460 ssh2
Jul 29 01:53:34 OPSO sshd\[8824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.165  user=root
Jul 29 01:53:36 OPSO sshd\[8824\]: Failed password for root from 103.210.21.165 port 42712 ssh2
Jul 29 01:58:26 OPSO sshd\[9537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.165  user=root
2019-07-29 08:12:14
103.210.21.165 attackbots
Jul 26 20:30:54 MK-Soft-VM3 sshd\[30367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.165  user=root
Jul 26 20:30:56 MK-Soft-VM3 sshd\[30367\]: Failed password for root from 103.210.21.165 port 37934 ssh2
Jul 26 20:39:30 MK-Soft-VM3 sshd\[30758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.21.165  user=root
...
2019-07-27 05:07:07
103.210.216.242 attackbotsspam
Unauthorised access (Jul 26) SRC=103.210.216.242 LEN=40 PREC=0x20 TTL=241 ID=64413 TCP DPT=445 WINDOW=1024 SYN
2019-07-26 12:57:26
103.210.216.242 attackspam
Unauthorised access (Jul 10) SRC=103.210.216.242 LEN=40 PREC=0x20 TTL=242 ID=46196 TCP DPT=445 WINDOW=1024 SYN
2019-07-11 00:26:07
103.210.212.38 attackspam
Autoban   103.210.212.38 AUTH/CONNECT
2019-06-21 18:09:38
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.210.21.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48976
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.210.21.207.			IN	A

;; AUTHORITY SECTION:
.			527	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101300 1800 900 604800 86400

;; Query time: 191 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 14 02:31:00 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 207.21.210.103.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 207.21.210.103.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
134.122.79.129 attackbots
scans 2 times in preceeding hours on the ports (in chronological order) 32498 32498
2020-07-05 02:52:46
200.45.154.150 attack
failed_logins
2020-07-05 03:08:40
167.172.238.159 attackbots
Jul  4 20:36:55 cp sshd[12180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.238.159
Jul  4 20:36:55 cp sshd[12180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.238.159
2020-07-05 02:57:49
128.14.209.234 attackspam
GET /HNAP1 HTTP/1.1
2020-07-05 02:35:06
183.88.243.224 attack
failed_logins
2020-07-05 02:55:11
89.179.125.71 attackbots
Unauthorised connection attempt detected at AUO FR1 NODE2. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-07-05 03:09:14
190.104.40.231 attack
failed_logins
2020-07-05 03:02:20
128.14.209.181 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-07-05 02:40:58
124.156.241.88 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-07-05 03:10:42
110.136.88.108 attackspam
Jul  4 15:41:04 vmd48417 sshd[13495]: Failed password for root from 110.136.88.108 port 6036 ssh2
2020-07-05 02:44:53
116.85.40.181 attack
Jul  4 18:45:15 vps647732 sshd[4774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.85.40.181
Jul  4 18:45:17 vps647732 sshd[4774]: Failed password for invalid user nagios from 116.85.40.181 port 32858 ssh2
...
2020-07-05 02:39:35
124.156.55.222 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-07-05 02:46:54
54.38.65.215 attack
Brute-Force,SSH
2020-07-05 02:43:43
111.231.164.168 attackbots
SSH Attack
2020-07-05 03:05:42
180.71.47.198 attackbots
SSH Honeypot -> SSH Bruteforce / Login
2020-07-05 02:41:49

Recently Reported IPs

24.176.170.89 248.18.104.141 213.223.243.98 177.96.44.224
190.166.182.196 148.223.183.186 92.201.10.130 114.32.150.216
66.155.225.109 92.190.178.133 76.208.219.220 177.189.109.197
189.243.149.185 204.131.51.137 71.79.103.73 121.125.121.22
118.174.170.172 102.247.44.255 80.83.203.88 147.163.186.227