162.214.21.81 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Unified Layer

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Automatic report - Banned IP Access	2020-02-13 15:41:16
attackspam	Web App Attack	2020-02-11 02:13:23
attackbots	Automatic report - XMLRPC Attack	2019-12-28 00:50:22
attackspam	Automatic report - XMLRPC Attack	2019-11-28 13:01:28
attack	Authentication failure for eboney	2019-11-15 13:03:04
attackbotsspam	WordPress wp-login brute force :: 162.214.21.81 0.112 - [13/Nov/2019:07:48:28 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 2043 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"	2019-11-13 18:25:16
attack	WordPress wp-login brute force :: 162.214.21.81 0.152 - [13/Nov/2019:04:58:55 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 2043 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"	2019-11-13 13:25:47
attack	162.214.21.81 - - \[12/Nov/2019:07:27:27 +0100\] "POST /wp-login.php HTTP/1.0" 200 5707 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 162.214.21.81 - - \[12/Nov/2019:07:27:33 +0100\] "POST /wp-login.php HTTP/1.0" 200 5707 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 162.214.21.81 - - \[12/Nov/2019:07:27:34 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 802 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-11-12 18:03:12
attack	fail2ban honeypot	2019-11-09 05:24:38
attack	Automatic report - XMLRPC Attack	2019-11-02 07:27:23
attackspambots	Automatic report - Banned IP Access	2019-10-07 20:21:37
attack	Automatic report - XMLRPC Attack	2019-10-06 19:16:03
attackbots	Automatic report - XMLRPC Attack	2019-10-01 07:09:03
attackspam	Forged login request.	2019-08-29 03:07:46

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.214.21.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13869
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.214.21.81.			IN	A

;; AUTHORITY SECTION:
.			2613	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082801 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 29 03:07:41 CST 2019
;; MSG SIZE  rcvd: 117

Host info

81.21.214.162.in-addr.arpa domain name pointer 162-214-21-81.unifiedlayer.com.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
81.21.214.162.in-addr.arpa	name = 162-214-21-81.unifiedlayer.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.42.137	attackspam	Sep 4 20:19:29 OPSO sshd\[27430\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root Sep 4 20:19:31 OPSO sshd\[27430\]: Failed password for root from 222.186.42.137 port 63840 ssh2 Sep 4 20:19:34 OPSO sshd\[27430\]: Failed password for root from 222.186.42.137 port 63840 ssh2 Sep 4 20:19:36 OPSO sshd\[27430\]: Failed password for root from 222.186.42.137 port 63840 ssh2 Sep 4 20:19:39 OPSO sshd\[27432\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root	2020-09-05 02:28:35
105.163.154.230	attackbotsspam	Sep 3 18:45:02 mellenthin postfix/smtpd[20408]: NOQUEUE: reject: RCPT from unknown[105.163.154.230]: 554 5.7.1 Service unavailable; Client host [105.163.154.230] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/105.163.154.230; from= to= proto=ESMTP helo=<[105.163.154.230]>	2020-09-05 02:36:06
40.79.25.254	attack	$f2bV_matches	2020-09-05 02:57:41
177.136.39.254	attackspambots	Fail2Ban Ban Triggered (2)	2020-09-05 02:37:02
201.218.81.117	attackspam	REQUESTED PAGE: /wp-login.php	2020-09-05 02:42:30
192.241.175.48	attackspam	Sep 4 18:53:02 onepixel sshd[1757758]: Invalid user lincoln from 192.241.175.48 port 37962 Sep 4 18:53:02 onepixel sshd[1757758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.175.48 Sep 4 18:53:02 onepixel sshd[1757758]: Invalid user lincoln from 192.241.175.48 port 37962 Sep 4 18:53:04 onepixel sshd[1757758]: Failed password for invalid user lincoln from 192.241.175.48 port 37962 ssh2 Sep 4 18:55:48 onepixel sshd[1758196]: Invalid user test from 192.241.175.48 port 45744	2020-09-05 03:05:51
218.56.158.75	attack	TCP (SYN) 218.56.158.75:42092 -> port 1433, len 44	2020-09-05 03:02:49
179.163.236.96	attack	(sshd) Failed SSH login from 179.163.236.96 (BR/Brazil/179-163-236-96.user.vivozap.com.br): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 3 12:43:41 internal2 sshd[30235]: Invalid user ubnt from 179.163.236.96 port 48949 Sep 3 12:44:35 internal2 sshd[30890]: Invalid user admin from 179.163.236.96 port 48976 Sep 3 12:44:37 internal2 sshd[30910]: Invalid user admin from 179.163.236.96 port 48977	2020-09-05 02:56:14
72.19.12.144	attackbots	72.19.12.144 has been banned for [spam] ...	2020-09-05 02:46:32
94.55.208.121	attack	Unauthorized connection attempt from IP address 94.55.208.121 on Port 445(SMB)	2020-09-05 02:29:47
181.31.129.12	attack	Sep 4 05:42:07 pixelmemory sshd[3636532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.31.129.12 Sep 4 05:42:07 pixelmemory sshd[3636532]: Invalid user r from 181.31.129.12 port 42913 Sep 4 05:42:09 pixelmemory sshd[3636532]: Failed password for invalid user r from 181.31.129.12 port 42913 ssh2 Sep 4 05:44:47 pixelmemory sshd[3636758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.31.129.12 user=root Sep 4 05:44:49 pixelmemory sshd[3636758]: Failed password for root from 181.31.129.12 port 24033 ssh2 ...	2020-09-05 02:43:56
115.192.150.191	attackbots	Honeypot attack, port: 5555, PTR: PTR record not found	2020-09-05 02:38:45
118.163.4.200	attackspam	Scanning an empty webserver with deny all robots.txt	2020-09-05 02:58:35
35.232.241.208	attackbotsspam	2020-09-04T18:31:14.824465abusebot-4.cloudsearch.cf sshd[12423]: Invalid user drcom from 35.232.241.208 port 37842 2020-09-04T18:31:14.831832abusebot-4.cloudsearch.cf sshd[12423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.241.232.35.bc.googleusercontent.com 2020-09-04T18:31:14.824465abusebot-4.cloudsearch.cf sshd[12423]: Invalid user drcom from 35.232.241.208 port 37842 2020-09-04T18:31:17.171073abusebot-4.cloudsearch.cf sshd[12423]: Failed password for invalid user drcom from 35.232.241.208 port 37842 ssh2 2020-09-04T18:34:32.703574abusebot-4.cloudsearch.cf sshd[12426]: Invalid user yjlee from 35.232.241.208 port 43982 2020-09-04T18:34:32.712468abusebot-4.cloudsearch.cf sshd[12426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.241.232.35.bc.googleusercontent.com 2020-09-04T18:34:32.703574abusebot-4.cloudsearch.cf sshd[12426]: Invalid user yjlee from 35.232.241.208 port 43982 2020-09-04T18: ...	2020-09-05 02:37:22
5.253.26.139	attackspam	Automatic report generated by Wazuh	2020-09-05 02:45:11

Recently Reported IPs

45.237.2.59	18.139.24.235	72.159.211.136	178.128.87.28
179.185.114.203	157.245.107.180	203.77.215.250	54.182.234.44
206.189.157.60	103.93.10.49	59.41.64.249	201.204.159.89
223.149.228.180	202.222.36.3	105.235.130.214	197.229.5.143
176.241.94.228	104.248.145.110	117.90.31.241	170.72.87.23