3.21.245.218 - IPInfo

Basic Info

City: Columbus

Region: Ohio

Country: United States

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Invalid user resolve from 3.21.245.218 port 36102	2020-06-17 04:14:15
attack	2020-06-13T20:35:20.673638randservbullet-proofcloud-66.localdomain sshd[10923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-21-245-218.us-east-2.compute.amazonaws.com user=root 2020-06-13T20:35:22.333437randservbullet-proofcloud-66.localdomain sshd[10923]: Failed password for root from 3.21.245.218 port 38568 ssh2 2020-06-13T21:07:31.312053randservbullet-proofcloud-66.localdomain sshd[11039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-21-245-218.us-east-2.compute.amazonaws.com user=root 2020-06-13T21:07:33.733753randservbullet-proofcloud-66.localdomain sshd[11039]: Failed password for root from 3.21.245.218 port 48110 ssh2 ...	2020-06-14 07:06:33

Type

Details

Datetime

attackbots

Invalid user resolve from 3.21.245.218 port 36102

2020-06-17 04:14:15

attack

2020-06-13T20:35:20.673638randservbullet-proofcloud-66.localdomain sshd[10923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-21-245-218.us-east-2.compute.amazonaws.com  user=root
2020-06-13T20:35:22.333437randservbullet-proofcloud-66.localdomain sshd[10923]: Failed password for root from 3.21.245.218 port 38568 ssh2
2020-06-13T21:07:31.312053randservbullet-proofcloud-66.localdomain sshd[11039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-21-245-218.us-east-2.compute.amazonaws.com  user=root
2020-06-13T21:07:33.733753randservbullet-proofcloud-66.localdomain sshd[11039]: Failed password for root from 3.21.245.218 port 48110 ssh2
...

2020-06-14 07:06:33

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.21.245.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23684
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;3.21.245.218.			IN	A

;; AUTHORITY SECTION:
.			361	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061301 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 14 07:06:27 CST 2020
;; MSG SIZE  rcvd: 116

Host info

218.245.21.3.in-addr.arpa domain name pointer ec2-3-21-245-218.us-east-2.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
218.245.21.3.in-addr.arpa	name = ec2-3-21-245-218.us-east-2.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
87.214.234.168	attackbots	suspicious action Tue, 25 Feb 2020 13:36:34 -0300	2020-02-26 03:55:08
5.249.155.183	attackbotsspam	suspicious action Tue, 25 Feb 2020 13:36:53 -0300	2020-02-26 03:36:16
192.3.143.133	attackbotsspam	3,91-04/03 [bc03/m127] PostRequest-Spammer scoring: Durban01	2020-02-26 03:58:03
178.137.91.185	attackbots	Honeypot attack, port: 5555, PTR: 178-137-91-185.broadband.kyivstar.net.	2020-02-26 03:39:49
196.52.43.119	attackbotsspam	port scan and connect, tcp 111 (rpcbind)	2020-02-26 04:08:32
217.76.42.51	attack	2323/tcp [2020-02-25]1pkt	2020-02-26 03:50:55
110.39.129.42	attack	1582648609 - 02/25/2020 17:36:49 Host: 110.39.129.42/110.39.129.42 Port: 445 TCP Blocked	2020-02-26 03:41:02
222.186.52.78	attack	Feb 25 20:40:51 * sshd[13228]: Failed password for root from 222.186.52.78 port 36865 ssh2	2020-02-26 04:15:04
103.9.227.170	attackbots	Honeypot attack, port: 445, PTR: sijoli-170-227-9.jatengprov.go.id.	2020-02-26 03:45:33
123.182.255.52	attackspambots	suspicious action Tue, 25 Feb 2020 13:36:41 -0300	2020-02-26 03:47:15
31.28.118.222	attack	9530/tcp [2020-02-25]1pkt	2020-02-26 03:59:06
82.64.129.178	attack	Feb 25 17:36:18 163-172-32-151 sshd[5944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-64-129-178.subs.proxad.net user=daemon Feb 25 17:36:20 163-172-32-151 sshd[5944]: Failed password for daemon from 82.64.129.178 port 32908 ssh2 ...	2020-02-26 04:13:34
185.190.16.20	attack	185.190.16.20 Date: Mon, 24 Feb 2020 17:29:43 -0000 From: "Retired in America" Subject: Things That Affect Your Social Security Income Reply-To: " Retired in America " retiredinamericanews.com resolves to 185.190.16.18	2020-02-26 03:42:42
114.67.95.121	attackbotsspam	Feb 25 20:50:53 dedicated sshd[28554]: Invalid user bkpuser from 114.67.95.121 port 41162	2020-02-26 04:03:52
118.37.162.126	attackbots	23/tcp [2020-02-25]1pkt	2020-02-26 03:57:14

Recently Reported IPs

138.48.252.243	180.29.88.140	222.210.109.240	187.39.180.143
12.238.95.122	52.52.212.202	201.35.74.211	173.185.29.232
191.164.29.231	59.42.223.234	122.15.233.3	83.33.183.58
113.245.14.16	36.219.64.72	105.159.57.118	70.241.238.58
67.84.50.14	203.47.142.164	194.25.79.248	156.197.202.122