52.21.19.105 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
52.21.194.226	attack	52.21.194.226 - - \[06/Mar/2020:23:04:35 +0100\] "POST /wp-login.php HTTP/1.0" 200 6997 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 52.21.194.226 - - \[06/Mar/2020:23:04:37 +0100\] "POST /wp-login.php HTTP/1.0" 200 6864 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 52.21.194.226 - - \[06/Mar/2020:23:04:38 +0100\] "POST /wp-login.php HTTP/1.0" 200 6860 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-03-07 07:39:14

Type

Details

Datetime

52.21.194.226

attack

52.21.194.226 - - \[06/Mar/2020:23:04:35 +0100\] "POST /wp-login.php HTTP/1.0" 200 6997 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
52.21.194.226 - - \[06/Mar/2020:23:04:37 +0100\] "POST /wp-login.php HTTP/1.0" 200 6864 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
52.21.194.226 - - \[06/Mar/2020:23:04:38 +0100\] "POST /wp-login.php HTTP/1.0" 200 6860 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

2020-03-07 07:39:14

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.21.19.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63290
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;52.21.19.105.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 10:01:43 CST 2025
;; MSG SIZE  rcvd: 105

Host info

105.19.21.52.in-addr.arpa domain name pointer ec2-52-21-19-105.compute-1.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
105.19.21.52.in-addr.arpa	name = ec2-52-21-19-105.compute-1.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
95.110.154.101	attackbots	2020-04-03T03:51:07.721701shield sshd\[9158\]: Invalid user hntt from 95.110.154.101 port 52266 2020-04-03T03:51:07.726036shield sshd\[9158\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.110.154.101 2020-04-03T03:51:09.746318shield sshd\[9158\]: Failed password for invalid user hntt from 95.110.154.101 port 52266 ssh2 2020-04-03T03:56:26.411942shield sshd\[10786\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.110.154.101 user=root 2020-04-03T03:56:28.893620shield sshd\[10786\]: Failed password for root from 95.110.154.101 port 34668 ssh2	2020-04-03 12:34:23
92.63.194.25	attack	Brute-force attempt banned	2020-04-03 12:17:03
185.200.37.109	attackbots	Chat Spam	2020-04-03 12:49:35
222.186.175.140	attackspambots	Apr 3 06:30:51 silence02 sshd[22215]: Failed password for root from 222.186.175.140 port 44978 ssh2 Apr 3 06:30:56 silence02 sshd[22215]: Failed password for root from 222.186.175.140 port 44978 ssh2 Apr 3 06:30:59 silence02 sshd[22215]: Failed password for root from 222.186.175.140 port 44978 ssh2 Apr 3 06:31:02 silence02 sshd[22215]: Failed password for root from 222.186.175.140 port 44978 ssh2	2020-04-03 12:33:19
106.12.34.32	attackspambots	Apr 3 06:53:09 lukav-desktop sshd\[7662\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.34.32 user=root Apr 3 06:53:10 lukav-desktop sshd\[7662\]: Failed password for root from 106.12.34.32 port 40630 ssh2 Apr 3 06:56:49 lukav-desktop sshd\[7878\]: Invalid user chfjiao from 106.12.34.32 Apr 3 06:56:49 lukav-desktop sshd\[7878\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.34.32 Apr 3 06:56:51 lukav-desktop sshd\[7878\]: Failed password for invalid user chfjiao from 106.12.34.32 port 58136 ssh2	2020-04-03 12:09:17
104.206.128.42	attackbots	Unauthorized connection attempt detected from IP address 104.206.128.42 to port 102	2020-04-03 12:55:55
192.3.177.219	attackspam	$f2bV_matches	2020-04-03 12:25:12
112.117.206.172	attack	CN China 172.206.117.112.broad.km.yn.dynamic.163data.com.cn Failures: 20 ftpd	2020-04-03 12:20:48
114.67.85.25	attackbots	Apr 3 05:53:02 sso sshd[13070]: Failed password for root from 114.67.85.25 port 34810 ssh2 ...	2020-04-03 12:07:54
31.135.16.21	attack	Apr 3 05:36:33 websrv1.aknwsrv.net webmin[99670]: Non-existent login as webmin from 31.135.16.21 Apr 3 05:36:34 websrv1.aknwsrv.net webmin[99673]: Non-existent login as webmin from 31.135.16.21 Apr 3 05:36:37 websrv1.aknwsrv.net webmin[99676]: Non-existent login as webmin from 31.135.16.21 Apr 3 05:36:40 websrv1.aknwsrv.net webmin[99679]: Non-existent login as webmin from 31.135.16.21 Apr 3 05:36:44 websrv1.aknwsrv.net webmin[99682]: Non-existent login as webmin from 31.135.16.21	2020-04-03 12:44:37
46.146.213.166	attack	Apr 3 05:52:29 vmd26974 sshd[21920]: Failed password for root from 46.146.213.166 port 58846 ssh2 ...	2020-04-03 12:12:52
185.22.142.132	attackbots	Apr 3 05:51:11 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\<1gFSyVqib+u5Fo6E\> Apr 3 05:51:13 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\ Apr 3 05:51:36 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\ Apr 3 05:56:46 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\ Apr 3 05:56:48 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-04-03 12:14:41
222.186.173.226	attackspambots	Apr 3 06:44:49 santamaria sshd\[28895\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root Apr 3 06:44:51 santamaria sshd\[28895\]: Failed password for root from 222.186.173.226 port 21670 ssh2 Apr 3 06:45:04 santamaria sshd\[28895\]: Failed password for root from 222.186.173.226 port 21670 ssh2 ...	2020-04-03 12:53:16
195.231.3.208	attack	Apr 3 05:34:59 web01.agentur-b-2.de postfix/smtpd[482886]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 3 05:34:59 web01.agentur-b-2.de postfix/smtpd[482886]: lost connection after AUTH from unknown[195.231.3.208] Apr 3 05:43:38 web01.agentur-b-2.de postfix/smtpd[485967]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 3 05:43:38 web01.agentur-b-2.de postfix/smtpd[486327]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 3 05:43:38 web01.agentur-b-2.de postfix/smtpd[486330]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 3 05:43:38 web01.agentur-b-2.de postfix/smtpd[486328]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-04-03 12:38:15
106.12.141.10	attackspam	bruteforce detected	2020-04-03 12:07:08

Recently Reported IPs

216.127.251.175	137.223.14.33	162.205.41.5	64.227.193.53
91.206.50.22	134.193.230.219	240.246.120.155	191.174.73.58
226.172.28.79	42.77.63.0	215.113.206.107	160.214.60.204
116.77.96.57	117.50.42.209	14.40.245.237	59.134.90.137
165.5.90.239	83.96.29.7	78.114.58.83	166.98.24.82