144.21.67.43 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United Kingdom of Great Britain and Northern Ireland

Internet Service Provider: Oracle Svenska AB

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Unauthorized SSH login attempts	2020-07-04 11:00:00
attackbots	May 7 10:37:08 debian sshd[9969]: Unable to negotiate with 144.21.67.43 port 53513: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] May 7 13:18:17 debian sshd[17540]: Unable to negotiate with 144.21.67.43 port 53513: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ...	2020-05-08 05:34:05
attackbots	Trying ports that it shouldn't be.	2020-05-07 16:36:36

Type

Details

Datetime

attackbots

Unauthorized SSH login attempts

2020-07-04 11:00:00

attackbots

May  7 10:37:08 debian sshd[9969]: Unable to negotiate with 144.21.67.43 port 53513: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
May  7 13:18:17 debian sshd[17540]: Unable to negotiate with 144.21.67.43 port 53513: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...

2020-05-08 05:34:05

attackbots

Trying ports that it shouldn't be.

2020-05-07 16:36:36

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 144.21.67.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52673
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;144.21.67.43.			IN	A

;; AUTHORITY SECTION:
.			246	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050700 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 07 16:36:31 CST 2020
;; MSG SIZE  rcvd: 116

Host info

43.67.21.144.in-addr.arpa domain name pointer oc-144-21-67-43.compute.oraclecloud.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
43.67.21.144.in-addr.arpa	name = oc-144-21-67-43.compute.oraclecloud.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.89.204.172	attackspambots	GET //vendor/phpunit/phpunit/phpunit.xsd	2020-06-04 05:16:51
163.172.24.40	attackspambots	Jun 03 15:08:08 askasleikir sshd[101126]: Failed password for root from 163.172.24.40 port 35137 ssh2	2020-06-04 05:31:25
59.127.196.121	attack	Honeypot attack, port: 81, PTR: 59-127-196-121.HINET-IP.hinet.net.	2020-06-04 05:32:12
104.41.151.254	attackspam	Forbidden directory scan :: 2020/06/03 20:15:15 [error] 1030#1030: *999136 access forbidden by rule, client: 104.41.151.254, server: [censored_1], request: "GET /.env HTTP/1.1", host: "[censored_1]"	2020-06-04 05:05:19
42.200.80.42	attackbots	Jun 3 23:22:53 server sshd[30544]: Failed password for root from 42.200.80.42 port 46440 ssh2 Jun 3 23:26:42 server sshd[1960]: Failed password for root from 42.200.80.42 port 45768 ssh2 Jun 3 23:30:29 server sshd[5833]: Failed password for root from 42.200.80.42 port 45076 ssh2	2020-06-04 05:32:25
191.162.253.4	attackspambots	2020-06-03T14:14:59.366913linuxbox-skyline sshd[117478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.162.253.4 user=root 2020-06-03T14:15:01.584650linuxbox-skyline sshd[117478]: Failed password for root from 191.162.253.4 port 50593 ssh2 ...	2020-06-04 05:30:30
196.157.30.207	attackspambots	Unauthorized connection attempt from IP address 196.157.30.207 on Port 445(SMB)	2020-06-04 05:13:12
54.37.16.197	attackspambots	WordPress brute force	2020-06-04 05:12:06
185.240.65.251	attack	Jun 3 15:23:21 server1 sshd\[2987\]: Invalid user operator from 185.240.65.251 Jun 3 15:23:21 server1 sshd\[2987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.240.65.251 Jun 3 15:23:22 server1 sshd\[2987\]: Failed password for invalid user operator from 185.240.65.251 port 6664 ssh2 Jun 3 15:32:30 server1 sshd\[5857\]: Invalid user oracle from 185.240.65.251 Jun 3 15:32:30 server1 sshd\[5857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.240.65.251 ...	2020-06-04 05:34:02
200.24.198.190	attackbots	Unauthorized connection attempt from IP address 200.24.198.190 on Port 445(SMB)	2020-06-04 05:04:03
35.200.206.240	attackbotsspam	Jun 3 23:07:13 eventyay sshd[30063]: Failed password for root from 35.200.206.240 port 46082 ssh2 Jun 3 23:10:31 eventyay sshd[30135]: Failed password for root from 35.200.206.240 port 35246 ssh2 ...	2020-06-04 05:33:09
47.56.154.54	attack	WordPress brute force	2020-06-04 05:12:40
45.235.46.138	attackbots	Unauthorized connection attempt from IP address 45.235.46.138 on Port 445(SMB)	2020-06-04 05:05:50
80.250.8.204	attackspambots	Jun 3 14:14:57 Host-KLAX-C postfix/smtpd[24809]: NOQUEUE: reject: RCPT from unknown[80.250.8.204]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=<[80.250.8.204]> ...	2020-06-04 05:38:11
95.43.208.98	attackspambots	WordPress brute force	2020-06-04 05:08:25

Recently Reported IPs

106.152.56.239	18.213.144.138	90.56.110.210	232.49.152.234
54.109.165.129	202.237.103.161	157.230.127.63	6.149.126.136
232.249.121.52	70.158.196.179	183.117.108.40	65.49.20.73
175.8.179.108	5.202.45.205	218.2.220.254	57.20.54.113
62.30.195.169	66.27.57.170	117.70.156.50	193.176.241.34