61.144.21.67 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Guangdong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Sep 21 18:12:45 plex-server sshd[3558443]: Failed password for root from 61.144.21.67 port 40494 ssh2 Sep 21 18:14:28 plex-server sshd[3559156]: Invalid user teste from 61.144.21.67 port 35304 Sep 21 18:14:28 plex-server sshd[3559156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.144.21.67 Sep 21 18:14:28 plex-server sshd[3559156]: Invalid user teste from 61.144.21.67 port 35304 Sep 21 18:14:30 plex-server sshd[3559156]: Failed password for invalid user teste from 61.144.21.67 port 35304 ssh2 ...	2020-09-22 23:23:49
attackbotsspam	Sep 21 18:12:45 plex-server sshd[3558443]: Failed password for root from 61.144.21.67 port 40494 ssh2 Sep 21 18:14:28 plex-server sshd[3559156]: Invalid user teste from 61.144.21.67 port 35304 Sep 21 18:14:28 plex-server sshd[3559156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.144.21.67 Sep 21 18:14:28 plex-server sshd[3559156]: Invalid user teste from 61.144.21.67 port 35304 Sep 21 18:14:30 plex-server sshd[3559156]: Failed password for invalid user teste from 61.144.21.67 port 35304 ssh2 ...	2020-09-22 07:30:53

Type

Details

Datetime

attack

Sep 21 18:12:45 plex-server sshd[3558443]: Failed password for root from 61.144.21.67 port 40494 ssh2
Sep 21 18:14:28 plex-server sshd[3559156]: Invalid user teste from 61.144.21.67 port 35304
Sep 21 18:14:28 plex-server sshd[3559156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.144.21.67 
Sep 21 18:14:28 plex-server sshd[3559156]: Invalid user teste from 61.144.21.67 port 35304
Sep 21 18:14:30 plex-server sshd[3559156]: Failed password for invalid user teste from 61.144.21.67 port 35304 ssh2
...

2020-09-22 23:23:49

attackbotsspam

Sep 21 18:12:45 plex-server sshd[3558443]: Failed password for root from 61.144.21.67 port 40494 ssh2
Sep 21 18:14:28 plex-server sshd[3559156]: Invalid user teste from 61.144.21.67 port 35304
Sep 21 18:14:28 plex-server sshd[3559156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.144.21.67 
Sep 21 18:14:28 plex-server sshd[3559156]: Invalid user teste from 61.144.21.67 port 35304
Sep 21 18:14:30 plex-server sshd[3559156]: Failed password for invalid user teste from 61.144.21.67 port 35304 ssh2
...

2020-09-22 07:30:53

Comments on same subnet:

IP	Type	Details	Datetime
61.144.211.235	attackspambots	port scan and connect, tcp 1433 (ms-sql-s)	2020-08-27 15:58:53
61.144.21.228	attackbotsspam	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2020-07-05 22:00:17
61.144.211.235	attackbots	1433/tcp 1433/tcp 1433/tcp... [2019-10-08/11-01]8pkt,1pt.(tcp)	2019-11-01 14:11:52
61.144.211.235	attackbotsspam	1433/tcp 1433/tcp 1433/tcp... [2019-10-08/22]6pkt,1pt.(tcp)	2019-10-23 07:22:03

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 61.144.21.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13324
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;61.144.21.67.			IN	A

;; AUTHORITY SECTION:
.			394	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092101 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 22 07:30:49 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 67.21.144.61.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 67.21.144.61.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.13.139.111	attackspam	Apr 8 09:29:06 lukav-desktop sshd\[15010\]: Invalid user test from 106.13.139.111 Apr 8 09:29:06 lukav-desktop sshd\[15010\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.111 Apr 8 09:29:08 lukav-desktop sshd\[15010\]: Failed password for invalid user test from 106.13.139.111 port 44100 ssh2 Apr 8 09:32:48 lukav-desktop sshd\[15193\]: Invalid user developer from 106.13.139.111 Apr 8 09:32:48 lukav-desktop sshd\[15193\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.111	2020-04-08 15:32:18
106.13.19.152	attackbotsspam	$f2bV_matches	2020-04-08 15:26:51
222.186.30.218	attack	Apr 8 03:11:00 NPSTNNYC01T sshd[26140]: Failed password for root from 222.186.30.218 port 37261 ssh2 Apr 8 03:14:35 NPSTNNYC01T sshd[26245]: Failed password for root from 222.186.30.218 port 19407 ssh2 Apr 8 03:14:38 NPSTNNYC01T sshd[26245]: Failed password for root from 222.186.30.218 port 19407 ssh2 ...	2020-04-08 15:15:28
211.252.87.97	attackbotsspam	Apr 8 07:25:00 srv206 sshd[10827]: Invalid user uftp from 211.252.87.97 ...	2020-04-08 15:41:44
210.112.94.161	attack	FTP Brute Force	2020-04-08 15:31:33
119.235.251.146	attackbots	(mod_security) mod_security (id:5000135) triggered by 119.235.251.146 (ID/Indonesia/server1.unmuha.ac.id): 10 in the last 3600 secs	2020-04-08 15:45:12
125.124.254.31	attackspambots	Apr 8 07:29:05 hell sshd[15359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.254.31 Apr 8 07:29:07 hell sshd[15359]: Failed password for invalid user fax from 125.124.254.31 port 55488 ssh2 ...	2020-04-08 15:37:10
180.168.201.126	attack	$f2bV_matches	2020-04-08 15:22:12
45.224.105.41	attackbots	Dovecot Invalid User Login Attempt.	2020-04-08 15:35:24
213.163.116.109	attackbotsspam	Apr 8 03:56:57 hermescis postfix/smtpd[28637]: NOQUEUE: reject: RCPT from unknown[213.163.116.109]: 550 5.1.1 : Recipient address rejected:* from= to= proto=ESMTP helo=<[213.163.116.109]>	2020-04-08 15:22:41
110.166.87.212	attack	k+ssh-bruteforce	2020-04-08 15:21:01
5.83.162.32	attackbotsspam	Attempts to probe for or exploit a Drupal site on url: /wp-includes/js/jquery/jquery.js. Reported by the module https://www.drupal.org/project/abuseipdb.	2020-04-08 15:31:01
103.56.79.2	attackbots	B: Abusive ssh attack	2020-04-08 15:16:20
66.206.38.56	attack	Apr 8 11:04:46 scivo sshd[20340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66-206-38-56.static.as40244.net user=r.r Apr 8 11:04:48 scivo sshd[20340]: Failed password for r.r from 66.206.38.56 port 38051 ssh2 Apr 8 11:04:48 scivo sshd[20340]: Received disconnect from 66.206.38.56: 11: Bye Bye [preauth] Apr 8 11:04:50 scivo sshd[20342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66-206-38-56.static.as40244.net user=r.r Apr 8 11:04:52 scivo sshd[20342]: Failed password for r.r from 66.206.38.56 port 44255 ssh2 Apr 8 11:04:52 scivo sshd[20342]: Received disconnect from 66.206.38.56: 11: Bye Bye [preauth] Apr 8 11:04:55 scivo sshd[20344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66-206-38-56.static.as40244.net user=r.r Apr 8 11:04:57 scivo sshd[20344]: Failed password for r.r from 66.206.38.56 port 51093 ssh2 Apr 8 11:04:58 sc........ -------------------------------	2020-04-08 15:05:06
64.227.13.104	attackbotsspam	Apr 8 09:06:58 OPSO sshd\[8532\]: Invalid user ubuntu from 64.227.13.104 port 34300 Apr 8 09:06:58 OPSO sshd\[8532\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.13.104 Apr 8 09:07:00 OPSO sshd\[8532\]: Failed password for invalid user ubuntu from 64.227.13.104 port 34300 ssh2 Apr 8 09:12:11 OPSO sshd\[9966\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.13.104 user=admin Apr 8 09:12:13 OPSO sshd\[9966\]: Failed password for admin from 64.227.13.104 port 45390 ssh2	2020-04-08 15:23:37

Recently Reported IPs

86.19.139.132	90.142.49.49	45.169.114.1	72.14.149.32
137.74.98.208	20.26.37.39	59.24.95.246	118.43.8.224
24.212.13.82	176.241.131.66	117.241.177.9	41.227.30.89
218.191.248.126	176.105.17.36	175.119.66.39	186.58.131.103
94.102.57.153	45.188.148.0	14.167.186.37	125.163.187.92