Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Taiwan (Province of China)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 61.57.81.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28785
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;61.57.81.70.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012500 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 19:57:50 CST 2025
;; MSG SIZE  rcvd: 104
Host info
70.81.57.61.in-addr.arpa domain name pointer 61-57-81-70.nty.dynamic.tbcnet.net.tw.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
70.81.57.61.in-addr.arpa	name = 61-57-81-70.nty.dynamic.tbcnet.net.tw.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
89.102.117.71 attack
xmlrpc attack
2020-08-03 13:24:40
132.232.4.140 attackbots
Aug 3 05:54:57 *hidden* sshd[7659]: Failed password for *hidden* from 132.232.4.140 port 33838 ssh2 Aug 3 05:56:30 *hidden* sshd[7700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.4.140 user=root Aug 3 05:56:32 *hidden* sshd[7700]: Failed password for *hidden* from 132.232.4.140 port 51226 ssh2
2020-08-03 13:20:12
89.22.180.208 attackspam
Aug  3 04:37:24 rush sshd[22951]: Failed password for root from 89.22.180.208 port 57184 ssh2
Aug  3 04:41:37 rush sshd[23087]: Failed password for root from 89.22.180.208 port 39066 ssh2
...
2020-08-03 12:53:44
106.13.179.45 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-08-03 13:11:50
41.207.184.182 attackbots
2020-08-03T04:31:28.532570shield sshd\[1449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.207.184.182  user=root
2020-08-03T04:31:30.836592shield sshd\[1449\]: Failed password for root from 41.207.184.182 port 56336 ssh2
2020-08-03T04:35:54.124609shield sshd\[2127\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.207.184.182  user=root
2020-08-03T04:35:56.278153shield sshd\[2127\]: Failed password for root from 41.207.184.182 port 35244 ssh2
2020-08-03T04:40:15.716107shield sshd\[2748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.207.184.182  user=root
2020-08-03 12:40:51
186.85.159.135 attackbots
Aug  2 18:38:51 auw2 sshd\[20111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.85.159.135  user=root
Aug  2 18:38:53 auw2 sshd\[20111\]: Failed password for root from 186.85.159.135 port 10465 ssh2
Aug  2 18:41:12 auw2 sshd\[20385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.85.159.135  user=root
Aug  2 18:41:14 auw2 sshd\[20385\]: Failed password for root from 186.85.159.135 port 39937 ssh2
Aug  2 18:43:32 auw2 sshd\[20577\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.85.159.135  user=root
2020-08-03 12:51:47
42.159.80.91 attackbotsspam
Aug  3 06:56:50 jane sshd[23688]: Failed password for root from 42.159.80.91 port 1344 ssh2
...
2020-08-03 13:25:23
185.220.102.8 attackbots
srv02 SSH BruteForce Attacks 22 ..
2020-08-03 13:13:08
177.159.99.89 attackspambots
(imapd) Failed IMAP login from 177.159.99.89 (BR/Brazil/ecosson.static.gvt.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug  3 08:27:06 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=177.159.99.89, lip=5.63.12.44, TLS, session=
2020-08-03 12:47:49
52.166.4.83 attack
52.166.4.83 - - [03/Aug/2020:04:56:30 +0100] "POST /wp-login.php HTTP/1.1" 200 1960 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
52.166.4.83 - - [03/Aug/2020:04:56:32 +0100] "POST /wp-login.php HTTP/1.1" 200 1937 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
52.166.4.83 - - [03/Aug/2020:04:56:32 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-03 13:21:36
139.99.133.226 attack
Lines containing failures of 139.99.133.226
Aug  3 03:20:27 shared02 sshd[22608]: Did not receive identification string from 139.99.133.226 port 53490
Aug  3 03:20:41 shared02 sshd[22621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.133.226  user=r.r
Aug  3 03:20:43 shared02 sshd[22621]: Failed password for r.r from 139.99.133.226 port 41376 ssh2
Aug  3 03:20:44 shared02 sshd[22621]: Received disconnect from 139.99.133.226 port 41376:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 03:20:44 shared02 sshd[22621]: Disconnected from authenticating user r.r 139.99.133.226 port 41376 [preauth]
Aug  3 03:21:04 shared02 sshd[22807]: Invalid user test from 139.99.133.226 port 51472
Aug  3 03:21:04 shared02 sshd[22807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.133.226
Aug  3 03:21:06 shared02 sshd[22807]: Failed password for invalid user test from 139.99.133.226 por........
------------------------------
2020-08-03 13:08:22
212.230.159.92 attackspam
Aug  3 03:42:17 UTC__SANYALnet-Labs__cac14 sshd[28189]: Connection from 212.230.159.92 port 59702 on 64.137.176.112 port 22
Aug  3 03:42:18 UTC__SANYALnet-Labs__cac14 sshd[28189]: User r.r from 212.230.159.92 not allowed because not listed in AllowUsers
Aug  3 03:42:18 UTC__SANYALnet-Labs__cac14 sshd[28189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.230.159.92  user=r.r
Aug  3 03:42:20 UTC__SANYALnet-Labs__cac14 sshd[28189]: Failed password for invalid user r.r from 212.230.159.92 port 59702 ssh2
Aug  3 03:42:20 UTC__SANYALnet-Labs__cac14 sshd[28189]: Received disconnect from 212.230.159.92: 11: Bye Bye [preauth]
Aug  3 03:51:10 UTC__SANYALnet-Labs__cac14 sshd[28422]: Connection from 212.230.159.92 port 39968 on 64.137.176.112 port 22
Aug  3 03:51:11 UTC__SANYALnet-Labs__cac14 sshd[28422]: User r.r from 212.230.159.92 not allowed because not listed in AllowUsers
Aug  3 03:51:11 UTC__SANYALnet-Labs__cac14 sshd[28422]: pam........
-------------------------------
2020-08-03 13:07:35
106.13.188.35 attackspambots
Aug  3 04:39:24 rush sshd[22990]: Failed password for root from 106.13.188.35 port 35594 ssh2
Aug  3 04:41:55 rush sshd[23100]: Failed password for root from 106.13.188.35 port 60398 ssh2
...
2020-08-03 13:09:18
187.204.3.250 attack
Aug  3 06:27:24 piServer sshd[24419]: Failed password for root from 187.204.3.250 port 48478 ssh2
Aug  3 06:30:25 piServer sshd[24692]: Failed password for root from 187.204.3.250 port 41242 ssh2
...
2020-08-03 12:44:21
112.85.42.229 attackbotsspam
Aug  3 06:52:51 home sshd[1736500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.229  user=root
Aug  3 06:52:53 home sshd[1736500]: Failed password for root from 112.85.42.229 port 13679 ssh2
Aug  3 06:52:51 home sshd[1736500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.229  user=root
Aug  3 06:52:53 home sshd[1736500]: Failed password for root from 112.85.42.229 port 13679 ssh2
Aug  3 06:52:58 home sshd[1736500]: Failed password for root from 112.85.42.229 port 13679 ssh2
...
2020-08-03 12:53:13

Recently Reported IPs

67.148.88.241 193.156.250.200 142.166.143.75 22.129.155.190
4.241.168.2 76.139.160.207 210.227.246.165 228.236.142.70
143.87.106.127 209.224.115.242 227.74.251.52 64.63.178.145
204.24.85.199 138.229.95.56 21.75.199.253 142.154.181.144
3.2.83.67 123.141.80.100 50.68.161.114 100.222.219.231