Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
61.57.140.21 has been reported 326
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
This IP address has been reported a total of
326
times from
147 distinct
sources.
61.57.140.21 was first reported on
, and the most recent report was
.
This IP address carried out 64 SSH credential attack (attempts) between 21-04-2023 to 15-05-2023. Fo ...
show moreThis IP address carried out 64 SSH credential attack (attempts) between 21-04-2023 to 15-05-2023. For more information or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
61.57.140.21 (TW/Taiwan/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more61.57.140.21 (TW/Taiwan/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 14 19:15:58 17732 sshd[4499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.194.172 user=root
May 14 19:41:53 17732 sshd[5794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.57.140.21 user=root
May 14 19:41:55 17732 sshd[5794]: Failed password for root from 61.57.140.21 port 56830 ssh2
May 14 19:14:49 17732 sshd[4444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.194.172 user=root
May 14 19:14:51 17732 sshd[4444]: Failed password for root from 161.35.194.172 port 53764 ssh2
IP Addresses Blocked:
161.35.194.172 (DE/Germany/-)
show less
May 15 00:24:47 web sshd[3655214]: Invalid user alvaro from 61.57.140.21 port 60176
May 15 00:27:38 ...
show moreMay 15 00:24:47 web sshd[3655214]: Invalid user alvaro from 61.57.140.21 port 60176
May 15 00:27:38 web sshd[3655710]: Invalid user tomcat from 61.57.140.21 port 47630
...
show less
Web App Attack
Anonymous
May 14 22:22:54 web8 sshd\[10375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 e ...
show moreMay 14 22:22:54 web8 sshd\[10375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.57.140.21 user=root
May 14 22:22:56 web8 sshd\[10375\]: Failed password for root from 61.57.140.21 port 51890 ssh2
May 14 22:24:14 web8 sshd\[10834\]: Invalid user alvaro from 61.57.140.21
May 14 22:24:14 web8 sshd\[10834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.57.140.21
May 14 22:24:16 web8 sshd\[10834\]: Failed password for invalid user alvaro from 61.57.140.21 port 45616 ssh2
show less
[fail2ban Auto Report] May 14 18:06:36 hyper sshd[532811]: Invalid user csgo from 61.57.140.21 port ...
show more[fail2ban Auto Report] May 14 18:06:36 hyper sshd[532811]: Invalid user csgo from 61.57.140.21 port 34708
May 14 18:10:44 hyper sshd[532914]: Invalid user ftpuser from 61.57.140.21 port 44120
May 14 18:12:06 hyper sshd[532918]: Invalid user csd from 61.57.140.21 port 37848
...
show less
(sshd) Failed SSH login from 61.57.140.21 (TW/Taiwan/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 61.57.140.21 (TW/Taiwan/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 14 16:57:29 15335 sshd[2415]: Invalid user zf from 61.57.140.21 port 36970
May 14 16:57:31 15335 sshd[2415]: Failed password for invalid user zf from 61.57.140.21 port 36970 ssh2
May 14 17:00:14 15335 sshd[2624]: Invalid user rakesh from 61.57.140.21 port 38444
May 14 17:00:17 15335 sshd[2624]: Failed password for invalid user rakesh from 61.57.140.21 port 38444 ssh2
May 14 17:01:40 15335 sshd[2698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.57.140.21 user=root
show less
May 14 23:57:34 web sshd[3652021]: Invalid user zf from 61.57.140.21 port 59008
May 15 00:00:17 web ...
show moreMay 14 23:57:34 web sshd[3652021]: Invalid user zf from 61.57.140.21 port 59008
May 15 00:00:17 web sshd[3652543]: Invalid user rakesh from 61.57.140.21 port 60162
...
show less
Web App Attack
Anonymous
May 14 21:54:12 web8 sshd\[32387\]: Invalid user zf from 61.57.140.21
May 14 21:54:12 web8 sshd\[323 ...
show moreMay 14 21:54:12 web8 sshd\[32387\]: Invalid user zf from 61.57.140.21
May 14 21:54:12 web8 sshd\[32387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.57.140.21
May 14 21:54:13 web8 sshd\[32387\]: Failed password for invalid user zf from 61.57.140.21 port 55784 ssh2
May 14 21:59:40 web8 sshd\[2229\]: Invalid user rakesh from 61.57.140.21
May 14 21:59:40 web8 sshd\[2229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.57.140.21
show less
61.57.140.21 (TW/Taiwan/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more61.57.140.21 (TW/Taiwan/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 14 15:52:52 17235 sshd[14488]: Failed password for root from 162.43.9.220 port 58584 ssh2
May 14 15:52:49 17235 sshd[14488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.43.9.220 user=root
May 14 15:53:16 17235 sshd[14529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.167.43 user=root
May 14 15:54:49 17235 sshd[14615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.57.140.21 user=root
May 14 15:54:50 17235 sshd[14615]: Failed password for root from 61.57.140.21 port 48164 ssh2
IP Addresses Blocked:
162.43.9.220 (JP/Japan/x162-43-9-220.static.xvps.ne.jp)
152.32.167.43 (TW/Taiwan/-)
show less
May 15 01:45:23 doubuntu sshd[2556653]: Disconnected from authenticating user root 61.57.140.21 port ...
show moreMay 15 01:45:23 doubuntu sshd[2556653]: Disconnected from authenticating user root 61.57.140.21 port 39134 [preauth]
...
show less
May 15 01:12:35 doubuntu sshd[2556049]: Invalid user sai from 61.57.140.21 port 56958
May 15 01:12:3 ...
show moreMay 15 01:12:35 doubuntu sshd[2556049]: Invalid user sai from 61.57.140.21 port 56958
May 15 01:12:35 doubuntu sshd[2556049]: Disconnected from invalid user sai 61.57.140.21 port 56958 [preauth]
May 15 01:12:35 doubuntu sshd[2556049]: Disconnected from invalid user sai 61.57.140.21 port 56958 [preauth]
...
show less