109.70.1.104 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
109.70.100.48	attack	/posting.php?mode=post&f=4&sid=cf7c2f0cd6fe888641d2ceb11583e133	2020-10-13 03:05:03
109.70.100.48	attackbotsspam	/posting.php?mode=post&f=4&sid=cf7c2f0cd6fe888641d2ceb11583e133	2020-10-12 18:32:43
109.70.100.53	attackbotsspam	20 attempts against mh-misbehave-ban on sonic	2020-10-12 02:01:38
109.70.100.53	attack	23 attempts against mh-misbehave-ban on sonic	2020-10-11 17:52:07
109.70.100.34	attack	xmlrpc attack	2020-10-07 03:08:50
109.70.100.34	attackbotsspam	/wp-json/wp/v2/users/2	2020-10-06 19:08:49
109.70.100.42	attack	xmlrpc attack	2020-10-04 09:24:33
109.70.100.44	attack	Bad bot/spoofed identity	2020-10-04 02:53:12
109.70.100.42	attackspam	xmlrpc attack	2020-10-04 02:01:18
109.70.100.44	attackbots	Bad bot/spoofed identity	2020-10-03 18:42:57
109.70.100.42	attack	xmlrpc attack	2020-10-03 17:46:52
109.70.100.45	attack	(mod_security) mod_security (id:210492) triggered by 109.70.100.45 (AT/Austria/tor-exit-anonymizer.appliedprivacy.net): 5 in the last 3600 secs	2020-09-18 02:29:17
109.70.100.34	attackspambots	CMS (WordPress or Joomla) login attempt.	2020-09-12 00:41:23
109.70.100.39	attack	0,58-01/01 [bc01/m20] PostRequest-Spammer scoring: Durban01	2020-09-12 00:05:13
109.70.100.33	attackspam	CMS (WordPress or Joomla) login attempt.	2020-09-11 20:16:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.70.1.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15859
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;109.70.1.104.			IN	A

;; AUTHORITY SECTION:
.			162	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030302 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 12:12:15 CST 2022
;; MSG SIZE  rcvd: 105

Host info

104.1.70.109.in-addr.arpa domain name pointer srv1.mdomein.nl.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.1.70.109.in-addr.arpa	name = srv1.mdomein.nl.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
182.150.57.34	attack	Sep 4 07:59:13 rocket sshd[21264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.150.57.34 Sep 4 07:59:16 rocket sshd[21264]: Failed password for invalid user jur from 182.150.57.34 port 28086 ssh2 ...	2020-09-05 03:49:25
106.13.190.51	attackbots	2020-09-04T12:52:33.717392linuxbox-skyline sshd[82272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.190.51 user=root 2020-09-04T12:52:35.613963linuxbox-skyline sshd[82272]: Failed password for root from 106.13.190.51 port 54548 ssh2 ...	2020-09-05 03:26:08
193.33.240.91	attack	Sep 3 19:53:10 h2646465 sshd[6830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.33.240.91 user=root Sep 3 19:53:12 h2646465 sshd[6830]: Failed password for root from 193.33.240.91 port 46452 ssh2 Sep 3 20:05:19 h2646465 sshd[9079]: Invalid user user3 from 193.33.240.91 Sep 3 20:05:19 h2646465 sshd[9079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.33.240.91 Sep 3 20:05:19 h2646465 sshd[9079]: Invalid user user3 from 193.33.240.91 Sep 3 20:05:21 h2646465 sshd[9079]: Failed password for invalid user user3 from 193.33.240.91 port 55803 ssh2 Sep 3 20:12:21 h2646465 sshd[9873]: Invalid user mona from 193.33.240.91 Sep 3 20:12:21 h2646465 sshd[9873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.33.240.91 Sep 3 20:12:21 h2646465 sshd[9873]: Invalid user mona from 193.33.240.91 Sep 3 20:12:23 h2646465 sshd[9873]: Failed password for invalid user mona from 193.33.240	2020-09-05 03:28:19
190.74.164.58	attackspambots	Honeypot attack, port: 445, PTR: 190.74-164-58.dyn.dsl.cantv.net.	2020-09-05 03:45:57
50.115.168.10	attackspam	Sep 4 15:59:38 rancher-0 sshd[1436591]: Invalid user svn from 50.115.168.10 port 48942 ...	2020-09-05 03:16:11
81.193.146.213	attackbotsspam	Automatic report - Port Scan Attack	2020-09-05 03:27:18
113.98.193.58	attackspambots	$f2bV_matches	2020-09-05 03:34:50
80.90.80.117	attack	TCP ports : 7770 / 7777	2020-09-05 03:35:20
111.229.157.211	attackspam	Sep 4 19:02:28 ns392434 sshd[25983]: Invalid user admin from 111.229.157.211 port 58864 Sep 4 19:02:28 ns392434 sshd[25983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.157.211 Sep 4 19:02:28 ns392434 sshd[25983]: Invalid user admin from 111.229.157.211 port 58864 Sep 4 19:02:31 ns392434 sshd[25983]: Failed password for invalid user admin from 111.229.157.211 port 58864 ssh2 Sep 4 19:22:31 ns392434 sshd[26228]: Invalid user zj from 111.229.157.211 port 55078 Sep 4 19:22:31 ns392434 sshd[26228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.157.211 Sep 4 19:22:31 ns392434 sshd[26228]: Invalid user zj from 111.229.157.211 port 55078 Sep 4 19:22:32 ns392434 sshd[26228]: Failed password for invalid user zj from 111.229.157.211 port 55078 ssh2 Sep 4 19:24:59 ns392434 sshd[26303]: Invalid user liyan from 111.229.157.211 port 43320	2020-09-05 03:52:53
45.160.180.241	attack	Sep 3 18:43:27 mellenthin postfix/smtpd[20267]: NOQUEUE: reject: RCPT from unknown[45.160.180.241]: 554 5.7.1 Service unavailable; Client host [45.160.180.241] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/45.160.180.241; from= to= proto=ESMTP helo=<241-180-160-45.conectnet.inf.br>	2020-09-05 03:42:50
142.93.122.161	attackspambots	142.93.122.161 - - [04/Sep/2020:19:08:15 +0000] "GET /wp-login.php HTTP/1.1" 403 154 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-05 03:39:19
45.148.10.28	attackbots	Scanning an empty webserver with deny all robots.txt	2020-09-05 03:18:46
51.68.11.203	attackbotsspam	/wp-includes/update.php, referer: http://site.ru	2020-09-05 03:49:07
123.59.213.68	attack	2020-09-04T20:51:39.004538ks3355764 sshd[8340]: Invalid user minecraft from 123.59.213.68 port 47134 2020-09-04T20:51:40.830811ks3355764 sshd[8340]: Failed password for invalid user minecraft from 123.59.213.68 port 47134 ssh2 ...	2020-09-05 03:29:15
54.39.16.73	attackbotsspam	Sep 4 17:00:15 neko-world sshd[15975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.16.73 user=root Sep 4 17:00:17 neko-world sshd[15975]: Failed password for invalid user root from 54.39.16.73 port 46402 ssh2	2020-09-05 03:38:28

Recently Reported IPs

112.85.170.58	109.70.3.17	112.85.170.60	112.85.170.62
109.70.41.29	109.71.14.240	109.71.15.121	109.71.43.142
112.85.170.63	109.71.67.24	109.72.149.66	109.72.149.155
112.85.170.64	112.85.170.66	112.85.170.68	109.73.127.159
112.85.170.7	112.85.170.70	112.85.170.72	112.85.170.73