117.89.70.21 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
117.89.70.250	attack	Jul 4 14:39:17 home sshd[18297]: Failed password for root from 117.89.70.250 port 54327 ssh2 Jul 4 14:42:55 home sshd[18699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.89.70.250 Jul 4 14:42:57 home sshd[18699]: Failed password for invalid user jenkins from 117.89.70.250 port 57230 ssh2 ...	2020-07-04 21:09:49
117.89.70.250	attackbotsspam	2020-07-04T07:54:43.066035snf-827550 sshd[1033]: Invalid user wangy from 117.89.70.250 port 50987 2020-07-04T07:54:45.436143snf-827550 sshd[1033]: Failed password for invalid user wangy from 117.89.70.250 port 50987 ssh2 2020-07-04T07:56:05.102905snf-827550 sshd[1607]: Invalid user griffin from 117.89.70.250 port 34630 ...	2020-07-04 14:57:11

Type

Details

Datetime

117.89.70.250

attack

Jul  4 14:39:17 home sshd[18297]: Failed password for root from 117.89.70.250 port 54327 ssh2
Jul  4 14:42:55 home sshd[18699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.89.70.250
Jul  4 14:42:57 home sshd[18699]: Failed password for invalid user jenkins from 117.89.70.250 port 57230 ssh2
...

2020-07-04 21:09:49

117.89.70.250

attackbotsspam

2020-07-04T07:54:43.066035snf-827550 sshd[1033]: Invalid user wangy from 117.89.70.250 port 50987
2020-07-04T07:54:45.436143snf-827550 sshd[1033]: Failed password for invalid user wangy from 117.89.70.250 port 50987 ssh2
2020-07-04T07:56:05.102905snf-827550 sshd[1607]: Invalid user griffin from 117.89.70.250 port 34630
...

2020-07-04 14:57:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.89.70.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64920
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.89.70.21.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 14:01:54 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 21.70.89.117.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 21.70.89.117.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
212.83.134.139	attackbots	\[2019-09-13 14:57:08\] NOTICE\[20685\] chan_sip.c: Registration from '"4633"\' failed for '212.83.134.139:26501' - Wrong password \[2019-09-13 14:57:08\] SECURITY\[20693\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-13T14:57:08.867-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4633",SessionID="0x7f8a6c3857d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.134.139/26501",Challenge="0c6d7e59",ReceivedChallenge="0c6d7e59",ReceivedHash="443896d7f2d2cbb5f3d02bf79859b54c" \[2019-09-13 14:57:15\] NOTICE\[20685\] chan_sip.c: Registration from '"4629"\' failed for '212.83.134.139:26501' - Wrong password \[2019-09-13 14:57:15\] SECURITY\[20693\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-13T14:57:15.422-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4629",SessionID="0x7f8a6c2c3318",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress=	2019-09-14 03:00:46
202.137.141.104	attackspambots	Lines containing failures of 202.137.141.104 Sep 13 12:48:45 nxxxxxxx sshd[12951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.137.141.104 user=r.r Sep 13 12:48:47 nxxxxxxx sshd[12951]: Failed password for r.r from 202.137.141.104 port 35613 ssh2 Sep 13 12:48:48 nxxxxxxx sshd[12951]: Connection closed by authenticating user r.r 202.137.141.104 port 35613 [preauth] Sep 13 12:57:44 nxxxxxxx sshd[14536]: Invalid user admin from 202.137.141.104 port 38187 Sep 13 12:57:44 nxxxxxxx sshd[14536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.137.141.104 Sep 13 12:57:46 nxxxxxxx sshd[14536]: Failed password for invalid user admin from 202.137.141.104 port 38187 ssh2 Sep 13 12:57:47 nxxxxxxx sshd[14536]: Connection closed by invalid user admin 202.137.141.104 port 38187 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=202.137.141.104	2019-09-14 02:56:48
189.211.3.32	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-13 10:58:59,610 INFO [amun_request_handler] PortScan Detected on Port: 445 (189.211.3.32)	2019-09-14 02:39:15
51.75.205.104	attack	WordPress login Brute force / Web App Attack on client site.	2019-09-14 02:37:34
188.233.76.1	attackbots	firewall-block, port(s): 23/tcp	2019-09-14 02:40:16
36.99.141.211	attack	DATE:2019-09-13 19:48:49, IP:36.99.141.211, PORT:ssh SSH brute force auth (thor)	2019-09-14 03:05:54
14.160.25.224	attack	Unauthorized connection attempt from IP address 14.160.25.224 on Port 445(SMB)	2019-09-14 02:38:04
81.30.219.144	attack	Unauthorized connection attempt from IP address 81.30.219.144 on Port 445(SMB)	2019-09-14 02:57:33
77.232.128.87	attackbotsspam	Sep 13 08:31:12 web1 sshd\[16626\]: Invalid user oracle from 77.232.128.87 Sep 13 08:31:12 web1 sshd\[16626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.128.87 Sep 13 08:31:14 web1 sshd\[16626\]: Failed password for invalid user oracle from 77.232.128.87 port 50354 ssh2 Sep 13 08:35:39 web1 sshd\[16973\]: Invalid user teamspeak from 77.232.128.87 Sep 13 08:35:39 web1 sshd\[16973\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.128.87	2019-09-14 02:47:27
89.216.113.174	attack	Sep 13 20:36:12 rpi sshd[11708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.113.174 Sep 13 20:36:14 rpi sshd[11708]: Failed password for invalid user admin01 from 89.216.113.174 port 55172 ssh2	2019-09-14 02:56:20
178.155.72.118	attack	Unauthorized connection attempt from IP address 178.155.72.118 on Port 445(SMB)	2019-09-14 02:57:18
103.35.64.222	attack	Sep 13 20:21:04 cp sshd[14898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.35.64.222 Sep 13 20:21:04 cp sshd[14898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.35.64.222	2019-09-14 02:38:34
14.98.48.130	attackbotsspam	Unauthorized connection attempt from IP address 14.98.48.130 on Port 445(SMB)	2019-09-14 02:31:37
213.158.41.121	attackbots	Sep 13 14:40:07 ny01 sshd[29839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.158.41.121 Sep 13 14:40:09 ny01 sshd[29839]: Failed password for invalid user 111111 from 213.158.41.121 port 52164 ssh2 Sep 13 14:44:05 ny01 sshd[30505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.158.41.121	2019-09-14 02:55:23
186.214.106.178	attack	firewall-block, port(s): 23/tcp	2019-09-14 02:42:24

Recently Reported IPs

117.89.70.149	117.89.70.26	117.89.70.4	117.89.70.169
117.89.70.39	117.89.71.113	117.89.71.189	117.89.70.87
117.89.71.117	117.9.0.163	117.89.71.155	117.89.71.85
117.90.104.31	117.9.49.232	117.89.84.17	117.90.105.158
117.90.106.53	117.90.197.238	117.90.242.163	117.90.42.56