Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Palo Alto

Region: California

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
171.67.70.87 attackspambots
firewall-block, port(s): 80/tcp
2020-06-24 05:39:16
171.67.70.85 attackbotsspam
ET SCAN Zmap User-Agent (zgrab) - port: 80 proto: TCP cat: Detection of a Network Scan
2020-04-12 23:16:39
171.67.70.85 attackspambots
[MK-VM6] Blocked by UFW
2020-04-11 07:43:09
171.67.70.85 attack
[portscan] Port scan
2020-04-05 00:53:01
171.67.70.85 attack
ET SCAN Zmap User-Agent (zgrab) - port: 80 proto: TCP cat: Detection of a Network Scan
2020-03-31 15:34:09
171.67.70.85 attack
ET SCAN Zmap User-Agent (zgrab) - port: 80 proto: TCP cat: Detection of a Network Scan
2020-03-29 02:41:54
171.67.70.85 attackspam
IP: 171.67.70.85
Ports affected
    World Wide Web HTTP (80) 
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
   AS32 STANFORD
   United States (US)
   CIDR 171.64.0.0/14
Log Date: 28/03/2020 9:36:16 AM UTC
2020-03-28 18:31:44
171.67.70.85 attack
IP: 171.67.70.85
Ports affected
    World Wide Web HTTP (80) 
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
   AS32 STANFORD
   United States (US)
   CIDR 171.64.0.0/14
Log Date: 27/03/2020 9:29:32 AM UTC
2020-03-27 17:40:34
171.67.70.85 attack
[MK-VM4] Blocked by UFW
2020-03-26 16:04:59
171.67.70.85 attack
[MK-VM5] Blocked by UFW
2020-03-26 06:32:46
171.67.70.85 attackspambots
Intrusion source
2020-03-25 13:12:04
171.67.70.81 attackbots
22/tcp...
[2020-03-01/23]40pkt,3pt.(tcp)
2020-03-24 08:37:41
171.67.70.85 attackspam
firewall-block, port(s): 80/tcp
2020-03-24 03:37:57
171.67.70.85 attack
Unauthorized connection attempt detected from IP address 171.67.70.85 to port 80 [T]
2020-03-20 02:47:40
171.67.70.85 attackbotsspam
ET SCAN Zmap User-Agent (zgrab) - port: 80 proto: TCP cat: Detection of a Network Scan
2020-03-18 15:32:53
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '171.0.0.0 - 171.255.255.255'

% Abuse contact for '171.0.0.0 - 171.255.255.255' is 'helpdesk@apnic.net'

inetnum:        171.0.0.0 - 171.255.255.255
netname:        ERX-NETBLOCK
descr:          Early registration addresses
remarks:        ------------------------------------------------------
remarks:        Important:
remarks:
remarks:        Networks in this range were allocated by InterNIC
remarks:        prior to the formation of Regional Internet
remarks:        Registries (RIRs): AfriNIC, APNIC, ARIN, LACNIC and RIPE NCC.
remarks:
remarks:        Address ranges from this historical space have now
remarks:        been transferred to the appropriate RIR database.remarks:
remarks:        If your search has returned this record, it means the
remarks:        address range is not administered by APNIC.
remarks:
remarks:        Instead, please search one of the following databases:
remarks:
remarks:        - AfriNIC (Africa)
remarks:        website: http://www.afrinic.net/
remarks:        command line: whois.afrinic.net
remarks:
remarks:        - ARIN (Northern America)
remarks:        website: http://www.arin.net/
remarks:        command line: whois.arin.net
remarks:
remarks:        - LACNIC (Latin America and the Carribean)
remarks:        website: http://www.lacnic.net/
remarks:        command line: whois.lacnic.net
remarks:
remarks:        - RIPE NCC (Europe)
remarks:        website: http://www.ripe.net/
remarks:        command line: whois.ripe.net
remarks:
remarks:        For information on the Early Registration Transfer
remarks:        (ERX) project, see:
remarks:
remarks:        http://www.apnic.net/db/erx
remarks:
remarks:        ------------------------------------------------------
country:        AU
admin-c:        IANA1-AP
tech-c:         IANA1-AP
mnt-by:         APNIC-HM
mnt-lower:      APNIC-HM
mnt-irt:        IRT-APNIC-AP
status:         ALLOCATED PORTABLE
last-modified:  2011-02-09T00:29:28Z
source:         APNIC

irt:            IRT-APNIC-AP
address:        Brisbane, Australia
e-mail:         helpdesk@apnic.net
abuse-mailbox:  helpdesk@apnic.net
admin-c:        HM20-AP
tech-c:         NO4-AP
remarks:        APNIC is a Regional Internet Registry.
remarks:        We do not operate the referring network and
remarks:        are unable to investigate complaints of network abuse.
remarks:        For information about IRT, see www.apnic.net/irt
remarks:        helpdesk@apnic.net was validated on 2020-02-03
auth:           # Filtered
mnt-by:         APNIC-HM
last-modified:  2025-11-18T00:26:21Z
source:         APNIC

role:           Internet Assigned Numbers Authority
address:        see http://www.iana.org.
admin-c:        IANA1-AP
tech-c:         IANA1-AP
nic-hdl:        IANA1-AP
remarks:        For more information on IANA services
remarks:        go to IANA web site at http://www.iana.org.
mnt-by:         MAINT-APNIC-AP
last-modified:  2018-06-22T22:34:30Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 171.67.70.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11487
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;171.67.70.152.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026080300 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 03 17:31:27 CST 2026
;; MSG SIZE  rcvd: 106
Host info
152.70.67.171.in-addr.arpa domain name pointer research.esrg.stanford.edu.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
152.70.67.171.in-addr.arpa	name = research.esrg.stanford.edu.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
185.110.95.6 attackspam
Jun 22 14:04:15 rocket sshd[24397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.110.95.6
Jun 22 14:04:17 rocket sshd[24397]: Failed password for invalid user vnc from 185.110.95.6 port 45466 ssh2
...
2020-06-22 21:18:00
46.93.96.11 attackspambots
 TCP (SYN) 46.93.96.11:22053 -> port 23, len 44
2020-06-22 21:43:22
27.221.97.4 attackspam
Jun 22 02:31:10 web1 sshd\[29938\]: Invalid user shop1 from 27.221.97.4
Jun 22 02:31:10 web1 sshd\[29938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.221.97.4
Jun 22 02:31:12 web1 sshd\[29938\]: Failed password for invalid user shop1 from 27.221.97.4 port 49975 ssh2
Jun 22 02:33:48 web1 sshd\[30137\]: Invalid user monit from 27.221.97.4
Jun 22 02:33:48 web1 sshd\[30137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.221.97.4
2020-06-22 21:23:36
157.97.80.205 attackbots
2020-06-22T12:00:24.680043ionos.janbro.de sshd[19514]: Invalid user zfs from 157.97.80.205 port 52409
2020-06-22T12:00:26.901314ionos.janbro.de sshd[19514]: Failed password for invalid user zfs from 157.97.80.205 port 52409 ssh2
2020-06-22T12:03:34.139662ionos.janbro.de sshd[19527]: Invalid user teamspeak from 157.97.80.205 port 52146
2020-06-22T12:03:34.222861ionos.janbro.de sshd[19527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.97.80.205
2020-06-22T12:03:34.139662ionos.janbro.de sshd[19527]: Invalid user teamspeak from 157.97.80.205 port 52146
2020-06-22T12:03:36.081667ionos.janbro.de sshd[19527]: Failed password for invalid user teamspeak from 157.97.80.205 port 52146 ssh2
2020-06-22T12:06:46.795844ionos.janbro.de sshd[19542]: Invalid user glf from 157.97.80.205 port 51890
2020-06-22T12:06:46.887021ionos.janbro.de sshd[19542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.97.80.205
2020-0
...
2020-06-22 21:38:37
128.199.118.132 attackspambots
Jun 22 15:30:05 PorscheCustomer sshd[31745]: Failed password for root from 128.199.118.132 port 45984 ssh2
Jun 22 15:32:04 PorscheCustomer sshd[31764]: Failed password for root from 128.199.118.132 port 43498 ssh2
Jun 22 15:34:00 PorscheCustomer sshd[31793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.118.132
...
2020-06-22 21:37:01
49.233.213.153 attackspam
HTTP/80/443/8080 Probe, Hack -
2020-06-22 21:31:42
95.217.122.245 attackspam
Unauthorized connection attempt detected from IP address 95.217.122.245 to port 8081
2020-06-22 21:37:31
222.186.173.201 attackspambots
Jun 22 15:44:59 vps sshd[866948]: Failed password for root from 222.186.173.201 port 61792 ssh2
Jun 22 15:45:02 vps sshd[866948]: Failed password for root from 222.186.173.201 port 61792 ssh2
Jun 22 15:45:06 vps sshd[866948]: Failed password for root from 222.186.173.201 port 61792 ssh2
Jun 22 15:45:09 vps sshd[866948]: Failed password for root from 222.186.173.201 port 61792 ssh2
Jun 22 15:45:12 vps sshd[866948]: Failed password for root from 222.186.173.201 port 61792 ssh2
...
2020-06-22 21:55:15
183.83.135.153 attackbotsspam
Honeypot attack, port: 445, PTR: broadband.actcorp.in.
2020-06-22 21:56:26
139.155.20.146 attackbotsspam
Jun 22 06:13:54 dignus sshd[26837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.20.146
Jun 22 06:13:56 dignus sshd[26837]: Failed password for invalid user user from 139.155.20.146 port 45268 ssh2
Jun 22 06:16:53 dignus sshd[27069]: Invalid user zhangyansen from 139.155.20.146 port 36822
Jun 22 06:16:53 dignus sshd[27069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.20.146
Jun 22 06:16:56 dignus sshd[27069]: Failed password for invalid user zhangyansen from 139.155.20.146 port 36822 ssh2
...
2020-06-22 21:30:15
49.233.197.193 attackspambots
Jun 22 14:55:57 jane sshd[32147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.197.193 
Jun 22 14:55:59 jane sshd[32147]: Failed password for invalid user www from 49.233.197.193 port 45174 ssh2
...
2020-06-22 21:34:43
221.235.137.130 attack
Port Scan detected!
...
2020-06-22 21:30:41
180.12.176.33 attack
Honeypot attack, port: 445, PTR: 180-12-176-33-revip-jp2-default.176.12.180.in-addr.arpa.
2020-06-22 21:52:59
222.184.14.90 attackspam
Jun 22 12:06:47 *** sshd[19087]: User root from 222.184.14.90 not allowed because not listed in AllowUsers
2020-06-22 21:41:40
218.92.0.199 attackspam
Jun 22 15:07:36 pve1 sshd[11234]: Failed password for root from 218.92.0.199 port 38588 ssh2
Jun 22 15:07:39 pve1 sshd[11234]: Failed password for root from 218.92.0.199 port 38588 ssh2
...
2020-06-22 21:26:06

Recently Reported IPs

42.84.204.244 34.65.117.95 104.249.59.148 35.254.171.194
134.35.157.72 2606:4700:10::6814:7945 209.209.85.95 111.19.110.127
47.122.117.13 39.104.88.215 38.110.46.2 211.149.184.145
123.129.241.164 118.196.5.9 118.145.138.56 115.28.210.29
114.66.38.139 103.239.185.34 139.224.111.68 2606:4700:10::6816:1850