Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Stanford University

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:
Type Details Datetime
attackspam
SSH Scan
2019-10-17 07:28:48
Comments on same subnet:
IP Type Details Datetime
171.67.70.87 attackspambots
firewall-block, port(s): 80/tcp
2020-06-24 05:39:16
171.67.70.85 attackbotsspam
ET SCAN Zmap User-Agent (zgrab) - port: 80 proto: TCP cat: Detection of a Network Scan
2020-04-12 23:16:39
171.67.70.85 attackspambots
[MK-VM6] Blocked by UFW
2020-04-11 07:43:09
171.67.70.85 attack
[portscan] Port scan
2020-04-05 00:53:01
171.67.70.85 attack
ET SCAN Zmap User-Agent (zgrab) - port: 80 proto: TCP cat: Detection of a Network Scan
2020-03-31 15:34:09
171.67.70.85 attack
ET SCAN Zmap User-Agent (zgrab) - port: 80 proto: TCP cat: Detection of a Network Scan
2020-03-29 02:41:54
171.67.70.85 attackspam
IP: 171.67.70.85
Ports affected
    World Wide Web HTTP (80) 
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
   AS32 STANFORD
   United States (US)
   CIDR 171.64.0.0/14
Log Date: 28/03/2020 9:36:16 AM UTC
2020-03-28 18:31:44
171.67.70.85 attack
IP: 171.67.70.85
Ports affected
    World Wide Web HTTP (80) 
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
   AS32 STANFORD
   United States (US)
   CIDR 171.64.0.0/14
Log Date: 27/03/2020 9:29:32 AM UTC
2020-03-27 17:40:34
171.67.70.85 attack
[MK-VM4] Blocked by UFW
2020-03-26 16:04:59
171.67.70.85 attack
[MK-VM5] Blocked by UFW
2020-03-26 06:32:46
171.67.70.85 attackspambots
Intrusion source
2020-03-25 13:12:04
171.67.70.81 attackbots
22/tcp...
[2020-03-01/23]40pkt,3pt.(tcp)
2020-03-24 08:37:41
171.67.70.85 attackspam
firewall-block, port(s): 80/tcp
2020-03-24 03:37:57
171.67.70.85 attack
Unauthorized connection attempt detected from IP address 171.67.70.85 to port 80 [T]
2020-03-20 02:47:40
171.67.70.85 attackbotsspam
ET SCAN Zmap User-Agent (zgrab) - port: 80 proto: TCP cat: Detection of a Network Scan
2020-03-18 15:32:53
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 171.67.70.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20777
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;171.67.70.166.			IN	A

;; AUTHORITY SECTION:
.			169	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101601 1800 900 604800 86400

;; Query time: 151 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 17 07:28:45 CST 2019
;; MSG SIZE  rcvd: 117
Host info
166.70.67.171.in-addr.arpa domain name pointer research.esrg.stanford.edu.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
166.70.67.171.in-addr.arpa	name = research.esrg.stanford.edu.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
42.200.106.20 attackbots
Web app attack attempt
2019-12-04 03:13:38
106.12.56.143 attackbots
Dec  3 19:57:16 mail sshd[7660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.56.143 
Dec  3 19:57:18 mail sshd[7660]: Failed password for invalid user www from 106.12.56.143 port 39550 ssh2
Dec  3 20:03:12 mail sshd[10730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.56.143
2019-12-04 03:22:25
179.180.85.251 attack
Automatic report - Port Scan Attack
2019-12-04 03:35:53
35.223.251.110 attackbotsspam
IPS Sensor Hit - Port Scan detected
2019-12-04 03:30:04
112.140.185.64 attack
Dec  3 19:56:42 vpn01 sshd[9936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.140.185.64
Dec  3 19:56:43 vpn01 sshd[9936]: Failed password for invalid user support from 112.140.185.64 port 39684 ssh2
...
2019-12-04 03:31:58
218.92.0.154 attackspam
Dec  3 20:09:17 vps666546 sshd\[21579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.154  user=root
Dec  3 20:09:19 vps666546 sshd\[21579\]: Failed password for root from 218.92.0.154 port 59792 ssh2
Dec  3 20:09:23 vps666546 sshd\[21579\]: Failed password for root from 218.92.0.154 port 59792 ssh2
Dec  3 20:09:26 vps666546 sshd\[21579\]: Failed password for root from 218.92.0.154 port 59792 ssh2
Dec  3 20:09:29 vps666546 sshd\[21579\]: Failed password for root from 218.92.0.154 port 59792 ssh2
...
2019-12-04 03:11:28
49.88.112.76 attackbotsspam
Dec  3 16:32:18 firewall sshd[28851]: Failed password for root from 49.88.112.76 port 15004 ssh2
Dec  3 16:32:21 firewall sshd[28851]: Failed password for root from 49.88.112.76 port 15004 ssh2
Dec  3 16:32:23 firewall sshd[28851]: Failed password for root from 49.88.112.76 port 15004 ssh2
...
2019-12-04 03:33:33
139.59.37.209 attackspambots
Dec  3 19:38:39 server sshd\[27887\]: Invalid user xl from 139.59.37.209
Dec  3 19:38:39 server sshd\[27887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.37.209 
Dec  3 19:38:41 server sshd\[27887\]: Failed password for invalid user xl from 139.59.37.209 port 35506 ssh2
Dec  3 19:53:51 server sshd\[32424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.37.209  user=root
Dec  3 19:53:53 server sshd\[32424\]: Failed password for root from 139.59.37.209 port 37766 ssh2
...
2019-12-04 03:37:06
202.88.234.107 attack
Dec  3 13:04:19 ws12vmsma01 sshd[62749]: Invalid user raro from 202.88.234.107
Dec  3 13:04:21 ws12vmsma01 sshd[62749]: Failed password for invalid user raro from 202.88.234.107 port 20658 ssh2
Dec  3 13:13:24 ws12vmsma01 sshd[64024]: Invalid user suezaki from 202.88.234.107
...
2019-12-04 03:06:58
106.12.84.115 attackspam
2019-12-03T19:01:04.931243abusebot-6.cloudsearch.cf sshd\[11970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.84.115  user=root
2019-12-04 03:29:28
222.186.52.86 attackspam
Dec  3 14:04:32 ny01 sshd[30282]: Failed password for root from 222.186.52.86 port 51740 ssh2
Dec  3 14:06:52 ny01 sshd[30553]: Failed password for root from 222.186.52.86 port 32665 ssh2
Dec  3 14:06:54 ny01 sshd[30553]: Failed password for root from 222.186.52.86 port 32665 ssh2
2019-12-04 03:16:19
159.203.182.127 attackbotsspam
2019-12-03T19:40:22.638081struts4.enskede.local sshd\[24710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.182.127  user=root
2019-12-03T19:40:25.353617struts4.enskede.local sshd\[24710\]: Failed password for root from 159.203.182.127 port 48656 ssh2
2019-12-03T19:48:13.532837struts4.enskede.local sshd\[24746\]: Invalid user jaimeluis from 159.203.182.127 port 53985
2019-12-03T19:48:13.540343struts4.enskede.local sshd\[24746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.182.127
2019-12-03T19:48:16.247975struts4.enskede.local sshd\[24746\]: Failed password for invalid user jaimeluis from 159.203.182.127 port 53985 ssh2
...
2019-12-04 03:23:18
122.154.134.38 attackspam
FTP Brute-Force reported by Fail2Ban
2019-12-04 03:20:57
91.236.74.19 attackspambots
Unauthorized access detected from banned ip
2019-12-04 03:34:59
61.7.235.85 attackbotsspam
Fail2Ban Ban Triggered
2019-12-04 03:05:24

Recently Reported IPs

205.185.216.18 197.58.148.24 171.67.70.199 79.110.19.219
218.155.74.6 171.67.70.180 159.203.201.219 183.129.250.43
45.142.195.6 175.176.8.100 182.146.156.29 126.14.239.113
80.211.129.148 200.137.160.142 139.162.66.120 193.188.22.70
115.186.149.166 37.115.216.65 144.89.160.185 74.158.16.76