172.67.70.139 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 172.67.70.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33398
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;172.67.70.139.			IN	A

;; AUTHORITY SECTION:
.			322	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 211 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 17:45:34 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 139.70.67.172.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.70.67.172.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
128.199.142.138	attack	Apr 25 22:04:04 server1 sshd\[29207\]: Failed password for invalid user ecommerce from 128.199.142.138 port 53110 ssh2 Apr 25 22:06:38 server1 sshd\[29959\]: Invalid user mukunda from 128.199.142.138 Apr 25 22:06:38 server1 sshd\[29959\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138 Apr 25 22:06:40 server1 sshd\[29959\]: Failed password for invalid user mukunda from 128.199.142.138 port 48064 ssh2 Apr 25 22:09:21 server1 sshd\[30772\]: Invalid user admin from 128.199.142.138 ...	2020-04-26 18:28:43
66.70.178.54	attackbotsspam	(sshd) Failed SSH login from 66.70.178.54 (CA/Canada/front1.keepsolid.com): 5 in the last 3600 secs	2020-04-26 18:29:12
61.164.152.209	attackspambots	04/25/2020-23:48:16.942550 61.164.152.209 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-04-26 18:40:57
116.72.16.219	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-04-26 18:46:56
106.75.187.140	attack	Apr 26 05:48:19 mout sshd[18515]: Invalid user user from 106.75.187.140 port 53694	2020-04-26 18:36:28
113.125.119.250	attack	$f2bV_matches	2020-04-26 18:56:53
51.77.147.5	attack	prod3 ...	2020-04-26 18:33:36
159.69.113.53	attackspam	Lines containing failures of 159.69.113.53 (max 1000) Apr 26 07:32:51 localhost sshd[30208]: User r.r from 159.69.113.53 not allowed because listed in DenyUsers Apr 26 07:32:51 localhost sshd[30208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.69.113.53 user=r.r Apr 26 07:32:54 localhost sshd[30208]: Failed password for invalid user r.r from 159.69.113.53 port 55434 ssh2 Apr 26 07:32:55 localhost sshd[30208]: Received disconnect from 159.69.113.53 port 55434:11: Bye Bye [preauth] Apr 26 07:32:55 localhost sshd[30208]: Disconnected from invalid user r.r 159.69.113.53 port 55434 [preauth] Apr 26 07:42:29 localhost sshd[923]: Invalid user videolan from 159.69.113.53 port 34744 Apr 26 07:42:29 localhost sshd[923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.69.113.53 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=159.69.113.53	2020-04-26 19:11:11
74.208.65.41	attack	Apr 26 05:47:49 debian-2gb-nbg1-2 kernel: \[10131806.747080\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=74.208.65.41 DST=195.201.40.59 LEN=438 TOS=0x00 PREC=0x00 TTL=49 ID=37410 DF PROTO=UDP SPT=5174 DPT=5060 LEN=418	2020-04-26 18:58:09
144.91.113.37	attackspam	2020-04-25 UTC: (44x) - admin,bunkerb,celery,chema,controller,cpsrvsid,cuisine,dbroer,george,getinlamka,gnet,gun,hacluster,hadoop,hill,james,josue,kapil,leah,lukas,oracle1,ourhomes,pi,po3rte,postgres,postmaster,pul,qwe123,root(7x),sampler2,sesamus,sys123,tft,ubuntu,user,vncuser,webmaster,ww	2020-04-26 19:01:38
159.89.121.79	attackbots	C2,WP GET /wp-login.php	2020-04-26 18:37:57
184.22.66.165	attackbots	Tried sshing with brute force.	2020-04-26 19:00:37
104.128.90.118	attackbots	Apr 26 09:05:46 * sshd[17245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.128.90.118 Apr 26 09:05:49 * sshd[17245]: Failed password for invalid user dtc from 104.128.90.118 port 59962 ssh2	2020-04-26 18:50:36
120.132.117.254	attackbots	Jun 11 12:26:30 ms-srv sshd[43274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.117.254 user=root Jun 11 12:26:32 ms-srv sshd[43274]: Failed password for invalid user root from 120.132.117.254 port 48013 ssh2	2020-04-26 18:57:11
187.188.34.225	attack	(imapd) Failed IMAP login from 187.188.34.225 (MX/Mexico/fixed-187-188-34-225.totalplay.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 26 08:17:37 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=187.188.34.225, lip=5.63.12.44, TLS, session=	2020-04-26 19:06:18

Recently Reported IPs

172.67.70.142	172.67.70.143	172.67.70.141	172.67.70.137
172.67.70.145	172.67.70.144	172.67.70.146	172.67.70.147
172.67.70.148	232.156.77.105	172.67.70.151	172.67.70.149
172.67.70.150	172.67.70.15	172.67.70.153	172.67.70.154
172.67.70.157	172.67.70.152	172.67.70.156	172.67.70.158