174.70.85.14 - IPInfo

Basic Info

City: Gainesville

Region: Florida

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: Cox Communications Inc.

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 174.70.85.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44164
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;174.70.85.14.			IN	A

;; AUTHORITY SECTION:
.			3217	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019060100 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 01 20:02:59 CST 2019
;; MSG SIZE  rcvd: 116

Host info

14.85.70.174.in-addr.arpa domain name pointer ip174-70-85-14.ga.at.cox.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
*** Can't find 14.85.70.174.in-addr.arpa.: No answer

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
93.113.133.100	attackspambots	Brute force attack to crack SMTP password (port 25 / 587)	2020-02-17 09:10:27
80.78.240.76	attackbotsspam	Automatic report - Banned IP Access	2020-02-17 08:31:54
106.58.209.161	attack	Unauthorized SSH connection attempt	2020-02-17 08:37:15
45.126.161.186	attackbots	Feb 16 23:11:31 ns382633 sshd\[30121\]: Invalid user testuser from 45.126.161.186 port 46706 Feb 16 23:11:31 ns382633 sshd\[30121\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.126.161.186 Feb 16 23:11:33 ns382633 sshd\[30121\]: Failed password for invalid user testuser from 45.126.161.186 port 46706 ssh2 Feb 16 23:25:15 ns382633 sshd\[32719\]: Invalid user amalia from 45.126.161.186 port 56686 Feb 16 23:25:15 ns382633 sshd\[32719\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.126.161.186	2020-02-17 09:03:59
170.82.188.9	attack	Automatic report - Port Scan Attack	2020-02-17 08:31:30
81.90.36.50	attack	Automatic report - Windows Brute-Force Attack	2020-02-17 09:03:43
49.85.99.87	spam	[2020/02/17 02:11:06] [49.85.99.87:2095-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:07] [49.85.99.87:2099-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:09] [49.85.99.87:2102-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:10] [49.85.99.87:2098-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:11] [49.85.99.87:2103-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:37] [49.85.99.87:2105-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:42] [49.85.99.87:2097-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:46] [49.85.99.87:2098-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:11:49] [49.85.99.87:2102-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 02:12:11] [49.85.99.87:2102-0] User leslie@luxnetcorp.com.tw AUTH fails.	2020-02-17 09:09:58
175.12.245.226	attackspambots	(ftpd) Failed FTP login from 175.12.245.226 (CN/China/-): 10 in the last 3600 secs	2020-02-17 08:57:03
198.108.66.127	attackspambots	1581891933 - 02/16/2020 23:25:33 Host: worker-07.sfj.corp.censys.io/198.108.66.127 Port: 1900 UDP Blocked	2020-02-17 08:39:32
189.208.62.121	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 09:02:47
36.99.39.95	attack	Feb 17 00:15:24 srv-ubuntu-dev3 sshd[47714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.99.39.95 user=root Feb 17 00:15:26 srv-ubuntu-dev3 sshd[47714]: Failed password for root from 36.99.39.95 port 41976 ssh2 Feb 17 00:18:37 srv-ubuntu-dev3 sshd[48003]: Invalid user csgoserver from 36.99.39.95 Feb 17 00:18:37 srv-ubuntu-dev3 sshd[48003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.99.39.95 Feb 17 00:18:37 srv-ubuntu-dev3 sshd[48003]: Invalid user csgoserver from 36.99.39.95 Feb 17 00:18:39 srv-ubuntu-dev3 sshd[48003]: Failed password for invalid user csgoserver from 36.99.39.95 port 39818 ssh2 Feb 17 00:22:05 srv-ubuntu-dev3 sshd[48325]: Invalid user swg from 36.99.39.95 ...	2020-02-17 08:38:41
189.208.61.87	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 09:08:21
202.88.241.107	attack	Invalid user user from 202.88.241.107 port 51064	2020-02-17 08:25:02
45.143.220.3	attackbots	[2020-02-16 18:43:21] NOTICE[1148] chan_sip.c: Registration from '"700" ' failed for '45.143.220.3:6149' - Wrong password [2020-02-16 18:43:21] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-16T18:43:21.704-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="700",SessionID="0x7fd82c9bc688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.3/6149",Challenge="25d392f8",ReceivedChallenge="25d392f8",ReceivedHash="13c255886106f032faa00ff084c72144" [2020-02-16 18:43:21] NOTICE[1148] chan_sip.c: Registration from '"700" ' failed for '45.143.220.3:6149' - Wrong password [2020-02-16 18:43:21] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-16T18:43:21.714-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="700",SessionID="0x7fd82c7af4d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220. ...	2020-02-17 08:41:26
114.4.220.176	attackbots	[Mon Feb 17 05:25:38.356451 2020] [:error] [pid 22300:tid 139656822216448] [client 114.4.220.176:5873] [client 114.4.220.176] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/buku/1587-klimatologi/agroklimatologi/kalender-tanam-katam-terpadu/kalender-tanam-katam-terpadu-provinsi-jawa-timur/kalender-tanam-katam-terpadu-kabupaten-trenggalek/kalender-tanam-katam-terpadu-kecamatan-montong-kabupaten-tuban"] [unique_id "XknB ...	2020-02-17 08:36:23

Recently Reported IPs

50.206.44.115	124.200.179.137	180.149.125.150	191.180.217.96
69.225.116.10	208.85.235.54	27.252.178.133	192.236.253.218
78.244.15.118	124.20.10.66	12.231.141.122	78.218.192.64
2a02:4780:3:1::c	218.143.220.242	77.93.235.34	23.245.160.40
202.199.31.46	126.24.133.243	106.42.109.249	8.159.157.197