70.244.52.118 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 70.244.52.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20623
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;70.244.52.118.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021200 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 19:39:54 CST 2025
;; MSG SIZE  rcvd: 106

Host info

118.52.244.70.in-addr.arpa domain name pointer 70-244-52-118.lightspeed.livnmi.sbcglobal.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
118.52.244.70.in-addr.arpa	name = 70-244-52-118.lightspeed.livnmi.sbcglobal.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
213.109.87.223	attackbotsspam	srvr1: (mod_security) mod_security (id:920350) triggered by 213.109.87.223 (UA/-/s-213-109-87-223.under.net.ua): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/19 20:52:29 [error] 338292#0: 638706 [client 213.109.87.223] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "159787034950.354027"] [ref "o0,16v21,16"], client: 213.109.87.223, [redacted] request: "GET / HTTP/1.1" [redacted]	2020-08-20 05:45:24
106.52.55.146	attackbots	2020-08-19T14:59:07.898497linuxbox-skyline sshd[1004]: Invalid user gaston from 106.52.55.146 port 38126 ...	2020-08-20 05:42:11
106.12.70.99	attack	Aug 19 17:24:57 NPSTNNYC01T sshd[2717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.70.99 Aug 19 17:24:59 NPSTNNYC01T sshd[2717]: Failed password for invalid user admin from 106.12.70.99 port 54888 ssh2 Aug 19 17:29:33 NPSTNNYC01T sshd[3231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.70.99 ...	2020-08-20 05:34:23
106.54.141.196	attack	Invalid user gateway from 106.54.141.196 port 58024	2020-08-20 05:26:20
106.12.84.83	attack	Invalid user kerala from 106.12.84.83 port 52438	2020-08-20 05:32:18
115.195.102.78	attackspam	Portscan detected	2020-08-20 05:20:05
74.208.28.130	attackspambots	SSH login attempts.	2020-08-20 05:32:33
111.74.11.85	attackbotsspam	Aug 19 21:04:50 game-panel sshd[21268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.74.11.85 Aug 19 21:04:51 game-panel sshd[21268]: Failed password for invalid user abc123 from 111.74.11.85 port 55992 ssh2 Aug 19 21:08:49 game-panel sshd[21487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.74.11.85	2020-08-20 05:14:38
106.13.173.137	attackspam	Aug 19 18:38:20 vps46666688 sshd[23212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.173.137 Aug 19 18:38:21 vps46666688 sshd[23212]: Failed password for invalid user xun from 106.13.173.137 port 48886 ssh2 ...	2020-08-20 05:42:27
87.166.193.105	attackbotsspam	Aug 19 22:40:26 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 3 secs): user=, method=PLAIN, rip=87.166.193.105, lip=144.91.77.193, session=<4QtIA0GtmcFXpsFp> Aug 19 22:40:52 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=87.166.193.105, lip=144.91.77.193, session= Aug 19 22:45:17 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=87.166.193.105, lip=144.91.77.193, session= Aug 19 22:53:02 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=87.166.193.105, lip=144.91.77.193, session= Aug 19 22:53:09 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=87.166.193.105, lip=144.91.77.193, session=	2020-08-20 05:12:58
34.67.85.82	attackbots	Aug 19 22:52:36 vm1 sshd[26453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.67.85.82 Aug 19 22:52:37 vm1 sshd[26453]: Failed password for invalid user sinusbot from 34.67.85.82 port 55864 ssh2 ...	2020-08-20 05:40:55
210.86.239.186	attackspam	bruteforce detected	2020-08-20 05:16:12
51.83.134.233	attackbots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-19T21:04:33Z and 2020-08-19T21:19:21Z	2020-08-20 05:49:47
74.208.235.29	attack	SSH login attempts.	2020-08-20 05:31:44
74.209.13.44	attackbots	SSH login attempts.	2020-08-20 05:44:33

Recently Reported IPs

16.213.190.189	244.94.30.22	129.200.90.160	138.183.105.3
134.57.86.165	200.183.193.6	175.183.219.93	201.34.4.50
84.162.37.72	27.253.140.6	96.90.165.67	200.227.33.207
160.220.236.140	167.211.1.103	82.192.119.196	136.95.133.56
173.129.184.14	194.18.223.89	21.179.135.51	52.133.215.134