City: unknown
Region: unknown
Country: United States
Internet Service Provider: Softcom Internet Communications, Inc
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 70.39.128.0 - 70.39.255.255
CIDR: 70.39.128.0/17
NetName: NETBLK-PACKETEXCHANGE-V4-10
NetHandle: NET-70-39-128-0-1
Parent: NET70 (NET-70-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: PacketExchange, Inc (PACKE-25)
RegDate: 2009-11-24
Updated: 2012-02-24
Ref: https://rdap.arin.net/registry/ip/70.39.128.0
OrgName: PacketExchange, Inc
OrgId: PACKE-25
Address: GTT Communications, Inc.
Address: 8484 Westpark Drive
Address: Suite 720
City: McLean
StateProv: VA
PostalCode: 22102
Country: US
RegDate: 2008-02-26
Updated: 2025-04-17
Ref: https://rdap.arin.net/registry/entity/PACKE-25
OrgAbuseHandle: GAD46-ARIN
OrgAbuseName: GTT Abuse Department
OrgAbusePhone: +1-703-442-5501
OrgAbuseEmail: abuse@gtt.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/GAD46-ARIN
OrgTechHandle: AS3251-ARIN
OrgTechName: AS3257 Netguard
OrgTechPhone: +49 69 48007422
OrgTechEmail: netguard@gtt.net
OrgTechRef: https://rdap.arin.net/registry/entity/AS3251-ARIN
OrgTechHandle: GNOC16-ARIN
OrgTechName: GTT Network Operations Center
OrgTechPhone: +1-703-442-5500
OrgTechEmail: noc@gtt.net
OrgTechRef: https://rdap.arin.net/registry/entity/GNOC16-ARIN
OrgNOCHandle: GNOC16-ARIN
OrgNOCName: GTT Network Operations Center
OrgNOCPhone: +1-703-442-5500
OrgNOCEmail: noc@gtt.net
OrgNOCRef: https://rdap.arin.net/registry/entity/GNOC16-ARIN
OrgTechHandle: GIT5-ARIN
OrgTechName: GTT IPAM Team
OrgTechPhone: +1-703-442-5500
OrgTechEmail: netguard@gtt.net
OrgTechRef: https://rdap.arin.net/registry/entity/GIT5-ARIN
# end
# start
NetRange: 70.39.176.0 - 70.39.183.255
CIDR: 70.39.176.0/21
NetName: GTT-JUNYUU-NET
NetHandle: NET-70-39-176-0-1
Parent: NETBLK-PACKETEXCHANGE-V4-10 (NET-70-39-128-0-1)
NetType: Reallocated
OriginAS:
Organization: NetLab Global (HOSTH-5)
RegDate: 2025-08-06
Updated: 2025-08-06
Ref: https://rdap.arin.net/registry/ip/70.39.176.0
OrgName: NetLab Global
OrgId: HOSTH-5
Address: 110 W 40TH ST STE200
City: NEW YORK
StateProv: NY
PostalCode: 10018
Country: US
RegDate: 2022-02-26
Updated: 2025-07-30
Comment: Geofeed https://ip-allocation.as979.net/geofeed.csv
Ref: https://rdap.arin.net/registry/entity/HOSTH-5
OrgTechHandle: LEERI36-ARIN
OrgTechName: Lee, Richard
OrgTechPhone: +1-213-674-6718
OrgTechEmail: noc@as979.net
OrgTechRef: https://rdap.arin.net/registry/entity/LEERI36-ARIN
OrgAbuseHandle: LIUFR3-ARIN
OrgAbuseName: Liu, Frid
OrgAbusePhone: +1-213-674-6718
OrgAbuseEmail: legal@as979.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LIUFR3-ARIN
# end
# start
NetRange: 70.39.176.0 - 70.39.183.255
CIDR: 70.39.176.0/21
NetName: GTT
NetHandle: NET-70-39-176-0-2
Parent: GTT-JUNYUU-NET (NET-70-39-176-0-1)
NetType: Reassigned
OriginAS:
Customer: GTT Communications Inc. (C11308732)
RegDate: 2025-08-06
Updated: 2025-08-06
Ref: https://rdap.arin.net/registry/ip/70.39.176.0
CustName: GTT Communications Inc.
Address: 900 N Alameda ST
City: Los Angeles
StateProv: CA
PostalCode: 90014
Country: US
RegDate: 2025-08-06
Updated: 2025-08-06
Ref: https://rdap.arin.net/registry/entity/C11308732
OrgTechHandle: LEERI36-ARIN
OrgTechName: Lee, Richard
OrgTechPhone: +1-213-674-6718
OrgTechEmail: noc@as979.net
OrgTechRef: https://rdap.arin.net/registry/entity/LEERI36-ARIN
OrgAbuseHandle: LIUFR3-ARIN
OrgAbuseName: Liu, Frid
OrgAbusePhone: +1-213-674-6718
OrgAbuseEmail: legal@as979.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LIUFR3-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 70.39.176.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2125
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;70.39.176.172. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026020400 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 04 20:52:32 CST 2026
;; MSG SIZE rcvd: 106b';; connection timed out; no servers could be reached
'server can't find 70.39.176.172.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.175.140 | attackspambots | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140 user=root Failed password for root from 222.186.175.140 port 62618 ssh2 Failed password for root from 222.186.175.140 port 62618 ssh2 Failed password for root from 222.186.175.140 port 62618 ssh2 Failed password for root from 222.186.175.140 port 62618 ssh2 |
2019-12-25 05:18:26 |
| 129.146.142.82 | attackbots | Triggered: repeated knocking on closed ports. |
2019-12-25 04:46:40 |
| 189.51.101.126 | attackspam | proto=tcp . spt=38110 . dpt=25 . (Listed on MailSpike (spam wave plus L3-L5) also truncate-gbudb and unsubscore) (443) |
2019-12-25 05:07:20 |
| 185.176.27.102 | attack | Dec 24 21:18:09 debian-2gb-nbg1-2 kernel: \[871427.569282\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.102 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=44649 PROTO=TCP SPT=45576 DPT=10585 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-25 05:19:41 |
| 118.24.162.32 | attackspam | Dec 24 20:53:58 XXX sshd[31145]: Invalid user supersys from 118.24.162.32 port 45272 |
2019-12-25 05:02:52 |
| 49.232.5.122 | attack | Dec 24 18:27:46 mout sshd[27991]: Invalid user basnett from 49.232.5.122 port 55594 |
2019-12-25 04:57:05 |
| 59.115.194.110 | attack | firewall-block, port(s): 23/tcp |
2019-12-25 04:56:38 |
| 43.228.222.114 | attackbots | proto=tcp . spt=58127 . dpt=25 . (Listed on MailSpike (spam wave plus L3-L5) also unsubscore and rbldns-ru) (447) |
2019-12-25 04:45:01 |
| 200.27.18.138 | attackbots | proto=tcp . spt=50980 . dpt=25 . (Found on Dark List de Dec 24) (446) |
2019-12-25 04:59:51 |
| 45.125.66.202 | attack | 2019-12-24 dovecot_login authenticator failed for \(User\) \[45.125.66.202\]: 535 Incorrect authentication data \(set_id=colorado\) 2019-12-24 dovecot_login authenticator failed for \(User\) \[45.125.66.202\]: 535 Incorrect authentication data \(set_id=zzzzzz\) 2019-12-24 dovecot_login authenticator failed for \(User\) \[45.125.66.202\]: 535 Incorrect authentication data \(set_id=apollo1\) |
2019-12-25 05:14:15 |
| 103.41.25.77 | attackbotsspam | Unauthorized connection attempt detected from IP address 103.41.25.77 to port 1433 |
2019-12-25 04:59:17 |
| 182.61.181.213 | attackbotsspam | $f2bV_matches |
2019-12-25 04:51:20 |
| 104.168.145.77 | attackbots | Dec 24 15:29:42 unicornsoft sshd\[14325\]: User root from 104.168.145.77 not allowed because not listed in AllowUsers Dec 24 15:29:43 unicornsoft sshd\[14325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77 user=root Dec 24 15:29:45 unicornsoft sshd\[14325\]: Failed password for invalid user root from 104.168.145.77 port 57820 ssh2 |
2019-12-25 05:03:54 |
| 63.83.78.249 | attack | Lines containing failures of 63.83.78.249 Dec 24 15:41:59 shared04 postfix/smtpd[14817]: connect from taunt.qdzpjgc.com[63.83.78.249] Dec 24 15:41:59 shared04 policyd-spf[14831]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=63.83.78.249; helo=taunt.ontopon.com; envelope-from=x@x Dec x@x Dec 24 15:41:59 shared04 postfix/smtpd[14817]: disconnect from taunt.qdzpjgc.com[63.83.78.249] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Dec 24 15:42:40 shared04 postfix/smtpd[14990]: connect from taunt.qdzpjgc.com[63.83.78.249] Dec 24 15:42:40 shared04 policyd-spf[16097]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=63.83.78.249; helo=taunt.ontopon.com; envelope-from=x@x Dec x@x Dec 24 15:42:40 shared04 postfix/smtpd[14990]: disconnect from taunt.qdzpjgc.com[63.83.78.249] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Dec 24 15:44:46 shared04 postfix/smtpd[13520]: connect from taunt.qdzpjgc.com[63.83.78.24........ ------------------------------ |
2019-12-25 05:15:09 |
| 197.50.28.165 | attackbotsspam | 1577201384 - 12/24/2019 16:29:44 Host: 197.50.28.165/197.50.28.165 Port: 445 TCP Blocked |
2019-12-25 05:04:57 |