71.13.68.1 - IPInfo

Basic Info

City: Kalamazoo

Region: Michigan

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 71.13.68.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48858
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;71.13.68.1.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041603 1800 900 604800 86400

;; Query time: 90 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 17 07:27:28 CST 2020
;; MSG SIZE  rcvd: 114

Host info

1.68.13.71.in-addr.arpa domain name pointer 71-13-68-1.static.aldl.mi.charter.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
1.68.13.71.in-addr.arpa	name = 71-13-68-1.static.aldl.mi.charter.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
162.62.26.228	attackbots	1200/tcp 32780/udp 2121/tcp... [2020-06-28/08-28]11pkt,10pt.(tcp),1pt.(udp)	2020-08-28 18:33:51
192.241.223.74	attack	TCP (SYN) 192.241.223.74:58026 -> port 3011, len 44	2020-08-28 18:29:06
182.61.130.51	attack	SSH Brute-Force attacks	2020-08-28 18:12:41
185.55.164.32	botsproxy	185.55.164.0/22	2020-08-28 18:16:23
178.234.37.197	attack	Invalid user lv from 178.234.37.197 port 59366	2020-08-28 18:21:05
185.147.215.12	attack	[2020-08-28 06:36:12] NOTICE[1185] chan_sip.c: Registration from '' failed for '185.147.215.12:50470' - Wrong password [2020-08-28 06:36:12] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-28T06:36:12.886-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1861",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.12/50470",Challenge="099f17c6",ReceivedChallenge="099f17c6",ReceivedHash="8111dc4cab8729222d82bfdd60e7d040" [2020-08-28 06:36:35] NOTICE[1185] chan_sip.c: Registration from '' failed for '185.147.215.12:56950' - Wrong password [2020-08-28 06:36:35] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-28T06:36:35.696-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2351",SessionID="0x7f10c416cce8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.21 ...	2020-08-28 18:45:14
192.241.198.212	attack	Port scan denied	2020-08-28 18:39:49
196.52.43.103	attack	Unauthorized connection attempt detected from IP address 196.52.43.103 to port 8800 [T]	2020-08-28 18:14:42
92.118.160.37	attackbots	UDP port : 123	2020-08-28 18:17:35
2.206.2.137	attack	2020-08-28T03:48:39.090921randservbullet-proofcloud-66.localdomain sshd[15290]: Invalid user ubuntu from 2.206.2.137 port 35114 2020-08-28T03:48:39.095162randservbullet-proofcloud-66.localdomain sshd[15290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=dslb-002-206-002-137.002.206.pools.vodafone-ip.de 2020-08-28T03:48:39.090921randservbullet-proofcloud-66.localdomain sshd[15290]: Invalid user ubuntu from 2.206.2.137 port 35114 2020-08-28T03:48:41.118320randservbullet-proofcloud-66.localdomain sshd[15290]: Failed password for invalid user ubuntu from 2.206.2.137 port 35114 ssh2 ...	2020-08-28 18:12:27
13.77.215.23	attack	Lines containing failures of 13.77.215.23 Aug 24 09:07:20 penfold postfix/smtpd[13533]: connect from cvssurveyers.store[13.77.215.23] Aug 24 09:07:20 penfold policyd-spf[16377]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=13.77.215.23; helo=byloxie.ddns.net; envelope-from=x@x Aug x@x Aug 24 09:07:21 penfold policyd-spf[ .... truncated .... o.net> proto=ESMTP helo= Aug x@x Aug 24 13:29:38 penfold postfix/smtpd[18810]: 2A76F20BA7: client=cvssurveyers.store[13.77.215.23] Aug 24 13:29:39 penfold opendkim[21346]: 2A76F20BA7: cvssurveyers.store [13.77.215.23] not internal Aug 24 13:29:39 penfold postfix/smtpd[18810]: A7F7221033: client=cvssurveyers.store[13.77.215.23] Aug 24 13:29:39 penfold opendkim[21346]: A7F7221033: cvssurveyers.store [13.77.215.23] not internal Aug 24 13:29:40 penfold postfix/smtpd[18810]: 3471020BA7: client=cvssurveyers.store[13.77.215.23] Aug 24 13:29:40 penfold opendkim[21346]: 3471020BA7: cvssurveyers.st........ ------------------------------	2020-08-28 18:41:46
144.34.192.200	attackspam	Invalid user nova from 144.34.192.200 port 59616	2020-08-28 18:31:32
122.51.160.62	attack	Aug 28 08:56:04 home sshd[1927675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.160.62 Aug 28 08:56:04 home sshd[1927675]: Invalid user kd from 122.51.160.62 port 44238 Aug 28 08:56:06 home sshd[1927675]: Failed password for invalid user kd from 122.51.160.62 port 44238 ssh2 Aug 28 08:58:45 home sshd[1928533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.160.62 user=root Aug 28 08:58:47 home sshd[1928533]: Failed password for root from 122.51.160.62 port 46358 ssh2 ...	2020-08-28 18:38:27
132.232.43.111	attackbotsspam	2020-08-28T10:21:39.128011upcloud.m0sh1x2.com sshd[21430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.43.111 user=root 2020-08-28T10:21:41.254970upcloud.m0sh1x2.com sshd[21430]: Failed password for root from 132.232.43.111 port 47396 ssh2	2020-08-28 18:26:54
175.155.96.197	attackspam	Unauthorized connection attempt detected from IP address 175.155.96.197 to port 23 [T]	2020-08-28 18:21:24

Recently Reported IPs

18.230.196.126	96.72.136.24	45.4.53.54	125.180.41.116
92.70.113.145	37.117.255.186	148.213.148.171	219.235.52.182
87.251.74.248	121.113.79.182	60.101.29.221	2.51.118.239
183.84.113.11	74.207.6.102	93.201.88.47	130.76.25.117
37.21.123.19	51.105.26.111	157.51.136.200	125.125.223.144