71.242.108.85 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Verizon

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 71.242.108.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11419
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;71.242.108.85.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091600 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 17 00:44:04 CST 2019
;; MSG SIZE  rcvd: 117

Host info

85.108.242.71.in-addr.arpa domain name pointer pool-71-242-108-85.phlapa.east.verizon.net.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
85.108.242.71.in-addr.arpa	name = pool-71-242-108-85.phlapa.east.verizon.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.232.51.237	attack	Feb 13 04:25:08 web1 sshd\[13037\]: Invalid user pck from 49.232.51.237 Feb 13 04:25:08 web1 sshd\[13037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.51.237 Feb 13 04:25:11 web1 sshd\[13037\]: Failed password for invalid user pck from 49.232.51.237 port 42904 ssh2 Feb 13 04:28:22 web1 sshd\[13315\]: Invalid user endian from 49.232.51.237 Feb 13 04:28:22 web1 sshd\[13315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.51.237	2020-02-14 02:42:21
82.207.73.168	attackspambots	Unauthorized connection attempt from IP address 82.207.73.168 on Port 445(SMB)	2020-02-14 03:05:13
162.243.129.135	attackspam	Port 5631 scan denied	2020-02-14 03:16:01
94.29.126.41	attackspambots	Unauthorized connection attempt from IP address 94.29.126.41 on Port 445(SMB)	2020-02-14 03:10:46
59.48.172.93	attack	Telnet/23 MH Probe, BF, Hack -	2020-02-14 03:05:38
59.93.238.117	attackspam	Telnet/23 MH Probe, BF, Hack -	2020-02-14 02:35:38
192.241.235.74	attackbotsspam	Port 12021 scan denied	2020-02-14 03:12:28
118.163.197.27	attack	1581601571 - 02/13/2020 14:46:11 Host: 118.163.197.27/118.163.197.27 Port: 445 TCP Blocked	2020-02-14 03:03:24
51.89.99.24	attackspam	[2020-02-13 14:04:16] NOTICE[1148] chan_sip.c: Registration from '"999" ' failed for '51.89.99.24:6768' - Wrong password [2020-02-13 14:04:16] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-13T14:04:16.298-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="999",SessionID="0x7fd82ca712e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.89.99.24/6768",Challenge="57a8630a",ReceivedChallenge="57a8630a",ReceivedHash="1c84146455823dffea552d935a193f3b" [2020-02-13 14:04:16] NOTICE[1148] chan_sip.c: Registration from '"999" ' failed for '51.89.99.24:6768' - Wrong password [2020-02-13 14:04:16] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-13T14:04:16.434-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="999",SessionID="0x7fd82c895338",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.89.99.24/67 ...	2020-02-14 03:06:30
91.77.165.18	attack	SSH Bruteforce attack	2020-02-14 02:55:34
43.245.47.114	attackspambots	Lines containing failures of 43.245.47.114 Feb 13 11:05:53 home sshd[5105]: Invalid user admin from 43.245.47.114 port 53192 Feb 13 11:05:53 home sshd[5105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.245.47.114 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=43.245.47.114	2020-02-14 02:58:19
93.183.71.37	attackbots	Unauthorized connection attempt from IP address 93.183.71.37 on Port 445(SMB)	2020-02-14 02:45:27
182.76.208.222	attackspambots	Feb 13 10:03:43 XXX sshd[16080]: Did not receive identification string from 182.76.208.222 Feb 13 10:03:43 XXX sshd[16083]: Did not receive identification string from 182.76.208.222 Feb 13 10:03:43 XXX sshd[16082]: Did not receive identification string from 182.76.208.222 Feb 13 10:03:43 XXX sshd[16084]: Did not receive identification string from 182.76.208.222 Feb 13 10:03:43 XXX sshd[16085]: Did not receive identification string from 182.76.208.222 Feb 13 10:03:43 XXX sshd[16086]: Did not receive identification string from 182.76.208.222 Feb 13 10:03:43 XXX sshd[16081]: Did not receive identification string from 182.76.208.222 Feb 13 10:03:47 XXX sshd[16095]: Address 182.76.208.222 maps to nsg-static-222.208.76.182-airtel.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Feb 13 10:03:47 XXX sshd[16095]: Invalid user user1 from 182.76.208.222 Feb 13 10:03:47 XXX sshd[16097]: Address 182.76.208.222 maps to nsg-static-222.208.76.182-airtel.com, ........ -------------------------------	2020-02-14 02:38:31
222.186.175.183	attack	SSH Login Bruteforce	2020-02-14 03:02:09
110.164.139.210	attack	ssh brute force	2020-02-14 02:51:05

Recently Reported IPs

112.196.165.66	168.200.64.54	89.42.31.221	66.130.142.75
85.200.250.140	49.90.235.125	184.57.171.185	184.141.68.202
177.193.232.213	70.45.65.193	101.165.3.223	183.145.137.168
174.98.121.49	170.213.97.210	61.84.247.231	84.174.122.14
72.49.254.252	180.165.40.255	181.68.109.192	23.106.147.195