105.22.35.214 - IPInfo

Basic Info

City: Johannesburg

Region: Gauteng

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
105.22.35.170	attack	Jul 3 19:59:29 game-panel sshd[13682]: Failed password for root from 105.22.35.170 port 57138 ssh2 Jul 3 20:03:12 game-panel sshd[13934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.22.35.170 Jul 3 20:03:14 game-panel sshd[13934]: Failed password for invalid user oracle from 105.22.35.170 port 49904 ssh2	2020-07-04 04:29:38
105.22.35.14	attack	Unauthorized connection attempt from IP address 105.22.35.14 on Port 445(SMB)	2020-06-17 08:33:47
105.22.35.14	attackbotsspam	Unauthorized connection attempt from IP address 105.22.35.14 on Port 445(SMB)	2020-05-30 19:01:17
105.22.35.254	attackspam	firewall-block, port(s): 23/tcp	2020-05-12 16:35:33
105.22.35.14	attackspam	Unauthorized connection attempt from IP address 105.22.35.14 on Port 445(SMB)	2020-04-18 23:15:39
105.22.35.254	attackbotsspam	"Account brute force using dictionary attack against Exchange Online"	2019-08-06 06:45:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.22.35.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53740
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;105.22.35.214.			IN	A

;; AUTHORITY SECTION:
.			368	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101600 1800 900 604800 86400

;; Query time: 144 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 16 21:28:46 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 214.35.22.105.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 214.35.22.105.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
107.175.64.15	attackspam	TCP (SYN) 107.175.64.15:59198 -> port 23, len 44	2020-08-11 03:26:05
210.5.85.150	attackspam	Aug 10 16:11:01 PorscheCustomer sshd[32675]: Failed password for root from 210.5.85.150 port 35758 ssh2 Aug 10 16:15:49 PorscheCustomer sshd[347]: Failed password for root from 210.5.85.150 port 45966 ssh2 ...	2020-08-11 03:23:26
31.173.120.227	attack	Unauthorized connection attempt from IP address 31.173.120.227 on Port 445(SMB)	2020-08-11 03:28:53
133.242.53.108	attack	Aug 10 14:01:37 vm0 sshd[8544]: Failed password for root from 133.242.53.108 port 53430 ssh2 ...	2020-08-11 03:25:51
106.75.157.9	attackspambots	Aug 10 15:55:39 ns382633 sshd\[29718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.157.9 user=root Aug 10 15:55:42 ns382633 sshd\[29718\]: Failed password for root from 106.75.157.9 port 36778 ssh2 Aug 10 15:56:50 ns382633 sshd\[29829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.157.9 user=root Aug 10 15:56:52 ns382633 sshd\[29829\]: Failed password for root from 106.75.157.9 port 57994 ssh2 Aug 10 16:08:36 ns382633 sshd\[31807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.157.9 user=root	2020-08-11 03:36:30
45.231.12.37	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-10T16:19:06Z and 2020-08-10T16:26:27Z	2020-08-11 03:22:24
114.32.181.215	attack	IMAP	2020-08-11 03:43:18
179.7.225.227	attack	Unauthorised access (Aug 10) SRC=179.7.225.227 LEN=52 TTL=110 ID=5369 DF TCP DPT=445 WINDOW=8192 SYN	2020-08-11 03:46:43
123.207.153.52	attackbotsspam	Banned for a week because repeated abuses, for example SSH, but not only	2020-08-11 03:53:00
88.230.46.243	attackspam	Unauthorized connection attempt from IP address 88.230.46.243 on Port 445(SMB)	2020-08-11 03:28:24
188.165.42.223	attack	Aug 10 17:43:59 django-0 sshd[23519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip223.ip-188-165-42.eu user=root Aug 10 17:44:01 django-0 sshd[23519]: Failed password for root from 188.165.42.223 port 36022 ssh2 ...	2020-08-11 03:21:32
49.235.74.226	attackbotsspam	Aug 10 20:09:48 h2646465 sshd[7318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.74.226 user=root Aug 10 20:09:49 h2646465 sshd[7318]: Failed password for root from 49.235.74.226 port 33276 ssh2 Aug 10 20:18:17 h2646465 sshd[8514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.74.226 user=root Aug 10 20:18:19 h2646465 sshd[8514]: Failed password for root from 49.235.74.226 port 36682 ssh2 Aug 10 20:28:38 h2646465 sshd[9724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.74.226 user=root Aug 10 20:28:41 h2646465 sshd[9724]: Failed password for root from 49.235.74.226 port 59876 ssh2 Aug 10 20:31:56 h2646465 sshd[10284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.74.226 user=root Aug 10 20:31:58 h2646465 sshd[10284]: Failed password for root from 49.235.74.226 port 39362 ssh2 Aug 10 20:35:16 h2646465 sshd[1084	2020-08-11 03:28:36
103.99.201.160	attack	20/8/10@09:05:55: FAIL: Alarm-Network address from=103.99.201.160 ...	2020-08-11 03:35:24
49.236.203.163	attackbots	Aug 10 08:49:15 ws24vmsma01 sshd[244649]: Failed password for root from 49.236.203.163 port 59036 ssh2 Aug 10 09:00:55 ws24vmsma01 sshd[1855]: Failed password for root from 49.236.203.163 port 58326 ssh2 ...	2020-08-11 03:51:19
51.68.122.147	attackspam	Banned for a week because repeated abuses, for example SSH, but not only	2020-08-11 03:43:05

Recently Reported IPs

195.200.245.96	54.209.238.189	220.144.226.64	86.42.233.73
111.90.105.207	186.190.241.4	143.255.96.230	185.68.253.92
94.178.238.155	178.122.245.55	46.56.221.121	46.56.202.64
46.56.243.149	46.56.234.203	178.127.74.157	178.122.234.29
36.81.248.121	200.187.13.5	52.2.36.198	37.44.92.188