105.226.2.71 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
105.226.216.238	attack	Automatic report - Port Scan Attack	2020-01-02 13:33:30
105.226.216.238	attack	scan z	2019-12-31 13:13:09
105.226.224.19	attackspam	Honeypot attack, port: 445, PTR: 224-226-105-19.north.dsl.telkomsa.net.	2019-12-19 13:17:33
105.226.233.8	attackbotsspam	Automatic report - Port Scan Attack	2019-12-11 21:22:38
105.226.221.2	attackbots	port scan/probe/communication attempt; port 23	2019-11-28 09:31:28
105.226.221.2	attackspam	Attempted to connect 3 times to port 23 TCP	2019-11-27 16:12:29
105.226.221.2	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/105.226.221.2/ ZA - 1H : (13) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ZA NAME ASN : ASN37457 IP : 105.226.221.2 CIDR : 105.226.0.0/16 PREFIX COUNT : 64 UNIQUE IP COUNT : 806400 ATTACKS DETECTED ASN37457 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 3 DateTime : 2019-11-23 07:24:37 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-23 18:27:39
105.226.237.197	attack	php WP PHPmyadamin ABUSE blocked for 12h	2019-09-22 03:51:10
105.226.226.70	attackspambots	/wp-login.php	2019-09-20 10:51:44
105.226.252.209	attack	TCP Port: 25 _ invalid blocked dnsbl-sorbs abuseat-org _ _ _ _ (1049)	2019-06-24 06:21:23

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.226.2.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43563
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;105.226.2.71.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023112203 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 23 09:07:19 CST 2023
;; MSG SIZE  rcvd: 105

Host info

71.2.226.105.in-addr.arpa domain name pointer 2-226-105-71.east.dsl.telkomsa.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
71.2.226.105.in-addr.arpa	name = 2-226-105-71.east.dsl.telkomsa.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
220.135.34.207	attackbots	Unauthorised access (Aug 31) SRC=220.135.34.207 LEN=40 TTL=46 ID=31656 TCP DPT=23 WINDOW=16383 SYN	2020-08-31 13:46:16
213.239.216.194	attackspambots	20 attempts against mh-misbehave-ban on wave	2020-08-31 13:46:38
37.49.225.147	attackspambots	2020-08-31 06:51:52 auth_plain authenticator failed for (User) [37.49.225.147]: 535 Incorrect authentication data (set_id=webmaster@lavrinenko.info,) 2020-08-31 06:57:13 auth_plain authenticator failed for (User) [37.49.225.147]: 535 Incorrect authentication data (set_id=hostmaster@lavrinenko.info,) ...	2020-08-31 13:49:28
114.88.164.116	attack	Aug 31 05:57:34 web1 pure-ftpd: \(\?@114.88.164.116\) \[WARNING\] Authentication failed for user \[user\] Aug 31 05:57:40 web1 pure-ftpd: \(\?@114.88.164.116\) \[WARNING\] Authentication failed for user \[user\] Aug 31 05:57:49 web1 pure-ftpd: \(\?@114.88.164.116\) \[WARNING\] Authentication failed for user \[user\]	2020-08-31 13:25:51
161.35.126.137	attack	TCP (SYN) 161.35.126.137:21452 -> port 22, len 48	2020-08-31 13:41:30
49.145.8.93	attackspambots	php WP PHPmyadamin ABUSE blocked for 12h	2020-08-31 13:19:04
182.61.2.135	attack	Aug 31 07:16:25 lnxweb62 sshd[15251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.2.135	2020-08-31 13:28:45
117.247.238.10	attackspam	Aug 30 21:10:22 pixelmemory sshd[2580963]: Invalid user al from 117.247.238.10 port 36820 Aug 30 21:10:22 pixelmemory sshd[2580963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.247.238.10 Aug 30 21:10:22 pixelmemory sshd[2580963]: Invalid user al from 117.247.238.10 port 36820 Aug 30 21:10:24 pixelmemory sshd[2580963]: Failed password for invalid user al from 117.247.238.10 port 36820 ssh2 Aug 30 21:15:38 pixelmemory sshd[2581593]: Invalid user steam from 117.247.238.10 port 57484 ...	2020-08-31 13:31:53
80.162.1.98	attackspambots	Fail2Ban Ban Triggered	2020-08-31 13:44:42
51.91.77.109	attackspambots	Aug 31 12:15:38 webhost01 sshd[18209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.77.109 Aug 31 12:15:40 webhost01 sshd[18209]: Failed password for invalid user steam from 51.91.77.109 port 45616 ssh2 ...	2020-08-31 13:29:34
80.82.78.100	attack	UDP 80.82.78.100:44484 -> port 1541, len 57	2020-08-31 13:40:01
36.134.5.7	attack	bruteforce detected	2020-08-31 13:35:14
213.158.10.101	attackspambots	2020-08-30T22:37:06.8241291495-001 sshd[44055]: Failed password for invalid user physics from 213.158.10.101 port 50134 ssh2 2020-08-30T22:41:07.1862881495-001 sshd[44281]: Invalid user bartek from 213.158.10.101 port 53366 2020-08-30T22:41:07.1893751495-001 sshd[44281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101ppp10.telegraph.spb.ru 2020-08-30T22:41:07.1862881495-001 sshd[44281]: Invalid user bartek from 213.158.10.101 port 53366 2020-08-30T22:41:09.2381421495-001 sshd[44281]: Failed password for invalid user bartek from 213.158.10.101 port 53366 ssh2 2020-08-30T23:36:24.2710571495-001 sshd[46656]: Invalid user nagios from 213.158.10.101 port 42145 ...	2020-08-31 13:07:59
45.142.120.74	attackbotsspam	2020-08-30T23:39:16.740857linuxbox-skyline auth[48044]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=ns10 rhost=45.142.120.74 ...	2020-08-31 13:41:03
103.75.101.59	attack	Aug 31 06:41:10 cp sshd[18526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.75.101.59	2020-08-31 13:34:23

Recently Reported IPs

105.226.204.120	105.226.188.67	105.226.135.109	105.226.169.25
105.227.119.77	105.226.146.181	105.226.152.209	105.226.107.132
105.226.151.1	105.226.134.247	105.225.65.169	105.225.93.195
105.225.71.93	105.225.79.136	105.225.77.104	105.225.98.140
105.225.87.118	105.225.85.149	105.225.9.150	105.225.52.188