105.247.5.195 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
105.247.5.148	attackspam	Unauthorized connection attempt detected from IP address 105.247.5.148 to port 445	2019-12-09 02:01:36
105.247.57.55	attackbotsspam	Telnetd brute force attack detected by fail2ban	2019-10-27 00:38:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.247.5.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59951
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;105.247.5.195.			IN	A

;; AUTHORITY SECTION:
.			271	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 05:12:56 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 195.5.247.105.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 195.5.247.105.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
216.49.160.151	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-05 05:09:48
95.25.2.225	attackbots	port scan and connect, tcp 23 (telnet)	2020-02-05 04:56:46
64.225.12.217	attackspambots	Feb 4 21:15:08 server378 sshd[15198]: Invalid user sagstuen from 64.225.12.217 Feb 4 21:15:08 server378 sshd[15198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.12.217 Feb 4 21:15:09 server378 sshd[15198]: Failed password for invalid user sagstuen from 64.225.12.217 port 32818 ssh2 Feb 4 21:15:09 server378 sshd[15198]: Received disconnect from 64.225.12.217: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=64.225.12.217	2020-02-05 05:10:14
49.235.192.71	attackspambots	Feb 4 21:18:35 ns382633 sshd\[7008\]: Invalid user ftpuser from 49.235.192.71 port 56012 Feb 4 21:18:35 ns382633 sshd\[7008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.192.71 Feb 4 21:18:37 ns382633 sshd\[7008\]: Failed password for invalid user ftpuser from 49.235.192.71 port 56012 ssh2 Feb 4 21:20:28 ns382633 sshd\[7652\]: Invalid user admin from 49.235.192.71 port 41882 Feb 4 21:20:28 ns382633 sshd\[7652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.192.71	2020-02-05 05:06:38
83.137.1.211	attackspambots	Feb 4 21:20:28 grey postfix/smtpd\[25101\]: NOQUEUE: reject: RCPT from unknown\[83.137.1.211\]: 554 5.7.1 Service unavailable\; Client host \[83.137.1.211\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=83.137.1.211\; from=\ to=\ proto=ESMTP helo=\<\[83.137.1.211\]\> ...	2020-02-05 05:06:15
5.188.86.22	attackspambots	RDP Scan	2020-02-05 04:57:02
200.233.240.48	attack	Unauthorized connection attempt detected from IP address 200.233.240.48 to port 2220 [J]	2020-02-05 04:58:38
162.243.131.51	attackbots	firewall-block, port(s): 9443/tcp	2020-02-05 05:20:19
212.47.241.15	attack	Feb 4 11:02:02 web9 sshd\[28267\]: Invalid user haro from 212.47.241.15 Feb 4 11:02:02 web9 sshd\[28267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.241.15 Feb 4 11:02:05 web9 sshd\[28267\]: Failed password for invalid user haro from 212.47.241.15 port 49678 ssh2 Feb 4 11:04:45 web9 sshd\[28645\]: Invalid user test from 212.47.241.15 Feb 4 11:04:45 web9 sshd\[28645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.241.15	2020-02-05 05:07:24
94.220.252.139	attack	Email rejected due to spam filtering	2020-02-05 05:14:04
121.159.50.45	attackbots	Honeypot attack, port: 4567, PTR: PTR record not found	2020-02-05 05:02:37
201.138.51.140	attackspambots	Honeypot attack, port: 445, PTR: dsl-201-138-51-140-dyn.prod-infinitum.com.mx.	2020-02-05 04:50:41
217.115.10.131	attack	02/04/2020-21:20:26.436390 217.115.10.131 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 56	2020-02-05 05:09:16
159.65.19.39	attackbots	Automatic report - XMLRPC Attack	2020-02-05 04:44:40
210.12.215.225	attack	(sshd) Failed SSH login from 210.12.215.225 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb 4 21:02:04 elude sshd[28450]: Invalid user a from 210.12.215.225 port 44990 Feb 4 21:02:06 elude sshd[28450]: Failed password for invalid user a from 210.12.215.225 port 44990 ssh2 Feb 4 21:16:22 elude sshd[29288]: Invalid user wpyan from 210.12.215.225 port 49449 Feb 4 21:16:24 elude sshd[29288]: Failed password for invalid user wpyan from 210.12.215.225 port 49449 ssh2 Feb 4 21:20:46 elude sshd[29523]: Invalid user czwirn from 210.12.215.225 port 33666	2020-02-05 04:43:47

Recently Reported IPs

105.245.122.63	105.247.5.202	105.255.155.14	105.255.157.123
105.255.188.150	105.27.115.126	105.27.115.182	105.255.186.61
105.27.162.118	105.27.174.242	105.27.174.42	105.27.181.2
105.27.192.54	105.27.193.74	105.27.197.114	105.27.198.122
105.27.199.230	105.27.205.2	105.28.104.0	105.28.104.203