Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Johannesburg

Region: Gauteng

Country: South Africa

Internet Service Provider: Telkom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.228.99.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55641
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;197.228.99.2.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090901 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 10 01:22:37 CST 2019
;; MSG SIZE  rcvd: 116
Host info
2.99.228.197.in-addr.arpa domain name pointer 8ta-228-99-02.telkomadsl.co.za.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
2.99.228.197.in-addr.arpa	name = 8ta-228-99-02.telkomadsl.co.za.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
218.27.204.33 attack
Oct 28 04:48:18 lnxmysql61 sshd[7525]: Failed password for root from 218.27.204.33 port 58976 ssh2
Oct 28 04:48:18 lnxmysql61 sshd[7525]: Failed password for root from 218.27.204.33 port 58976 ssh2
2019-10-28 17:49:59
171.229.220.193 attackspam
Telnetd brute force attack detected by fail2ban
2019-10-28 17:51:44
106.251.118.123 attackspam
2019-10-28T09:28:18.377895abusebot-5.cloudsearch.cf sshd\[15281\]: Invalid user guest from 106.251.118.123 port 35426
2019-10-28 17:42:00
218.91.54.178 attackbotsspam
Automatic report - FTP Brute Force
2019-10-28 18:12:06
114.225.223.18 attackspam
Oct 27 23:47:41 esmtp postfix/smtpd[16978]: lost connection after AUTH from unknown[114.225.223.18]
Oct 27 23:47:42 esmtp postfix/smtpd[16978]: lost connection after AUTH from unknown[114.225.223.18]
Oct 27 23:47:43 esmtp postfix/smtpd[16978]: lost connection after AUTH from unknown[114.225.223.18]
Oct 27 23:47:45 esmtp postfix/smtpd[16978]: lost connection after AUTH from unknown[114.225.223.18]
Oct 27 23:47:47 esmtp postfix/smtpd[16978]: lost connection after AUTH from unknown[114.225.223.18]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=114.225.223.18
2019-10-28 18:05:15
90.20.27.230 attack
Unauthorised access (Oct 28) SRC=90.20.27.230 LEN=44 TOS=0x10 PREC=0x40 TTL=51 ID=22941 TCP DPT=23 WINDOW=24457 SYN
2019-10-28 17:59:08
221.227.74.226 attackbotsspam
Oct 27 23:48:45 esmtp postfix/smtpd[16989]: lost connection after AUTH from unknown[221.227.74.226]
Oct 27 23:48:46 esmtp postfix/smtpd[16938]: lost connection after AUTH from unknown[221.227.74.226]
Oct 27 23:48:48 esmtp postfix/smtpd[16989]: lost connection after AUTH from unknown[221.227.74.226]
Oct 27 23:48:49 esmtp postfix/smtpd[16938]: lost connection after AUTH from unknown[221.227.74.226]
Oct 27 23:48:51 esmtp postfix/smtpd[16989]: lost connection after AUTH from unknown[221.227.74.226]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=221.227.74.226
2019-10-28 17:34:41
113.193.184.26 attackbots
113.193.184.26 - - [28/Oct/2019:04:48:45 +0100] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
113.193.184.26 - - [28/Oct/2019:04:48:46 +0100] "POST /wp-login.php HTTP/1.1" 200 1526 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
113.193.184.26 - - [28/Oct/2019:04:48:48 +0100] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
113.193.184.26 - - [28/Oct/2019:04:48:48 +0100] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
113.193.184.26 - - [28/Oct/2019:04:48:49 +0100] "POST /wp-login.php HTTP/1.1" 200 1524 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
113.193.184.26 - - [28/Oct/2019:04:48:49 +0100] "POST /wp-login.php HTTP/1.1" 200 1530 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-10-28 17:36:41
104.248.121.67 attackbotsspam
Oct 28 08:30:00 OPSO sshd\[26054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.121.67  user=root
Oct 28 08:30:01 OPSO sshd\[26054\]: Failed password for root from 104.248.121.67 port 49793 ssh2
Oct 28 08:34:01 OPSO sshd\[26878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.121.67  user=root
Oct 28 08:34:03 OPSO sshd\[26878\]: Failed password for root from 104.248.121.67 port 40743 ssh2
Oct 28 08:37:52 OPSO sshd\[27610\]: Invalid user qhsupport from 104.248.121.67 port 59926
Oct 28 08:37:52 OPSO sshd\[27610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.121.67
2019-10-28 17:42:45
200.44.71.8 attack
Automatic report - Port Scan Attack
2019-10-28 17:51:14
92.222.77.175 attack
2019-10-15T11:46:44.625306ns525875 sshd\[28662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.ip-92-222-77.eu  user=root
2019-10-15T11:46:46.507032ns525875 sshd\[28662\]: Failed password for root from 92.222.77.175 port 43650 ssh2
2019-10-15T11:50:16.178761ns525875 sshd\[470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.ip-92-222-77.eu  user=root
2019-10-15T11:50:18.007524ns525875 sshd\[470\]: Failed password for root from 92.222.77.175 port 53214 ssh2
2019-10-15T11:53:42.929806ns525875 sshd\[4731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.ip-92-222-77.eu  user=root
2019-10-15T11:53:45.038676ns525875 sshd\[4731\]: Failed password for root from 92.222.77.175 port 34538 ssh2
2019-10-15T11:57:10.697545ns525875 sshd\[9093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.ip-92-222-77.eu 
...
2019-10-28 17:40:14
82.118.242.128 attackbotsspam
ssh brute force
2019-10-28 18:08:27
112.85.42.87 attack
Oct 27 23:59:01 sachi sshd\[25142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.87  user=root
Oct 27 23:59:03 sachi sshd\[25142\]: Failed password for root from 112.85.42.87 port 23320 ssh2
Oct 27 23:59:37 sachi sshd\[25200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.87  user=root
Oct 27 23:59:39 sachi sshd\[25200\]: Failed password for root from 112.85.42.87 port 21528 ssh2
Oct 28 00:00:14 sachi sshd\[25280\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.87  user=root
2019-10-28 18:07:26
77.51.211.220 attackbots
2019-10-25T16:02:46.727572ns525875 sshd\[28627\]: Invalid user lilamer from 77.51.211.220 port 46194
2019-10-25T16:02:46.732782ns525875 sshd\[28627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.51.211.220
2019-10-25T16:02:48.873953ns525875 sshd\[28627\]: Failed password for invalid user lilamer from 77.51.211.220 port 46194 ssh2
2019-10-25T16:06:33.795298ns525875 sshd\[739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.51.211.220  user=root
2019-10-25T16:06:35.434636ns525875 sshd\[739\]: Failed password for root from 77.51.211.220 port 56446 ssh2
2019-10-25T16:10:18.308899ns525875 sshd\[5520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.51.211.220  user=root
2019-10-25T16:10:20.170269ns525875 sshd\[5520\]: Failed password for root from 77.51.211.220 port 38458 ssh2
2019-10-25T16:14:04.519360ns525875 sshd\[10272\]: pam_unix\(sshd:auth\):
...
2019-10-28 17:50:53
45.227.253.139 attack
Oct 28 10:53:36 relay postfix/smtpd\[10167\]: warning: unknown\[45.227.253.139\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 28 10:53:52 relay postfix/smtpd\[10166\]: warning: unknown\[45.227.253.139\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 28 10:54:12 relay postfix/smtpd\[10168\]: warning: unknown\[45.227.253.139\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 28 10:54:37 relay postfix/smtpd\[14118\]: warning: unknown\[45.227.253.139\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 28 10:54:44 relay postfix/smtpd\[5403\]: warning: unknown\[45.227.253.139\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-10-28 18:01:14

Recently Reported IPs

44.254.11.138 71.82.38.134 41.199.193.124 128.172.189.11
27.67.17.246 50.25.240.176 172.81.157.198 81.218.85.30
36.30.106.132 93.33.88.144 192.227.252.11 191.171.223.209
186.142.60.115 209.124.215.185 174.128.91.217 14.227.40.96
65.36.63.101 24.129.32.102 80.103.26.79 130.219.228.107