2.17.85.205 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.17.85.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39197
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.17.85.205.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 05:31:18 CST 2025
;; MSG SIZE  rcvd: 104

Host info

205.85.17.2.in-addr.arpa domain name pointer a2-17-85-205.deploy.static.akamaitechnologies.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
205.85.17.2.in-addr.arpa	name = a2-17-85-205.deploy.static.akamaitechnologies.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
193.178.229.186	attack	Automatic report - Banned IP Access	2020-08-18 18:25:12
49.235.229.211	attackspambots	SSH brutforce	2020-08-18 17:52:17
2a02:a03f:6784:e200:a03a:4f6d:d809:5fde	attackspam	Aug 18 06:48:13 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=2a02:a03f:6784:e200:a03a:4f6d:d809:5fde, lip=2a01:7e01:e001:164::, session= Aug 18 06:48:20 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=2a02:a03f:6784:e200:a03a:4f6d:d809:5fde, lip=2a01:7e01:e001:164::, session= Aug 18 06:48:20 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=2a02:a03f:6784:e200:a03a:4f6d:d809:5fde, lip=2a01:7e01:e001:164::, session= Aug 18 06:48:32 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=2a02:a03f:6784:e200:a03a:4f6d:d809:5fde, lip=2a01:7e01:e001:164::, session=	2020-08-18 18:10:34
168.61.72.51	attackbots	Aug 18 06:35:14 ws22vmsma01 sshd[220079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.61.72.51 Aug 18 06:35:16 ws22vmsma01 sshd[220079]: Failed password for invalid user own from 168.61.72.51 port 50110 ssh2 ...	2020-08-18 17:53:12
98.159.99.46	attackspambots	TCP (SYN) 98.159.99.46:6000 -> port 3306, len 40	2020-08-18 17:48:43
185.175.93.4	attackbots	Port scan: Attack repeated for 24 hours	2020-08-18 18:07:02
92.63.196.28	attack	TCP ports : 5560 / 5561 / 5562 / 13858 / 13859 / 13860 / 18316 / 18317 / 18318 / 20173 / 20174 / 20175 / 63577 / 63578 / 63579	2020-08-18 18:18:34
192.99.172.138	attackspam	192.99.172.138 - - [18/Aug/2020:11:45:52 +0200] "POST /xmlrpc.php HTTP/2.0" 403 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 192.99.172.138 - - [18/Aug/2020:11:45:52 +0200] "POST /xmlrpc.php HTTP/2.0" 403 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" ...	2020-08-18 18:16:57
103.136.40.26	attackbots	Multiple SSH authentication failures from 103.136.40.26	2020-08-18 17:58:06
64.225.67.104	attackspambots	TCP port : 4782	2020-08-18 18:28:49
120.131.11.49	attackspam	Aug 18 07:11:08 sigma sshd\[19389\]: Invalid user edu01 from 120.131.11.49Aug 18 07:11:10 sigma sshd\[19389\]: Failed password for invalid user edu01 from 120.131.11.49 port 40824 ssh2 ...	2020-08-18 17:51:49
66.117.12.196	attack	" "	2020-08-18 17:54:11
74.82.47.2	attackspam	srvr1: (mod_security) mod_security (id:920350) triggered by 74.82.47.2 (US/-/scan-09.shadowserver.org): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/18 05:11:18 [error] 267988#0: 417409 [client 74.82.47.2] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "159772747860.669048"] [ref "o0,13v21,13"], client: 74.82.47.2, [redacted] request: "GET / HTTP/1.1" [redacted]	2020-08-18 18:20:33
189.237.240.43	attackspam	Automated report (2020-08-18T11:50:20+08:00). Referrer spam originating from this address detected (anti-crisis-seo.com).	2020-08-18 18:03:13
114.33.237.155	attack	firewall-block, port(s): 23/tcp	2020-08-18 18:09:14

Recently Reported IPs

220.65.198.232	163.121.43.54	95.214.200.249	61.100.47.69
153.245.77.196	53.241.71.75	235.236.187.156	54.71.55.146
144.30.85.141	134.137.172.222	240.70.164.248	115.14.29.176
69.174.3.90	45.99.93.74	237.86.93.24	41.128.117.99
54.22.108.44	169.139.93.98	181.58.155.11	169.165.169.253