105.228.13.69 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
105.228.136.148	attack	Unauthorised access (Nov 4) SRC=105.228.136.148 LEN=52 TOS=0x14 TTL=111 ID=24614 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 4) SRC=105.228.136.148 LEN=52 TOS=0x14 TTL=111 ID=19497 DF TCP DPT=445 WINDOW=8192 SYN	2019-11-04 16:40:40
105.228.132.223	attack	TCP Port: 25 _ invalid blocked abuseat-org zen-spamhaus _ _ _ _ (1254)	2019-06-26 02:37:12

Type

Details

Datetime

105.228.136.148

attack

Unauthorised access (Nov  4) SRC=105.228.136.148 LEN=52 TOS=0x14 TTL=111 ID=24614 DF TCP DPT=445 WINDOW=8192 SYN 
Unauthorised access (Nov  4) SRC=105.228.136.148 LEN=52 TOS=0x14 TTL=111 ID=19497 DF TCP DPT=445 WINDOW=8192 SYN

2019-11-04 16:40:40

105.228.132.223

attack

TCP Port: 25 _    invalid blocked abuseat-org zen-spamhaus _  _  _ _ (1254)

2019-06-26 02:37:12

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.228.13.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46012
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;105.228.13.69.			IN	A

;; AUTHORITY SECTION:
.			333	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:22:45 CST 2022
;; MSG SIZE  rcvd: 106

Host info

69.13.228.105.in-addr.arpa domain name pointer 13-228-105-69.north.dsl.telkomsa.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
69.13.228.105.in-addr.arpa	name = 13-228-105-69.north.dsl.telkomsa.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
71.6.146.185	attackspam	Unauthorized connection attempt detected from IP address 71.6.146.185 to port 9295	2020-04-30 19:09:59
35.227.108.34	attack	Fail2Ban Ban Triggered (2)	2020-04-30 19:44:51
106.57.209.249	attackspam	Brute force blocker - service: proftpd1, proftpd2 - aantal: 155 - Sun Jun 3 01:40:15 2018	2020-04-30 19:08:43
222.186.175.202	attack	Apr 30 18:07:44 webhost01 sshd[24284]: Failed password for root from 222.186.175.202 port 20920 ssh2 Apr 30 18:07:57 webhost01 sshd[24284]: error: maximum authentication attempts exceeded for root from 222.186.175.202 port 20920 ssh2 [preauth] ...	2020-04-30 19:12:32
177.159.103.9	attack	(imapd) Failed IMAP login from 177.159.103.9 (BR/Brazil/trontec.static.gvt.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 30 08:52:40 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=177.159.103.9, lip=5.63.12.44, TLS, session=	2020-04-30 19:41:18
206.189.210.251	attackspam	'Fail2Ban'	2020-04-30 19:32:49
190.13.173.67	attackspam	2020-04-29 UTC: (36x) - admin,andreas,bo,control,cyber,daryl,digiacomo,dux,eggy,engineering,hkd,janus,kvm,manuela,marconi,minecraft,noe,nproc(4x),oracle,pdv,root(4x),ross,spark,svnuser,test,user3,web,webmaster,yohann,zhanghw	2020-04-30 19:14:33
125.118.151.178	attackspambots	lfd: (smtpauth) Failed SMTP AUTH login from 125.118.151.178 (-): 5 in the last 3600 secs - Sat Jun 2 08:21:48 2018	2020-04-30 19:04:03
88.32.154.37	attackbots	<6 unauthorized SSH connections	2020-04-30 19:06:19
67.205.162.223	attackbots	Apr 30 11:08:48 server sshd[3231]: Failed password for invalid user wiki from 67.205.162.223 port 44248 ssh2 Apr 30 11:13:27 server sshd[4300]: Failed password for invalid user ircd from 67.205.162.223 port 55046 ssh2 Apr 30 11:18:17 server sshd[5381]: Failed password for root from 67.205.162.223 port 37612 ssh2	2020-04-30 19:24:06
148.235.137.212	attackspam	Apr 30 12:49:30 eventyay sshd[20731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.235.137.212 Apr 30 12:49:31 eventyay sshd[20731]: Failed password for invalid user leslie from 148.235.137.212 port 43930 ssh2 Apr 30 12:54:19 eventyay sshd[20882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.235.137.212 ...	2020-04-30 19:03:30
193.56.170.117	attackbotsspam	Apr 30 06:28:37 sshgateway sshd\[24424\]: Invalid user ts3 from 193.56.170.117 Apr 30 06:28:37 sshgateway sshd\[24424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.56.170.117 Apr 30 06:28:38 sshgateway sshd\[24424\]: Failed password for invalid user ts3 from 193.56.170.117 port 48124 ssh2	2020-04-30 19:21:53
37.49.224.200	attackspam	lfd: (smtpauth) Failed SMTP AUTH login from 37.49.224.200 (NL/Netherlands/-): 5 in the last 3600 secs - Sat Jun 2 21:42:36 2018	2020-04-30 19:32:25
71.95.61.220	attackspambots	RDPBruteCAu	2020-04-30 19:15:42
221.195.162.75	attack	Brute force blocker - service: proftpd1, proftpd2 - aantal: 109 - Fri Jun 1 14:45:18 2018	2020-04-30 19:35:55

Recently Reported IPs

105.228.13.128	105.228.125.116	105.228.13.223	105.228.130.123
105.228.130.155	105.228.135.127	105.228.13.66	105.228.132.254
105.228.14.42	105.228.138.94	105.228.14.54	105.228.139.189
105.228.140.234	105.228.141.116	105.228.140.117	106.111.37.215
105.229.53.21	105.229.35.234	105.229.47.197	105.229.45.241