131.196.13.106

Basic Info

City: unknown

Region: unknown

Country: Ecuador

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
131.196.13.8	attack	2019-02-26 18:56:06 H=\(\[131.196.13.8\]\) \[131.196.13.8\]:38031 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-02-26 18:56:09 H=\(\[131.196.13.8\]\) \[131.196.13.8\]:38096 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-02-26 18:56:11 H=\(\[131.196.13.8\]\) \[131.196.13.8\]:38152 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 04:22:42

Type

Details

Datetime

131.196.13.8

attack

2019-02-26 18:56:06 H=\(\[131.196.13.8\]\) \[131.196.13.8\]:38031 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-02-26 18:56:09 H=\(\[131.196.13.8\]\) \[131.196.13.8\]:38096 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-02-26 18:56:11 H=\(\[131.196.13.8\]\) \[131.196.13.8\]:38152 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2020-02-05 04:22:42

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.196.13.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11329
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;131.196.13.106.			IN	A

;; AUTHORITY SECTION:
.			439	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 07:06:08 CST 2022
;; MSG SIZE  rcvd: 107

Host info

106.13.196.131.in-addr.arpa domain name pointer host-131-196-13-106.nedetel.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
106.13.196.131.in-addr.arpa	name = host-131-196-13-106.nedetel.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.103.243.59	attack	UDP 60 59259 → bacnet(47808)	2019-10-16 16:08:36
46.35.184.187	attack	2019-10-15 22:25:23 H=(lomopress.it) [46.35.184.187]:51316 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-10-15 22:25:24 H=(lomopress.it) [46.35.184.187]:51316 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-10-15 22:25:24 H=(lomopress.it) [46.35.184.187]:51316 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-10-16 16:10:53
106.13.19.75	attackspam	2019-10-16T04:30:05.726820abusebot.cloudsearch.cf sshd\[18104\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.75 user=root	2019-10-16 15:51:15
14.139.120.78	attackspam	Oct 16 09:21:01 legacy sshd[9416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.120.78 Oct 16 09:21:02 legacy sshd[9416]: Failed password for invalid user asdfg!@#$% from 14.139.120.78 port 58240 ssh2 Oct 16 09:26:06 legacy sshd[9482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.120.78 ...	2019-10-16 16:06:44
46.214.125.132	attackspam	Honeypot attack, port: 23, PTR: 46-214-125-132.next-gen.ro.	2019-10-16 16:20:10
180.241.44.89	attack	Automatic report - Port Scan Attack	2019-10-16 16:23:38
104.236.63.99	attackspam	F2B jail: sshd. Time: 2019-10-16 09:53:19, Reported by: VKReport	2019-10-16 15:53:36
58.32.211.77	attackbotsspam	Automatic report - Port Scan Attack	2019-10-16 16:17:10
23.25.86.59	attackspambots	3389BruteforceFW21	2019-10-16 15:45:47
62.234.122.199	attackspambots	(sshd) Failed SSH login from 62.234.122.199 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 15 23:12:10 localhost sshd[12913]: Invalid user guest from 62.234.122.199 port 60116 Oct 15 23:12:12 localhost sshd[12913]: Failed password for invalid user guest from 62.234.122.199 port 60116 ssh2 Oct 15 23:37:46 localhost sshd[15423]: Invalid user celso from 62.234.122.199 port 45694 Oct 15 23:37:48 localhost sshd[15423]: Failed password for invalid user celso from 62.234.122.199 port 45694 ssh2 Oct 15 23:42:36 localhost sshd[15857]: Invalid user miner from 62.234.122.199 port 36642	2019-10-16 16:21:46
148.70.23.121	attackbots	invalid user	2019-10-16 16:25:16
31.47.38.100	attackspambots	Oct 16 13:38:46 our-server-hostname postfix/smtpd[11971]: connect from unknown[31.47.38.100] Oct x@x Oct 16 13:38:49 our-server-hostname postfix/smtpd[11971]: disconnect from unknown[31.47.38.100] Oct 16 13:38:52 our-server-hostname postfix/smtpd[25909]: connect from unknown[31.47.38.100] Oct x@x Oct 16 13:38:55 our-server-hostname postfix/smtpd[25909]: disconnect from unknown[31.47.38.100] Oct 16 13:39:04 our-server-hostname postfix/smtpd[5386]: connect from unknown[31.47.38.100] Oct x@x Oct 16 13:39:07 our-server-hostname postfix/smtpd[5386]: disconnect from unknown[31.47.38.100] Oct 16 13:42:59 our-server-hostname postfix/smtpd[13397]: connect from unknown[31.47.38.100] Oct x@x Oct 16 13:43:02 our-server-hostname postfix/smtpd[13397]: disconnect from unknown[31.47.38.100] Oct 16 13:43:12 our-server-hostname postfix/smtpd[26344]: connect from unknown[31.47.38.100] Oct x@x Oct 16 13:43:15 our-server-hostname postfix/smtpd[26344]: disconnect from unknown[31.47.38.100] O........ -------------------------------	2019-10-16 15:56:15
42.116.255.216	attackspam	$f2bV_matches	2019-10-16 16:09:56
181.65.51.111	attack	Oct 16 05:11:41 mxgate1 postfix/postscreen[16446]: CONNECT from [181.65.51.111]:49224 to [176.31.12.44]:25 Oct 16 05:11:41 mxgate1 postfix/dnsblog[16449]: addr 181.65.51.111 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 16 05:11:41 mxgate1 postfix/dnsblog[16451]: addr 181.65.51.111 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 16 05:11:41 mxgate1 postfix/dnsblog[16451]: addr 181.65.51.111 listed by domain zen.spamhaus.org as 127.0.0.3 Oct 16 05:11:41 mxgate1 postfix/dnsblog[16451]: addr 181.65.51.111 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 16 05:11:41 mxgate1 postfix/dnsblog[16599]: addr 181.65.51.111 listed by domain bl.spamcop.net as 127.0.0.2 Oct 16 05:11:42 mxgate1 postfix/dnsblog[16447]: addr 181.65.51.111 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 16 05:11:47 mxgate1 postfix/postscreen[16446]: DNSBL rank 5 for [181.65.51.111]:49224 Oct x@x Oct 16 05:11:49 mxgate1 postfix/postscreen[16446]: HANGUP after 2.8 from [181.65.51.111]:49........ -------------------------------	2019-10-16 15:50:01
14.18.93.114	attack	Invalid user laura from 14.18.93.114 port 40208	2019-10-16 16:13:57

Recently Reported IPs

131.196.79.165	131.188.6.165	131.196.78.174	131.221.161.9
131.221.131.98	131.241.233.31	131.221.194.48	131.221.163.97
131.221.254.164	131.93.249.189	132.145.167.186	131.255.10.169
131.72.106.50	132.148.222.253	131.72.71.100	132.148.159.119
131.72.220.191	132.255.156.59	133.106.61.7	132.255.20.66