105.213.128.172
Classification: Malicious
105.213.128.172 is a malicious IP address in Johannesburg, ZA. 27 sightings from 4 threat sources (Proxy, Mail Spammer), last seen 2026-09-20.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2022-12-30 00:42:38 | 2026-09-20 14:21:32 | attacker malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2026-08-26 09:00:05 | 2026-08-27 09:00:06 | attacker malicious-activity | |
| HTTP Attacker | Blocklist.de | 2026-08-26 07:00:06 | 2026-08-27 07:00:06 | attacker malicious-activity | |
| Proxy | FireHOL | 2023-01-01 11:55:05 | 2024-03-27 04:22:18 | anonymization | |
| Anonymizer | FireHol | 2022-12-30 00:38:24 | 2022-12-30 00:38:24 | anonymization |
Tags
anonymization apache ddos rfi attacker login bruteforce bot joomla wordpressWhois information
- AS name
- AS16637 MTN SA
- AS registry
- afrinic
- AS date
- 2012-10-09 00:00:00
- AS CIDR
- 105.208.0.0/12
- CIDR
- 105.208.0.0/12
- Registrant
- MTN SA
- Address
- 216 14th Avenue Fairland Johannesburg 2196
- City
- Johannesburg
- Postal code
- 2001
- Country
- ZA — South Africa 🇿🇦
- First indexed
- 2022-12-30 00:38:24
- Last updated
- 2026-09-20 14:21:33
Malicious IPs in the same CIDR
105.214.74.10 105.214.83.67 105.213.122.15 105.214.21.213 105.209.179.63 105.213.102.10 105.214.14.87 105.214.72.197 105.214.28.39 105.214.23.131 105.213.124.113 105.214.2.62 105.214.65.107 105.213.128.172 105.214.15.221 105.214.71.128 105.214.11.144