JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 105.184.7.6

105.184.7.6

Recent Activity

10 reports found in our database

55% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

Telkom Internet Broadband 105 184

Usage Type

Fixed Line ISP

ASN

AS37457

Hostname(s)

7-184-105-6.south.dsl.telkomsa.net

Domain Name

telkom.co.za

Country

🇿🇦 South Africa

City

Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 105.184.7.6:

This IP address has been reported a total of 10 times from 9 distinct sources. 105.184.7.6 was first reported on September 15th 2026, and the most recent report was 16 hours ago. In the last 60 days, the top reporter locations were: Germany with 2 reports; United States of America with 2 reports; China with 1 report. The most common categories in these recent reports were: Brute-Force 4 times; SSH 3 times; Port Scan 2 times; Web App Attack 2 times; Hacking 2 times; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 bart@	2026-09-20 18:03:04 (16 hours ago)	Automated scan detection against redacted protected targets. Hits=1; port 80 proto 6 detection dark_ ... show more Automated scan detection against redacted protected targets. Hits=1; port 80 proto 6 detection dark_ip show less	Port Scan
🇮🇹 IRT@Unisi	2026-09-18 16:41:37 (2 days ago)	backdoor: Mirai.Botnet	Hacking
Anonymous	2026-09-18 06:24:29 (3 days ago)	denied traffic to a non-approved destination port. destination port 7574.	Port Scan
🇸🇪 warriors	2026-09-17 21:45:05 (3 days ago)	Telnet honeypot observed this address advertised as a potential malware payload host in 21 compromis ... show more Telnet honeypot observed this address advertised as a potential malware payload host in 21 compromise sessions from 2 source IPs. Transfer methods: curl, wget. Observed ports: 49853. Requested paths: /bin.sh, /i. Payload hosting was not independently verified. show less	Exploited Host
🇨🇿 kronos	2026-09-17 03:36:49 (4 days ago)	IDS: ET WEB_SERVER WGET Command Specifying Output in HTTP Headers \| SID:2019309 \| session_sigs:2	Hacking Web App Attack
🇨🇳 SA19999	2026-09-16 06:02:21 (5 days ago)	Auto-report: brute_force \| sources=["peer-sync"] \| Fox honeypot cluster	Web App Attack
🇩🇪 tc-hawkes.com	2026-09-16 01:43:42 (5 days ago)	SSH Bruteforce ...	Brute-Force SSH
🇺🇸 bigscoots.com	2026-09-16 01:29:18 (5 days ago)	105.184.7.6 (ZA/South Africa/7-184-105-6.south.dsl.telkomsa.net), 5 distributed sshd attacks on acco ... show more 105.184.7.6 (ZA/South Africa/7-184-105-6.south.dsl.telkomsa.net), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 15 20:15:38 15216 sshd[9958]: Invalid user admin from 24.152.37.60 port 54505 Sep 15 20:15:41 15216 sshd[9958]: Failed password for invalid user admin from 24.152.37.60 port 54505 ssh2 Sep 15 20:19:39 15216 sshd[10817]: Invalid user admin from 105.184.7.6 port 45808 Sep 15 20:19:41 15216 sshd[10817]: Failed password for invalid user admin from 105.184.7.6 port 45808 ssh2 Sep 15 20:29:00 15216 sshd[12787]: Invalid user admin from 39.36.72.41 port 48741 IP Addresses Blocked: 24.152.37.60 (BR/Brazil/24-152-37-60.masterdaweb.com) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-09-15 16:01:22 (5 days ago)	105.184.7.6 (ZA/South Africa/7-184-105-6.south.dsl.telkomsa.net), 5 distributed sshd attacks on acco ... show more 105.184.7.6 (ZA/South Africa/7-184-105-6.south.dsl.telkomsa.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 15 10:03:14 12525 sshd[25926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.170.42.35 user=root Sep 15 10:03:17 12525 sshd[25926]: Failed password for root from 121.170.42.35 port 33980 ssh2 Sep 15 10:27:01 12525 sshd[5829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.101.73 user=root Sep 15 10:27:03 12525 sshd[5829]: Failed password for root from 187.72.101.73 port 53983 ssh2 Sep 15 11:00:57 12525 sshd[23906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.184.7.6 user=root IP Addresses Blocked: 121.170.42.35 (KR/South Korea/-) 187.72.101.73 (BR/Brazil/187-072-101-073.static.ctbctelecom.com.br) show less	Brute-Force SSH
🇳🇱 stom	2026-09-15 15:36:05 (5 days ago)	2026-09-15T15:36:03.420743 socky.stom66.co.uk proftpd[2596877]: session[2596877] 0.0.0.0 (105.184.7. ... show more 2026-09-15T15:36:03.420743 socky.stom66.co.uk proftpd[2596877]: session[2596877] 0.0.0.0 (105.184.7.6[105.184.7.6]): USER Admin: no such user found from 105.184.7.6 [105.184.7.6] to ::ffff:5.79.80.26:2222 ... show less	Brute-Force FTP Brute-Force

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.172.223

🇩🇪 150.241.113.163

🇫🇷 91.231.89.96

🇺🇸 35.255.85.137

🇭🇰 199.45.154.181

🇲🇿 196.28.236.219

🇳🇱 167.71.72.95

🇨🇳 111.26.63.85

🇹🇷 109.236.48.223

🇳🇱 109.160.32.21

🇮🇩 103.214.100.4

🇺🇸 76.32.20.66

🇵🇰 39.44.90.55

🇩🇪 31.70.79.144

🇩🇪 213.209.159.238

🇩🇪 213.209.159.19

🇨🇳 180.76.60.83

🇺🇸 172.239.71.244

🇨🇳 125.39.141.160

🇲🇾 113.23.225.9