JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 105.187.231.154

105.187.231.154 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 100%: ?

100%

ISP	Telkom_Internet_Broadband_105_187
Usage Type	Fixed Line ISP
ASN	AS37457
Hostname(s)	105-187-231-154.telkomsa.net
Domain Name	telkom.co.za
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 105.187.231.154

Whois 105.187.231.154

IP Abuse Reports for 105.187.231.154:

This IP address has been reported a total of 102 times from 70 distinct sources. 105.187.231.154 was first reported on June 9th 2025, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 adlp.org	2026-06-06 10:34:55 (13 minutes ago)	Jun 6 10:34:48 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;105.187.231.154;[UN ... show more Jun 6 10:34:48 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;105.187.231.154;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@e-sayegh.eu$;KILL;2;Licence to kill Jun 6 10:34:51 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;105.187.231.154;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@e-sayegh.eu$;KILL;2;Licence to kill Jun 6 10:34:54 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;105.187.231.154;[UNAVAILABLE];[email protected];smtp;cram-md5;1;@e-sayegh.eu$;KILL;2;Licence to kill ... show less	Brute-Force
Anonymous	2026-06-06 10:20:54 (27 minutes ago)	2026-06-06T12:20:54.125322+02:00 mx1 postfix/submission/smtpd[3017355]: warning: unknown[105.187.231 ... show more 2026-06-06T12:20:54.125322+02:00 mx1 postfix/submission/smtpd[3017355]: warning: unknown[105.187.231.154]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=promo@***.de show less	Brute-Force
🇮🇩 xveil	2026-06-06 09:17:42 (1 hour ago)	2026-06-06T16:17:40.532618 mail-honeypot postfix/submission/smtpd[4518]: warning: unknown[105.187.23 ... show more 2026-06-06T16:17:40.532618 mail-honeypot postfix/submission/smtpd[4518]: warning: unknown[105.187.231.154]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
Anonymous	2026-06-06 08:40:38 (2 hours ago)	(UserAttack) User Attack From 105.187.231.154 (105-187-231-154.telkomsa.net): 1 in the last 3600 se ... show more (UserAttack) User Attack From 105.187.231.154 (105-187-231-154.telkomsa.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-06-06 08:40:35 auth_login authenticator failed for ([119.6.55.57]) [105.187.231.154]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇵🇱 TheWojtek	2026-06-06 08:26:35 (2 hours ago)	Jun 6 10:26:34 hq postfix/submission/smtpd[3713492]: warning: unknown[105.187.231.154]: SASL LOGIN ... show more Jun 6 10:26:34 hq postfix/submission/smtpd[3713492]: warning: unknown[105.187.231.154]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
🇩🇪 kreativstrecke	2026-06-06 07:16:36 (3 hours ago)	2026-06-06T09:16:35.330961+02:00 srv03 postfix/smtps/smtpd[1285092]: warning: unknown[105.187.231.15 ... show more 2026-06-06T09:16:35.330961+02:00 srv03 postfix/smtps/smtpd[1285092]: warning: unknown[105.187.231.154]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-06-06T09:16:35.331463+02:00 srv03 postfix/smtps/smtpd[1285092]: lost connection after AUTH from unknown[105.187.231.154] ... show less	Brute-Force
🇺🇸 Rip	2026-06-06 05:58:02 (4 hours ago)	SASL authentication brute-force attack.	Brute-Force
Anonymous	2026-06-06 04:30:39 (6 hours ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇩🇪 MarkGGN	2026-06-06 01:15:41 (9 hours ago)	SMTP Bruteforce. 2026-06-06T03:15:40.121915+02:00 . postfix/smtpd[2250809]: warning: unknown[105.1 ... show more SMTP Bruteforce. 2026-06-06T03:15:40.121915+02:00 . postfix/smtpd[2250809]: warning: unknown[105.187.231.154]: SASL LOGIN authentication failed: authentication failure, sasl_username=guild-wars_admin 2026-06-06T03:15:40.740043+02:00 . postfix/smtpd[2250809]: disconnect from unknown[105.187.231.154] ehlo=2 starttls=1 auth=0/1 commands=3/4 show less	Brute-Force
🇫🇷 solution.it	2026-06-05 23:34:43 (11 hours ago)	Jun 6 01:34:34 vps789997 smtpd[4061585]: d00e292247b34b40 smtp connected address=105.187.231.154 ho ... show more Jun 6 01:34:34 vps789997 smtpd[4061585]: d00e292247b34b40 smtp connected address=105.187.231.154 host=105-187-231-154.telkomsa.net Jun 6 01:34:42 vps789997 smtpd[4061585]: d00e292247b34b40 smtp failed-command command="AUTH LOGIN (password)" result="535 Authentication failed" show less	Brute-Force
🇩🇪 singertc	2026-06-05 22:59:09 (11 hours ago)	2026-06-06 00:59:09 H=([49.124.153.2]) [105.187.231.154] F=<[email protected]> rejected RCP ... show more 2026-06-06 00:59:09 H=([49.124.153.2]) [105.187.231.154] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted 2026-06-06 00:59:09 H=([49.124.153.2]) [105.187.231.154] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted ... show less	Hacking Email Spam
🇦🇹 urnilxfgbez	2026-06-05 22:45:00 (12 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇸🇰 EVISION	2026-06-05 21:57:48 (12 hours ago)	Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporti ... show more Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: LjfGoAx3LtUyqlmQ9woB2LKbssaO2IgH show less	Port Scan Hacking Brute-Force
🇩🇪 Paul Smith	2026-06-05 21:03:49 (13 hours ago)	Email Auth Brute force attack 5/4 in last day	Brute-Force
🇸🇰 KZP	2026-06-05 21:00:09 (13 hours ago)	Automatic report from KZP firewall log.	Port Scan Hacking Brute-Force

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 186.96.145.241

🇺🇸 162.216.149.99

🇺🇸 137.184.159.183

🇩🇪 104.207.54.234

🇺🇸 104.194.9.81

🇧🇩 103.189.243.214

🇻🇳 14.169.146.10

🇰🇷 220.119.37.141

🇩🇪 212.132.120.41

🇧🇷 179.221.228.244

🇸🇪 171.25.158.70

🇻🇳 113.161.222.150

🇧🇪 80.200.175.158

🇷🇺 45.195.221.26

🇳🇱 45.156.87.13

🇮🇩 36.95.194.52

🇬🇧 195.140.214.25

🇧🇷 186.224.202.242

🇨🇳 182.242.168.172

🇩🇪 167.94.145.24