JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 105.209.147.168

105.209.147.168 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 0%: ?

ISP	MTN SA
Usage Type	Fixed Line ISP
ASN	AS16637
Hostname(s)	105-209-147-168.access.supersonic.co.za
Domain Name	mtn.com
Country	🇿🇦 South Africa
City	Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 105.209.147.168

Whois 105.209.147.168

IP Abuse Reports for 105.209.147.168:

This IP address has been reported a total of 33 times from 21 distinct sources. 105.209.147.168 was first reported on February 19th 2025, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-07-09 16:30:33 (11 months ago)	Failed login attempt detected by Fail2Ban in recidive jail	Brute-Force
🇳🇱 Roderic	2025-07-03 22:43:53 (11 months ago)	105.209.147.168 (ZA/South Africa/Western Cape/Cape Town/105-209-147-168.access.supersonic.co.za/[red ... show more 105.209.147.168 (ZA/South Africa/Western Cape/Cape Town/105-209-147-168.access.supersonic.co.za/[redacted] show less	Brute-Force
🇨🇦 TCP FAILED	2025-06-20 16:30:22 (11 months ago)	TCP Watch Auto Report: Detected a ddos attack and suspicious activity from this IP, indicating a pot ... show more TCP Watch Auto Report: Detected a ddos attack and suspicious activity from this IP, indicating a potential attack show less	DDoS Attack Hacking IoT Targeted
🇨🇦 TCP FAILED	2025-06-18 17:33:29 (11 months ago)	TCP Watch Auto Report: Detected a ddos attack and suspicious activity from this IP, indicating a pot ... show more TCP Watch Auto Report: Detected a ddos attack and suspicious activity from this IP, indicating a potential attack show less	DDoS Attack Hacking IoT Targeted
🇳🇱 Deveroonie	2025-06-16 14:21:03 (11 months ago)	2025-06-16T14:21:02.248524+00:00 web sshd[2329522]: Failed password for root from 105.209.147.168 po ... show more 2025-06-16T14:21:02.248524+00:00 web sshd[2329522]: Failed password for root from 105.209.147.168 port 47555 ssh2 2025-06-16T14:21:02.630489+00:00 web sshd[2329522]: Connection closed by authenticating user root 105.209.147.168 port 47555 [preauth] ... show less	Hacking Brute-Force SSH
🇳🇱 stom	2025-05-17 15:05:33 (1 year ago)	2025-05-17T15:05:23.125239 socky.stom66.co.uk postfix/smtpd[4097874]: NOQUEUE: reject: RCPT from unk ... show more 2025-05-17T15:05:23.125239 socky.stom66.co.uk postfix/smtpd[4097874]: NOQUEUE: reject: RCPT from unknown[105.209.147.168]: 554 5.7.1 Service unavailable; Client host [105.209.147.168] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/105.209.147.168 / Listed by PBL, see https://check.spamhaus.org/query/ip/105.209.147.168 / Listed by XBL, see https://check.spamhaus.org/query/ip/105.209.147.168; from=<Daisy> to=<[email protected]> proto=ESMTP helo=<105-209-147-168.access.supersonic.co.za> ... show less	Email Spam Brute-Force
🇩🇪 NetWatch	2025-05-11 03:41:36 (1 year ago)	The IP 105.209.147.168 tried multiple SSH logins	Brute-Force SSH
🇩🇪 NetWatch	2025-05-03 07:08:02 (1 year ago)	The IP 105.209.147.168 tried multiple SSH logins	Brute-Force SSH
🇨🇿 unhfree.net	2025-04-30 01:41:30 (1 year ago)	Apr 30 00:35:35 canopus postfix/smtpd[1962187]: NOQUEUE: reject: RCPT from unknown[105.209.147.168]: ... show more Apr 30 00:35:35 canopus postfix/smtpd[1962187]: NOQUEUE: reject: RCPT from unknown[105.209.147.168]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 30 00:35:35 canopus postfix/smtpd[1962187]: NOQUEUE: reject: RCPT from unknown[105.209.147.168]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 30 00:35:35 canopus postfix/smtpd[1962187]: NOQUEUE: reject: RCPT from unknown[105.209.147.168]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 30 00:35:35 canopus postfix/smtpd[1962187]: NOQUEUE: reject: RCPT from unknown[105.209.147.168]: 554 5.7.1 <j ... show less	Brute-Force Exploited Host
Anonymous	2025-04-25 10:03:42 (1 year ago)	sshd	Brute-Force SSH
🇺🇸 drewf.ink	2025-04-24 13:34:24 (1 year ago)	[13:34] Attempted SSH login on port 22 with credentials root:thetruth	Brute-Force SSH
🇺🇸 drewf.ink	2025-04-24 13:13:43 (1 year ago)	[13:13] Attempted SSH login on port 22 with credentials root:iceland	Brute-Force SSH
🇸🇪 HyperSpeed	2025-04-21 00:59:50 (1 year ago)	Apr 21 00:59:47 SE1 sshd[2152432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Apr 21 00:59:47 SE1 sshd[2152432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.209.147.168 user=root Apr 21 00:59:49 SE1 sshd[2152432]: Failed password for root from 105.209.147.168 port 59224 ssh2 ... show less	Brute-Force SSH
🇳🇱 Roderic	2025-04-21 00:08:45 (1 year ago)	105.209.147.168 (ZA/South Africa/Western Cape/Cape Town/105-209-147-168.access.supersonic.co.za/[red ... show more 105.209.147.168 (ZA/South Africa/Western Cape/Cape Town/105-209-147-168.access.supersonic.co.za/[redacted] show less	Brute-Force
🇩🇪 FunyMails	2025-04-17 03:48:00 (1 year ago)	Apr 17 03:44:46 localhost sshd[2620927]: Connection closed by authenticating user root 105.209.147.1 ... show more Apr 17 03:44:46 localhost sshd[2620927]: Connection closed by authenticating user root 105.209.147.168 port 38993 [preauth] Apr 17 03:47:57 localhost sshd[2621124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.209.147.168 user=root Apr 17 03:47:59 localhost sshd[2621124]: Failed password for root from 105.209.147.168 port 43880 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.228.218.47

🇪🇬 197.37.247.223

🇬🇧 188.240.59.53

🇺🇸 178.20.212.213

🇸🇦 175.110.224.113

🇨🇳 116.207.19.144

🇺🇸 103.168.67.107

🇭🇰 58.152.212.239

🇸🇦 51.253.248.64

🇳🇱 45.142.193.164

🇮🇩 34.50.67.206

🇷🇴 2.57.121.25

🇺🇸 195.184.76.150

🇺🇸 192.241.141.178

🇲🇩 188.214.144.172

🇪🇨 186.68.83.104

🇧🇷 181.218.9.86

🇸🇦 82.167.20.173

🇸🇪 74.241.134.117

🇺🇸 64.62.156.89