105.224.61.72

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
84% Critical
17 reports
16 reporters · latest 4 hours ago
ISP
Telkom Internet Broadband 105 224
Usage Type
Fixed Line ISP
ASN
AS37457
Domain Name
telkom.co.za
Country
🇿🇦 South Africa
City
Pretoria, Gauteng
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇺🇸 United States of America 5 🇫🇷 France 2
Most common categories Port Scan 11 Hacking 8 Brute-Force 4 Exploited Host 2 DDoS Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MarkJGreen
Telnet brute force: 3 login attempts, 300 shell commands after login, malware download/upload. Last seen 2026-11-09 07:54 UTC (honeypot).
Brute-Force IoT Targeted Hacking
🇩🇪 Coinetic AI Security
Connection to a trap port: 1 attempts on port 23, 2026-11-09 07:57 - 07:57 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
Port Scan Hacking
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇩🇪 hotzmatic
Cowrie Honeypot: Connection lost after 33 seconds (168 events observed on private honeypot sensor)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 48464 TTL: 49 Packet length: 72 TOS: 0x14 This report (for 105.224.61.72) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
Anonymous
unsolicited connect TCP dport 23 (sport 49636)
Hacking
🇳🇱 ParaBug
2026-11-08T09:44:55.701770+02:00 r2d2 sshd-session[2139398]: Invalid user admin from 105.224.61.72 port 37124 ...
Brute-Force SSH
Anonymous
2026-11-08 06:56:02 warning[3322233]: host 105-224-61-72.ti-dsl.telkomsa.net[105.224.61.72]: unauthorized telnet access attempted: tcp/23
Port Scan Brute-Force
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:41396 dst:23
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇺🇸 sumnone
Port probing on unauthorized port 23
Port Scan Hacking Exploited Host
🇩🇪 guldkage
Unauthorized connection attempt detected from IP address 105.224.61.72 to port 23 (ger-01) [TELNET]
Exploited Host
🇮🇩 FallingGong2833
tcp/23
Port Scan
🇺🇸 RAP
2026-11-07 17:10:33 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 183.233.155.146
🇳🇱 193.47.62.69
🇵🇱 176.53.159.197
🇵🇱 162.158.102.172
🇺🇸 154.51.242.30
🇺🇸 150.136.227.229
🇳🇱 109.160.32.155
🇩🇿 105.96.0.156
🇩🇪 23.132.164.202
🇬🇧 5.226.140.19
🇨🇳 111.7.87.166
🇩🇪 89.163.210.120
🇧🇬 79.124.40.158
🇺🇸 66.132.195.99
🇸🇬 47.236.111.172
🇩🇪 34.185.172.118
🇩🇪 34.89.150.109
🇺🇦 212.55.64.137
🇧🇷 191.177.197.84
🇻🇪 190.142.224.11
feedback