JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 105.225.183.195

105.225.183.195 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 66%: ?

66%

ISP	Telkom Internet Broadband 105 224
Usage Type	Fixed Line ISP
ASN	AS37457
Hostname(s)	183-225-105-195.north.dsl.telkomsa.net
Domain Name	telkom.co.za
Country	🇿🇦 South Africa
City	Pretoria, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 105.225.183.195

Whois 105.225.183.195

IP Abuse Reports for 105.225.183.195:

This IP address has been reported a total of 35 times from 17 distinct sources. 105.225.183.195 was first reported on June 6th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-06-10 10:37:11 (2 weeks ago)	105.225.183.195 - - [10/Jun/2026:12:36:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack b ... show more 105.225.183.195 - - [10/Jun/2026:12:36:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack by WordPress.com" 105.225.183.195 - - [10/Jun/2026:12:36:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack by WordPress.com" 105.225.183.195 - - [10/Jun/2026:12:37:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" show less	Hacking Web App Attack
🇫🇷 dynamix	2026-06-10 08:10:29 (2 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-06-10 07:35:20 (2 weeks ago)	Attac	Brute-Force
🇺🇸 TAY	2026-06-10 07:10:31 (2 weeks ago)	105.225.183.195 - - [10/Jun/2026:15:09:59 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4385 "-" "Jetpack b ... show more 105.225.183.195 - - [10/Jun/2026:15:09:59 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4385 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" 105.225.183.195 - - [10/Jun/2026:15:10:19 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4385 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" 105.225.183.195 - - [10/Jun/2026:15:10:30 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4385 "-" "Jetpack by WordPress.com" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-10 05:46:06 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 105.225.183.195 (183-225-105-195.north.dsl.telk ... show more (mod_security) mod_security (id:240335) triggered by 105.225.183.195 (183-225-105-195.north.dsl.telkomsa.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 01:46:03.193405 2026] [security2:error] [pid 15534:tid 15534] [client 105.225.183.195:56812] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 105.225.183.195 (+1 hits since last alert)\|major33.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "major33.com"] [uri "/xmlrpc.php"] [unique_id "aij6G_D26WM5uZwfUhwGwwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 04:52:59 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 105.225.183.195 (183-225-105-195.north.dsl.telk ... show more (mod_security) mod_security (id:240335) triggered by 105.225.183.195 (183-225-105-195.north.dsl.telkomsa.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 00:52:56.302231 2026] [security2:error] [pid 4106:tid 4106] [client 105.225.183.195:51626] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 105.225.183.195 (+1 hits since last alert)\|furbabieslivesmatter.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "furbabieslivesmatter.com"] [uri "/xmlrpc.php"] [unique_id "aijtqOV8Hmvm09QmZt-ERgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-06-09 20:08:26 (2 weeks ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TAY	2026-06-09 13:18:53 (2 weeks ago)	105.225.183.195 - - [09/Jun/2026:21:18:34 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4385 "-" "Jetpack b ... show more 105.225.183.195 - - [09/Jun/2026:21:18:34 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4385 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" 105.225.183.195 - - [09/Jun/2026:21:18:42 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4385 "-" "WordPress.com; https://wordpress.com" 105.225.183.195 - - [09/Jun/2026:21:18:53 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4385 "-" "Jetpack/13.0; WordPress/6.4; http://site35696162.com" ... show less	Brute-Force
🇳🇱 Site.eu	2026-06-09 11:35:06 (2 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 integrantservices.com	2026-06-09 10:21:30 (2 weeks ago)	(PERMBLOCK) 105.225.183.195 (183-225-105-195.north.dsl.telkomsa.net) has had more than 4 temp blocks	Hacking
🇺🇸 integrantservices.com	2026-06-09 09:17:52 (2 weeks ago)	(wordpress) Failed wordpress login from 105.225.183.195 (183-225-105-195.north.dsl.telkomsa.net)	Brute-Force
Anonymous	2026-06-09 02:16:15 (2 weeks ago)	[redacted] 105.225.183.195 - - [09/Jun/2026:04:15:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ... show more [redacted] 105.225.183.195 - - [09/Jun/2026:04:15:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 105.225.183.195 - - [09/Jun/2026:04:15:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 105.225.183.195 - - [09/Jun/2026:04:15:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" [redacted] 105.225.183.195 - - [09/Jun/2026:04:16:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 105.225.183.195 - - [09/Jun/2026:04:16:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 23:14:01 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 105.225.183.195 (183-225-105-195.north.dsl.telk ... show more (mod_security) mod_security (id:240335) triggered by 105.225.183.195 (183-225-105-195.north.dsl.telkomsa.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 19:13:54.498791 2026] [security2:error] [pid 26967:tid 26981] [client 105.225.183.195:59611] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 105.225.183.195 (+1 hits since last alert)\|lancasterdesignercraftsmen.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lancasterdesignercraftsmen.org"] [uri "/xmlrpc.php"] [unique_id "aidMsjzmlIw2aRPRTw2LigAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-08 21:39:44 (2 weeks ago)	105.225.183.195 - - [08/Jun/2026:23:39:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by ... show more 105.225.183.195 - - [08/Jun/2026:23:39:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" 105.225.183.195 - - [08/Jun/2026:23:39:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "WordPress.com; https://wordpress.com" 105.225.183.195 - - [08/Jun/2026:23:39:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 105.225.183.195 - - [08/Jun/2026:23:39:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" 105.225.183.195 - - [08/Jun/2026:23:39:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by WordPress.com" ... show less	Brute-Force Web App Attack
Anonymous	2026-06-08 15:20:13 (2 weeks ago)	[osotir.org] httpd-xmlrpc-post: sites=drasimas.gr; logs=/var/log/httpd/domains/drasimas.gr.log; samp ... show more [osotir.org] httpd-xmlrpc-post: sites=drasimas.gr; logs=/var/log/httpd/domains/drasimas.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 12.68.228.244

🇺🇸 209.85.217.69

🇳🇱 192.42.116.145

🇲🇰 188.44.20.33

🇲🇽 187.191.48.4

🇺🇦 176.103.6.239

🇵🇭 143.44.192.160

🇺🇸 100.51.195.110

🇫🇮 95.216.157.232

🇩🇪 69.5.169.183

🇷🇺 46.8.245.94

🇳🇱 45.148.10.147

🇮🇩 38.103.170.49

🇺🇸 38.77.214.101

🇺🇸 8.235.125.106

🇪🇸 5.182.83.231

🇺🇸 193.3.53.8

🇩🇪 156.236.31.85

🇻🇳 14.233.177.177

🇰🇷 218.145.181.48