Report for IP: 105.224.118.161

Threat LevelCRITICAL72/1001 rule type
3 incidents on record · active attack detected · active over 2 days · last seen 20d ago
PTR 105-224-118-161.ti-dsl.telkomsa.net
Org / ASN Telkom Internet Broadband 105
Country 🇿🇦 South Africa
City Durban, KwaZulu-Natal
Timezone Africa/Johannesburg

Attack Analysis

🇿🇦 South Africa · KwaDabeka · 37457 · Addresses Used to Provide Broadband Access to Telkom Internet Customer
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (3)

Date Severity Description
12 Jul 2026 - 01:10 medium IDS: Suricata alert — SURICATA HTTP Unexpected Request body
10 Jul 2026 - 01:12 high IDS: Suricata alert
10 Jul 2026 - 01:12 medium IDS: Suricata alert — ET WEB_SERVER WebShell Generic - wget http - POST