IP address 105.28.108.165 has been flagged in 402 abuse reports across 23 independent threat intelligence sources, resulting in a threat score of 100.0/100 (critical risk). The primary activity associated with this IP is aggregated threat, along with attacks, brute force, bruteforce, malware c2, persistent attacker, repeat offender, scanning, severe abuse, ssh-bruteforce, ssh brute force, ssh bruteforce, suspicious activity, voip attack, web attack, web brute force.
This IP is geolocated in South Africa (Johannesburg) and belongs to the network SEACOM-AS (AS37100). Reports span from 2022-07-24 to 2026-02-09.
Assessment: With 402 abuse reports, 105.28.108.165 shows persistent malicious activity that has been flagged by multiple threat intelligence feeds. The IP has been observed conducting automated SSH login attempts against internet-facing servers, a technique commonly used to gain unauthorized access to systems.