Identicon of IP address 105.184.168.164

105.184.168.164

IP Risk Score: 63 / 100

This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.

What is this IP address?
IP Address: 105.184.168.164
Country: South Africa flag South Africa (ZA)
Region Name: Gauteng (GP)
City: Alberton
ISP: Telkom SA Ltd
Organization: Telkom Internet Broadband 105
Threat level: 63 / 100
Conf. level: 100 / 100
Properties
ASN: AS37457
AS Name: Telkom SA Ltd.
Timezone: Africa/Johannesburg
Reverse DNS: 105-184-168-164.south.dsl.telkomsa.net
Status: Suspicious

Observed Client Profile
  • OS: iOS (100%)
  • Device Type: Mobile (100%)
  • Browser Family: Safari (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP shows signs of potential automated behavior, including lack of JavaScript support and a user-agent that may be spoofed. The access pattern is limited, but the combination of these factors raises concerns about possible scraping or probing activity.

The supernet (105.184.0.0/16), which this IP belongs to, exhibits behavior indicative of automated scraping or bot activity, characterized by repetitive, low-interaction visits with a variety of user agents. However, the lack of consistent user agent patterns and DNS mismatches raises concerns about the legitimacy of the traffic, suggesting potential misuse of infrastructure.

JavaScript Support
โš ๏ธ No
User-Agent Samples
  • Mozilla/5.0 (iPhone; CPU iPhone OS 16_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Mobile/15E148 Safari/604.1 MicroMessenger/8.0.31(0x18001B3F) NetType/WIFI Language/zh_CN

IP Location

Region: Gauteng, South Africa

City: Alberton

Local time: 2026-06-22 18:08:27