Check an IP Address, Domain Name, Subnet, or ASN

102.223.59.172 was found in our database!

$ whois 102.223.59.172

country·🇿🇦 South Africa

city·Cape Town

isp·AFRIHOST-SP

asn·AS37611

network·Standard

$ sikker risk 102.223.59.172scoring →

confidence

58%Medium

first_seen·Apr 26, 2026

last_seen·4d ago

sessions·9

events·9

$ sikker protocols 102.223.59.172

TELNET

9 / 9

$ sikker summary 102.223.59.172

102.223.59.172 has a threat confidence score of 58%. This IP address from South Africa (AS37611, AFRIHOST-SP) has been observed in 9 honeypot sessions targeting TELNET protocols. First observed on April 26, 2026, most recently active April 26, 2026.

$ sikker primitives 102.223.59.172

telnet_command_enable9 telnet_command_system9 telnet_command_shell2

$ sikker related 102.223.59.172

🇿🇦·More threats fromSouth Africa→AS·More threats fromAFRIHOST-SP→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
197.242.145.144	82%	10
154.0.167.67	80%	4
165.73.0.61	92%	18
197.242.159.214	85%	7
102.182.69.213	27%	4

IP Address	Confidence	Events
102.210.146.49	98%	32
197.242.145.144	82%	10
104.22.45.157	22%	5
172.68.42.162	20%	2
172.68.42.163	11%	1