Check an IP Address, Domain Name, Subnet, or ASN

105.184.13.217 was found in our database!

$ whois 105.184.13.217

country·🇿🇦 South Africa

city·Johannesburg

isp·Telkom-Internet

asn·AS37457

network·Standard

$ sikker risk 105.184.13.217scoring →

confidence

72%High

first_seen·Mar 18, 2026

last_seen·11h ago

sessions·3

events·3

$ sikker protocols 105.184.13.217

TELNET

3 / 3

$ sikker summary 105.184.13.217

105.184.13.217 has a threat confidence score of 72%. This IP address from South Africa (AS37457, Telkom-Internet) has been observed in 3 honeypot sessions targeting TELNET protocols. First observed on March 18, 2026, most recently active March 20, 2026.

$ sikker primitives 105.184.13.217

telnet_command_cd33 telnet_busybox_echo_redirect_file_create33 telnet_shell_execute_writable_hidden_file33 telnet_command_sh12 telnet_busybox_binary_invocation12 telnet_command_ping3 telnet_command_shell3 telnet_command_enable3 telnet_command_system3 telnet_command_linuxshell3 telnet_busybox_hostname_set3 telnet_busybox_wget_execution3 telnet_sh_execute_downloaded_script3 telnet_busybox_ftpget_remote_file_download3 telnet_busybox_tftp_get_remote_file_stdout3 telnet_curl_remote_script_stdout_execution3

$ sikker related 105.184.13.217

🇿🇦·More threats fromSouth Africa→AS·More threats fromTelkom-Internet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
105.186.202.138	58%	1
105.184.179.6	35%	18
105.184.5.25	46%	7
105.224.57.197	57%	1
105.186.202.182	58%	1

IP Address	Confidence	Events
168.76.20.229	78%	1,176
169.0.115.40	42%	9
102.33.152.138	99%	798
41.0.216.78	46%	227
196.6.105.31	46%	418