Check an IP Address, Domain Name, Subnet, or ASN

105.186.148.49 was found in our database!

$ whois 105.186.148.49

country·🇿🇦 South Africa

city·Mossel Bay

isp·Telkom-Internet

asn·AS37457

network·Standard

$ sikker risk 105.186.148.49scoring →

confidence

69%High

first_seen·Mar 23, 2026

last_seen·5h ago

sessions·2

events·2

$ sikker protocols 105.186.148.49

TELNET

2 / 2

$ sikker summary 105.186.148.49

105.186.148.49 has a threat confidence score of 69%. This IP address from South Africa (AS37457, Telkom-Internet) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 23, 2026, most recently active March 23, 2026.

$ sikker primitives 105.186.148.49

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_command_sh8 telnet_busybox_binary_invocation8 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_busybox_hostname_set2 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2 telnet_curl_remote_script_stdout_execution2

$ sikker related 105.186.148.49

🇿🇦·More threats fromSouth Africa→AS·More threats fromTelkom-Internet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
102.254.35.29	44%	6
102.253.131.23	44%	6
105.184.53.124	52%	12
102.252.8.2	30%	2
102.251.8.18	30%	2

IP Address	Confidence	Events
164.151.136.50	62%	1,940
102.33.152.138	99%	1,058
102.254.35.29	44%	6
102.253.131.23	44%	6
105.184.53.124	52%	12