Check an IP Address, Domain Name, Subnet, or ASN

105.186.155.165 was found in our database!

$ whois 105.186.155.165

country·🇿🇦 South Africa

city·Cape Town

isp·Telkom-Internet

asn·AS37457

network·Standard

$ sikker risk 105.186.155.165scoring →

confidence

68%High

first_seen·Mar 27, 2026

last_seen·3h ago

sessions·3

events·3

$ sikker protocols 105.186.155.165

TELNET

3 / 3

$ sikker summary 105.186.155.165

105.186.155.165 has a threat confidence score of 68%. This IP address from South Africa (AS37457, Telkom-Internet) has been observed in 3 honeypot sessions targeting TELNET protocols. First observed on March 27, 2026, most recently active March 30, 2026.

$ sikker primitives 105.186.155.165

telnet_command_cd33 telnet_busybox_echo_redirect_file_create33 telnet_shell_execute_writable_hidden_file33 telnet_busybox_binary_invocation10 telnet_command_sh9 telnet_command_ping3 telnet_command_shell3 telnet_command_enable3 telnet_command_system3 telnet_command_linuxshell3 telnet_busybox_hostname_set3 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2 telnet_curl_remote_script_stdout_execution2

$ sikker related 105.186.155.165

🇿🇦·More threats fromSouth Africa→AS·More threats fromTelkom-Internet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
105.186.148.49	67%	5
105.186.107.156	58%	2
105.186.143.20	34%	187
105.184.14.146	78%	7
105.186.163.166	51%	1

IP Address	Confidence	Events
102.210.149.130	82%	6
102.67.178.159	34%	190
41.76.230.215	33%	167
196.25.253.242	28%	62
41.77.204.63	26%	87