Check an IP Address, Domain Name, Subnet, or ASN

105.186.165.42 was found in our database!

$ whois 105.186.165.42

country·🇿🇦 South Africa

city·Stellenbosch

isp·Telkom-Internet

asn·AS37457

network·Standard

$ sikker risk 105.186.165.42scoring →

confidence

57%Medium

first_seen·Apr 14, 2026

last_seen·21h ago

sessions·2

events·2

$ sikker protocols 105.186.165.42

TELNET

2 / 2

$ sikker summary 105.186.165.42

105.186.165.42 has a threat confidence score of 57%. This IP address from South Africa (AS37457, Telkom-Internet) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on April 14, 2026, most recently active April 17, 2026.

$ sikker primitives 105.186.165.42

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_busybox_binary_invocation4 telnet_command_sh2 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_busybox_hostname_set2

$ sikker related 105.186.165.42

🇿🇦·More threats fromSouth Africa→AS·More threats fromTelkom-Internet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
105.224.34.95	71%	4
105.186.192.89	39%	4
105.186.184.63	51%	1
105.186.99.73	79%	11
105.184.84.78	35%	81

IP Address	Confidence	Events
102.23.254.239	26%	72
41.181.156.205	100%	129
197.64.211.123	86%	11
169.255.198.193	100%	2,101
102.210.149.105	100%	847