Check an IP Address, Domain Name, Subnet, or ASN

105.187.29.139 was found in our database!

$ whois 105.187.29.139

country·🇿🇦 South Africa

city·Durban

isp·Telkom-Internet

asn·AS37457

network·Standard

$ sikker risk 105.187.29.139scoring →

confidence

73%High

first_seen·Mar 19, 2026

last_seen·1h ago

sessions·4

events·4

$ sikker protocols 105.187.29.139

TELNET

4 / 4

$ sikker summary 105.187.29.139

105.187.29.139 has a threat confidence score of 73%. This IP address from South Africa (AS37457, Telkom-Internet) has been observed in 4 honeypot sessions targeting TELNET protocols. First observed on March 19, 2026, most recently active March 24, 2026.

$ sikker primitives 105.187.29.139

telnet_command_cd44 telnet_busybox_echo_redirect_file_create44 telnet_shell_execute_writable_hidden_file44 telnet_command_sh16 telnet_busybox_binary_invocation16 telnet_command_ping4 telnet_command_shell4 telnet_command_enable4 telnet_command_system4 telnet_command_linuxshell4 telnet_busybox_hostname_set4 telnet_busybox_wget_execution4 telnet_sh_execute_downloaded_script4 telnet_busybox_ftpget_remote_file_download4 telnet_busybox_tftp_get_remote_file_stdout4 telnet_curl_remote_script_stdout_execution4

$ sikker related 105.187.29.139

🇿🇦·More threats fromSouth Africa→AS·More threats fromTelkom-Internet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
105.224.57.197	69%	3
105.184.114.69	58%	1
105.225.64.146	58%	1
105.184.25.254	35%	3
105.186.99.73	57%	1

IP Address	Confidence	Events
4.221.162.168	100%	228
168.76.131.178	100%	352
105.224.57.197	69%	3
196.251.137.80	66%	609
164.151.136.50	62%	1,974