Check an IP Address, Domain Name, Subnet, or ASN

105.224.117.178 was found in our database!

$ whois 105.224.117.178

country·🇿🇦 South Africa

city·Durban

isp·Telkom-Internet

asn·AS37457

network·Standard

$ sikker risk 105.224.117.178scoring →

confidence

64%High

first_seen·Mar 25, 2026

last_seen·9h ago

sessions·6

events·6

$ sikker protocols 105.224.117.178

TELNET

6 / 6

$ sikker summary 105.224.117.178

105.224.117.178 has a threat confidence score of 64%. This IP address from South Africa (AS37457, Telkom-Internet) has been observed in 6 honeypot sessions targeting TELNET protocols. First observed on March 25, 2026, most recently active March 30, 2026.

$ sikker primitives 105.224.117.178

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh9 telnet_command_shell6 telnet_busybox_unknown_applet_invocation5 telnet_command_system4 telnet_busybox_binary_invocation4 telnet_command_ping1 telnet_command_enable1 telnet_command_linuxshell1 telnet_busybox_hostname_set1 telnet_busybox_wget_execution1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 105.224.117.178

🇿🇦·More threats fromSouth Africa→AS·More threats fromTelkom-Internet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
105.186.107.156	58%	2
105.186.143.20	34%	187
105.186.155.165	68%	3
105.184.14.146	78%	7
105.186.163.166	51%	1

IP Address	Confidence	Events
164.151.136.50	62%	2,190
102.23.254.239	21%	29
41.77.204.63	26%	81
197.89.151.13	35%	3
196.25.253.242	28%	61