Check an IP Address, Domain Name, Subnet, or ASN

105.224.34.95 was found in our database!

$ whois 105.224.34.95

country·🇿🇦 South Africa

city·Pretoria

isp·Telkom-Internet

asn·AS37457

network·Standard

$ sikker risk 105.224.34.95scoring →

confidence

71%High

first_seen·Apr 16, 2026

last_seen·2h ago

sessions·4

events·4

$ sikker protocols 105.224.34.95

TELNET

4 / 4

$ sikker summary 105.224.34.95

105.224.34.95 has a threat confidence score of 71%. This IP address from South Africa (AS37457, Telkom-Internet) has been observed in 4 honeypot sessions targeting TELNET protocols. First observed on April 16, 2026, most recently active April 17, 2026.

$ sikker primitives 105.224.34.95

telnet_command_cd44 telnet_busybox_echo_redirect_file_create44 telnet_shell_execute_writable_hidden_file44 telnet_busybox_binary_invocation8 telnet_command_sh4 telnet_command_ping4 telnet_command_shell4 telnet_command_enable4 telnet_command_system4 telnet_command_linuxshell4 telnet_busybox_hostname_set4

$ sikker related 105.224.34.95

🇿🇦·More threats fromSouth Africa→AS·More threats fromTelkom-Internet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
105.186.192.89	39%	4
105.186.184.63	51%	1
105.186.99.73	79%	11
105.184.84.78	35%	81
105.186.165.42	57%	2

IP Address	Confidence	Events
169.255.198.193	100%	2,094
66.8.6.154	40%	322
102.210.149.130	99%	69
4.221.162.168	100%	398
102.129.200.101	42%	5