Check an IP Address, Domain Name, Subnet, or ASN

105.224.56.19 was found in our database!

$ whois 105.224.56.19

country·🇿🇦 South Africa

city·Pretoria

isp·Telkom-Internet

asn·AS37457

network·Standard

$ sikker risk 105.224.56.19scoring →

confidence

78%High

first_seen·Mar 26, 2026

last_seen·2h ago

sessions·7

events·7

$ sikker protocols 105.224.56.19

TELNET

7 / 7

$ sikker summary 105.224.56.19

105.224.56.19 has a threat confidence score of 78%. This IP address from South Africa (AS37457, Telkom-Internet) has been observed in 7 honeypot sessions targeting TELNET protocols. First observed on March 26, 2026, most recently active March 31, 2026.

$ sikker primitives 105.224.56.19

telnet_command_cd77 telnet_busybox_echo_redirect_file_create77 telnet_shell_execute_writable_hidden_file77 telnet_busybox_binary_invocation22 telnet_command_sh19 telnet_command_ping7 telnet_command_shell7 telnet_command_enable7 telnet_command_system7 telnet_command_linuxshell7 telnet_busybox_hostname_set7 telnet_busybox_wget_execution4 telnet_sh_execute_downloaded_script4 telnet_busybox_ftpget_remote_file_download4 telnet_busybox_tftp_get_remote_file_stdout4 telnet_curl_remote_script_stdout_execution4

$ sikker related 105.224.56.19

🇿🇦·More threats fromSouth Africa→AS·More threats fromTelkom-Internet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
105.186.148.49	67%	5
105.186.107.156	58%	2
105.186.143.20	34%	187
105.186.155.165	68%	3
105.184.14.146	78%	7

IP Address	Confidence	Events
66.8.6.152	35%	199
154.70.223.95	31%	135
41.181.156.205	97%	36
154.119.166.18	21%	43
197.245.254.229	27%	19