Check an IP Address, Domain Name, Subnet, or ASN

105.224.57.197 was found in our database!

$ whois 105.224.57.197

country·🇿🇦 South Africa

city·Pretoria

isp·Telkom-Internet

asn·AS37457

network·Standard

$ sikker risk 105.224.57.197scoring →

confidence

57%Medium

first_seen·Mar 20, 2026

last_seen·12h ago

sessions·1

events·1

$ sikker protocols 105.224.57.197

TELNET

1 / 1

$ sikker summary 105.224.57.197

105.224.57.197 has a threat confidence score of 57%. This IP address from South Africa (AS37457, Telkom-Internet) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 20, 2026, most recently active March 20, 2026.

$ sikker primitives 105.224.57.197

telnet_shell_execute_writable_hidden_file11 telnet_busybox_echo_redirect_file_create10 telnet_command_cd9 telnet_command_sh4 telnet_busybox_binary_invocation4 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_busybox_hostname_set1 telnet_busybox_wget_execution1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 105.224.57.197

🇿🇦·More threats fromSouth Africa→AS·More threats fromTelkom-Internet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
105.186.202.138	58%	1
105.184.179.6	35%	18
105.184.5.25	46%	7
105.184.13.217	72%	3
105.186.202.182	58%	1

IP Address	Confidence	Events
168.76.20.229	78%	1,176
169.0.115.40	42%	9
102.33.152.138	99%	798
41.0.216.78	46%	227
196.6.105.31	46%	418