Check an IP Address, Domain Name, Subnet, or ASN

105.225.68.159 was found in our database!

$ whois 105.225.68.159

country·🇿🇦 South Africa

isp·Telkom-Internet

asn·AS37457

network·Standard

$ sikker risk 105.225.68.159scoring →

confidence

58%Medium

first_seen·Mar 22, 2026

last_seen·2h ago

sessions·1

events·1

$ sikker protocols 105.225.68.159

TELNET

1 / 1

$ sikker summary 105.225.68.159

105.225.68.159 has a threat confidence score of 58%. This IP address from South Africa (AS37457, Telkom-Internet) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 22, 2026, most recently active March 22, 2026.

$ sikker primitives 105.225.68.159

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh4 telnet_busybox_binary_invocation4 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_busybox_hostname_set1 telnet_busybox_wget_execution1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 105.225.68.159

🇿🇦·More threats fromSouth Africa→AS·More threats fromTelkom-Internet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
105.225.48.135	57%	18
105.224.222.32	58%	1
102.252.32.12	39%	4
102.251.32.26	30%	2
105.184.13.217	74%	4

IP Address	Confidence	Events
102.209.119.249	35%	8
105.255.145.174	23%	65
102.210.149.105	100%	646
102.222.184.4	31%	127
169.239.47.178	24%	37