Check an IP Address, Domain Name, Subnet, or ASN

189.197.23.1 was found in our database!

$ whois 189.197.23.1

country·🇲🇽 Mexico

city·Apan

isp·Mega Cable, S.A. de C.V.

asn·AS13999

network·Standard

$ sikker risk 189.197.23.1scoring →

confidence

60%High

first_seen·Apr 30, 2026

last_seen·1d ago

sessions·1

events·1

$ sikker protocols 189.197.23.1

TELNET

1 / 1

$ sikker summary 189.197.23.1

189.197.23.1 has a threat confidence score of 60%. This IP address from Mexico (AS13999, Mega Cable, S.A. de C.V.) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on April 30, 2026, most recently active April 30, 2026.

$ sikker primitives 189.197.23.1

telnet_busybox_binary_invocation15 telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh5 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_busybox_wget_execution1 telnet_command_iptables_flush1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1 telnet_rm_recursive_hidden_relative_cleanup1

$ sikker related 189.197.23.1

🇲🇽·More threats fromMexico→AS·More threats fromMega Cable, S.A. de C.V.→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
177.245.73.46	23%	1
177.231.173.155	96%	49
177.229.197.38	100%	1,324
187.244.73.68	78%	25
177.228.101.136	83%	44

IP Address	Confidence	Events
177.125.137.18	77%	5,331
122.8.183.63	93%	279
187.251.123.104	100%	834
187.251.197.11	50%	10
189.223.83.61	23%	1