Check an IP Address, Domain Name, Subnet, or ASN

197.184.79.89 was found in our database!

$ whois 197.184.79.89

country·🇿🇦 South Africa

city·Johannesburg

isp·RAIN-GROUP-HOLDINGS

asn·AS37105

network·Standard

$ sikker risk 197.184.79.89scoring →

confidence

44%Medium

first_seen·Apr 18, 2026

last_seen·1d ago

sessions·6

events·6

$ sikker protocols 197.184.79.89

SMB

6 / 6

$ sikker summary 197.184.79.89

197.184.79.89 has a threat confidence score of 44%. This IP address from South Africa (AS37105, RAIN-GROUP-HOLDINGS) has been observed in 6 honeypot sessions targeting SMB protocols. First observed on April 18, 2026, most recently active April 18, 2026.

$ sikker related 197.184.79.89

🇿🇦·More threats fromSouth Africa→AS·More threats fromRAIN-GROUP-HOLDINGS→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
41.56.137.68	35%	3
197.185.162.112	39%	4
41.56.224.91	50%	10
197.184.172.122	23%	1
197.185.129.142	36%	1

IP Address	Confidence	Events
169.255.198.193	100%	2,441
66.8.6.156	37%	270
102.210.148.92	100%	874
164.151.136.50	61%	2,589
102.182.119.67	60%	28