Check an IP Address, Domain Name, Subnet, or ASN

197.185.148.185 was found in our database!

$ whois 197.185.148.185

country·🇿🇦 South Africa

city·Johannesburg

isp·RAIN-GROUP-HOLDINGS

asn·AS37105

network·Standard

$ sikker risk 197.185.148.185scoring →

confidence

41%Medium

first_seen·Mar 22, 2026

last_seen·2h ago

sessions·12

events·12

$ sikker protocols 197.185.148.185

SMB

12 / 12

$ sikker summary 197.185.148.185

197.185.148.185 has a threat confidence score of 41%. This IP address from South Africa (AS37105, RAIN-GROUP-HOLDINGS) has been observed in 12 honeypot sessions targeting SMB protocols. First observed on March 22, 2026, most recently active March 25, 2026.

$ sikker related 197.185.148.185

🇿🇦·More threats fromSouth Africa→AS·More threats fromRAIN-GROUP-HOLDINGS→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
197.185.153.224	35%	3
197.185.153.162	49%	9
41.56.246.123	49%	9
197.184.78.88	42%	5
197.184.113.10	52%	12

IP Address	Confidence	Events
154.72.6.180	25%	63
66.8.6.151	39%	4
197.245.215.170	29%	14
160.226.138.15	29%	98
102.33.152.138	99%	1,328