Check an IP Address, Domain Name, Subnet, or ASN

197.185.162.189 was found in our database!

$ whois 197.185.162.189

country·🇿🇦 South Africa

city·Johannesburg

isp·RAIN-GROUP-HOLDINGS

asn·AS37105

network·Standard

$ sikker risk 197.185.162.189scoring →

confidence

44%Medium

first_seen·Mar 30, 2026

last_seen·1d ago

sessions·6

events·6

$ sikker protocols 197.185.162.189

SMB

6 / 6

$ sikker summary 197.185.162.189

197.185.162.189 has a threat confidence score of 44%. This IP address from South Africa (AS37105, RAIN-GROUP-HOLDINGS) has been observed in 6 honeypot sessions targeting SMB protocols. First observed on March 30, 2026, most recently active March 30, 2026.

$ sikker related 197.185.162.189

🇿🇦·More threats fromSouth Africa→AS·More threats fromRAIN-GROUP-HOLDINGS→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
197.185.198.123	32%	1
41.56.173.21	32%	1
197.184.177.116	35%	3
197.184.91.18	39%	4
197.184.123.26	35%	3

IP Address	Confidence	Events
160.119.253.169	30%	59
41.13.140.188	39%	4
41.113.37.1	32%	1
41.181.156.205	97%	39
102.210.149.130	92%	15