Check an IP Address, Domain Name, Subnet, or ASN

197.185.198.123 was found in our database!

$ whois 197.185.198.123

country·🇿🇦 South Africa

city·Johannesburg

isp·RAIN-GROUP-HOLDINGS

asn·AS37105

network·Standard

$ sikker risk 197.185.198.123scoring →

confidence

32%Low

first_seen·Mar 31, 2026

last_seen·3h ago

sessions·1

events·1

$ sikker protocols 197.185.198.123

TELNET

1 / 1

$ sikker summary 197.185.198.123

197.185.198.123 has a threat confidence score of 32%. This IP address from South Africa (AS37105, RAIN-GROUP-HOLDINGS) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 31, 2026, most recently active March 31, 2026.

$ sikker primitives 197.185.198.123

telnet_command_sh1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1

$ sikker related 197.185.198.123

🇿🇦·More threats fromSouth Africa→AS·More threats fromRAIN-GROUP-HOLDINGS→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
41.56.173.21	32%	1
197.185.162.189	44%	6
197.184.177.116	35%	3
197.184.91.18	39%	4
197.184.123.26	35%	3

IP Address	Confidence	Events
160.119.55.58	32%	1
102.135.145.240	96%	472
102.141.170.73	46%	7
102.210.149.105	100%	748
66.8.6.152	36%	216