Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
197.242.200.249 has a threat confidence score of 60%. This IP address from South Africa (AS37353, SEACOM-AS) has been observed in 6 honeypot sessions targeting SSH protocols. First observed on January 31, 2026, most recently active February 21, 2026.
Repeated SSH password authentication attempts observed within the same activity window, indicating automated credential guessing against the SSH service. The behavior reflects authentication-based access attempts derived from observed password login events without assuming successful compromise.