Check an IP Address, Domain Name, Subnet, or ASN

197.251.249.118 was found in our database!

$ whois 197.251.249.118

country·🇬🇭 Ghana

city·Accra

isp·VODAFONE GHANA AS INTERNATIONAL TRANSIT

asn·AS29614

network·Standard

$ sikker risk 197.251.249.118scoring →

confidence

60%High

first_seen·May 1, 2026

last_seen·21h ago

sessions·1

events·1

$ sikker protocols 197.251.249.118

TELNET

1 / 1

$ sikker summary 197.251.249.118

197.251.249.118 has a threat confidence score of 60%. This IP address from Ghana (AS29614, VODAFONE GHANA AS INTERNATIONAL TRANSIT) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on May 1, 2026, most recently active May 1, 2026.

$ sikker primitives 197.251.249.118

telnet_busybox_binary_invocation14 telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh5 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_busybox_wget_execution1 telnet_command_iptables_flush1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1 telnet_rm_recursive_hidden_relative_cleanup1

$ sikker related 197.251.249.118

🇬🇭·More threats fromGhana→AS·More threats fromVODAFONE GHANA AS INTERNATIONAL TRANSIT→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
80.87.83.229	100%	274
197.251.193.6	60%	1,413
197.251.249.73	60%	1
41.204.44.101	90%	11
197.251.249.75	74%	299

IP Address	Confidence	Events
80.87.83.229	100%	274
41.242.115.83	100%	610
41.242.115.84	100%	673
154.160.69.206	31%	81
197.251.193.6	60%	1,413