Check an IP Address, Domain Name, Subnet, or ASN

197.83.253.89 was found in our database!

$ whois 197.83.253.89

country·🇿🇦 South Africa

city·Durban

isp·NTT-DATA-Inc

asn·AS20011

network·Standard

$ sikker risk 197.83.253.89scoring →

confidence

53%Medium

first_seen·Mar 21, 2026

last_seen·3d ago

sessions·1

events·1

$ sikker protocols 197.83.253.89

TELNET

1 / 1

$ sikker summary 197.83.253.89

197.83.253.89 has a threat confidence score of 53%. This IP address from South Africa (AS20011, NTT-DATA-Inc) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 21, 2026, most recently active March 21, 2026.

$ sikker primitives 197.83.253.89

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_busybox_binary_invocation3 telnet_command_sh2 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_command_iptables_flush1 telnet_rm_recursive_hidden_relative_cleanup1

$ sikker related 197.83.253.89

🇿🇦·More threats fromSouth Africa→AS·More threats fromNTT-DATA-Inc→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
197.95.59.82	28%	69
197.83.230.42	35%	52
197.91.186.139	22%	32
152.110.65.194	19%	19
197.87.217.195	23%	1

IP Address	Confidence	Events
102.67.178.159	35%	177
41.76.230.215	33%	151
105.187.29.139	76%	5
185.203.122.211	27%	1
105.224.26.226	33%	19