Check an IP Address, Domain Name, Subnet, or ASN

197.87.186.94 was found in our database!

$ whois 197.87.186.94

country·🇿🇦 South Africa

city·Cape Town

isp·NTT-DATA-Inc

asn·AS20011

network·Standard

$ sikker risk 197.87.186.94scoring →

confidence

53%Medium

first_seen·Mar 31, 2026

last_seen·2h ago

sessions·1

events·1

$ sikker protocols 197.87.186.94

TELNET

1 / 1

$ sikker summary 197.87.186.94

197.87.186.94 has a threat confidence score of 53%. This IP address from South Africa (AS20011, NTT-DATA-Inc) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 31, 2026, most recently active March 31, 2026.

$ sikker primitives 197.87.186.94

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_busybox_binary_invocation3 telnet_command_sh2 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_command_iptables_flush1 telnet_rm_recursive_hidden_relative_cleanup1

$ sikker related 197.87.186.94

🇿🇦·More threats fromSouth Africa→AS·More threats fromNTT-DATA-Inc→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
197.89.151.13	35%	3
197.83.230.42	33%	62
197.90.130.43	39%	4
197.95.119.4	53%	1
41.133.236.14	52%	1

IP Address	Confidence	Events
66.8.6.152	35%	199
154.70.223.95	31%	135
41.181.156.205	97%	36
154.119.166.18	21%	43
197.245.254.229	27%	19