Check an IP Address, Domain Name, Subnet, or ASN

197.89.40.195 was found in our database!

$ whois 197.89.40.195

country·🇿🇦 South Africa

city·Cape Town

isp·NTT-DATA-Inc

asn·AS20011

network·Standard

$ sikker risk 197.89.40.195scoring →

confidence

74%High

first_seen·Feb 20, 2026

last_seen·13d ago

sessions·7

events·55

$ sikker protocols 197.89.40.195

TELNET

7 / 55

$ sikker summary 197.89.40.195

197.89.40.195 has a threat confidence score of 74%. This IP address from South Africa (AS20011, NTT-DATA-Inc) has been observed in 7 honeypot sessions targeting TELNET protocols. First observed on February 20, 2026, most recently active March 11, 2026.

$ sikker primitives 197.89.40.195

telnet_command_cd66 telnet_busybox_echo_redirect_file_create66 telnet_shell_execute_writable_hidden_file66 telnet_busybox_binary_invocation18 telnet_command_sh12 telnet_command_ping6 telnet_command_shell6 telnet_command_enable6 telnet_command_system6 telnet_command_linuxshell6 telnet_command_iptables_flush6 telnet_rm_recursive_hidden_relative_cleanup6

$ sikker related 197.89.40.195

🇿🇦·More threats fromSouth Africa→AS·More threats fromNTT-DATA-Inc→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
197.95.59.82	28%	69
197.83.230.42	35%	52
197.91.186.139	22%	32
152.110.65.194	19%	19
197.83.253.89	53%	1

IP Address	Confidence	Events
165.165.141.93	66%	32
102.33.152.150	99%	7,932
41.76.230.215	33%	157
102.67.178.159	35%	178
102.135.145.240	92%	253