Check an IP Address, Domain Name, Subnet, or ASN

197.95.125.230 was found in our database!

$ whois 197.95.125.230

country·🇿🇦 South Africa

city·Cape Town

isp·NTT-DATA-Inc

asn·AS20011

network·Standard

$ sikker risk 197.95.125.230scoring →

confidence

60%High

first_seen·Feb 7, 2026

last_seen·27d ago

sessions·2

events·3

$ sikker protocols 197.95.125.230

TELNET

2 / 3

$ sikker summary 197.95.125.230

197.95.125.230 has a threat confidence score of 60%. This IP address from South Africa (AS20011, NTT-DATA-Inc) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on February 7, 2026, most recently active February 25, 2026.

$ sikker primitives 197.95.125.230

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_busybox_binary_invocation11 telnet_command_sh7 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_command_iptables_flush2 telnet_rm_recursive_hidden_relative_cleanup2 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 197.95.125.230

🇿🇦·More threats fromSouth Africa→AS·More threats fromNTT-DATA-Inc→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
197.95.59.82	28%	69
197.83.230.42	35%	52
197.91.186.139	22%	32
152.110.65.194	19%	19
197.83.253.89	53%	1

IP Address	Confidence	Events
165.165.141.93	66%	32
102.33.152.150	99%	7,932
41.76.230.215	33%	157
102.67.178.159	35%	178
102.135.145.240	92%	253