Check an IP Address, Domain Name, Subnet, or ASN

1.20.104.18 was found in our database!

$ whois 1.20.104.18

country·🇹🇭 Thailand

isp·TOT Public Company Limited

asn·AS23969

network·Standard

$ sikker risk 1.20.104.18scoring →

confidence

53%Medium

first_seen·Mar 27, 2026

last_seen·1h ago

sessions·1

events·1

$ sikker protocols 1.20.104.18

TELNET

1 / 1

$ sikker summary 1.20.104.18

1.20.104.18 has a threat confidence score of 53%. This IP address from Thailand (AS23969, TOT Public Company Limited) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 27, 2026, most recently active March 27, 2026.

$ sikker primitives 1.20.104.18

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_busybox_binary_invocation3 telnet_command_sh2 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_command_iptables_flush1 telnet_rm_recursive_hidden_relative_cleanup1

$ sikker related 1.20.104.18

🇹🇭·More threats fromThailand→AS·More threats fromTOT Public Company Limited→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
1.0.210.105	37%	10
125.26.173.146	40%	13
101.108.177.81	44%	6
1.20.157.121	35%	3
118.172.122.9	35%	3

IP Address	Confidence	Events
180.183.246.177	27%	65
165.154.120.211	88%	18
110.77.229.114	51%	2
171.7.222.233	49%	9
223.206.125.203	35%	3