Check an IP Address, Domain Name, Subnet, or ASN

1.220.64.218 was found in our database!

$ whois 1.220.64.218

country·🇰🇷 South Korea

city·Seoul

isp·LG DACOM Corporation

asn·AS3786

network·Standard

$ sikker risk 1.220.64.218scoring →

confidence

63%High

first_seen·Feb 1, 2026

last_seen·1h ago

sessions·125

events·128

$ sikker protocols 1.220.64.218

SSH

125 / 128

$ sikker summary 1.220.64.218

1.220.64.218 has a threat confidence score of 63%. This IP address from South Korea (AS3786, LG DACOM Corporation) has been observed in 125 honeypot sessions targeting SSH protocols. Detected attack patterns include ssh routeros cloud probe and telegram sms artifact discovery. First observed on February 1, 2026, most recently active April 2, 2026.

$ sikker behaviors 1.220.64.218catalog →

highSsh Routeros Cloud Probe And Telegram Sms Artifact Discovery1x

SSH post-auth sequence running RouterOS cloud/DDNS commands, Telegram data path checks, GSM/SMS artifact searches, and miner process lookups (`ps | grep miner`), preceded by basic system enumeration.

$ sikker primitives 1.220.64.218

ssh_routeros_ip_cloud_print_probe2 ssh_uname_all1 ssh_cat_proc_cpuinfo1 ssh_ps_ef_grep_miner_bracket_case1 ssh_ifconfig_interface_enumeration1 ssh_routeros_user_set_password_id01 ssh_echo_hi_pipe_cat_numbering_test1 ssh_locate_telegram_tdata_identifier1 ssh_routeros_interface_lte_print_probe1 ssh_routeros_ip_cloud_set_ddns_enabled1 ssh_ps_pipe_grep_miner_case_insensitive1 ssh_ls_telegram_tdata_and_gsm_sms_artifacts1

$ sikker related 1.220.64.218

🇰🇷·More threats fromSouth Korea→AS·More threats fromLG DACOM Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
115.91.48.142	100%	588
1.214.255.210	100%	126
106.246.89.72	44%	307
1.213.214.233	91%	119
1.222.42.237	100%	262

IP Address	Confidence	Events
222.232.176.7	100%	827
211.44.181.178	61%	291
112.185.73.211	57%	165
175.198.28.246	100%	385
203.252.10.3	62%	719