Check an IP Address, Domain Name, Subnet, or ASN

112.214.17.61 was found in our database!

$ whois 112.214.17.61

country·🇰🇷 South Korea

city·Seongbuk-gu

isp·HCN Dongjak

asn·AS7562

network·Standard

$ sikker risk 112.214.17.61scoring →

confidence

89%Very High

first_seen·Jan 22, 2026

last_seen·1d ago

sessions·33

events·560

$ sikker protocols 112.214.17.61

TELNET

33 / 560

$ sikker summary 112.214.17.61

112.214.17.61 has a threat confidence score of 89%. This IP address from South Korea (AS7562, HCN Dongjak) has been observed in 33 honeypot sessions targeting TELNET protocols. First observed on January 22, 2026, most recently active March 24, 2026.

$ sikker primitives 112.214.17.61

telnet_command_cd253 telnet_busybox_echo_redirect_file_create253 telnet_shell_execute_writable_hidden_file253 telnet_busybox_binary_invocation59 telnet_command_sh38 telnet_command_ping23 telnet_command_shell23 telnet_command_enable23 telnet_command_system23 telnet_command_linuxshell23 telnet_busybox_hostname_set23 dismissed_primitive.11 telnet_sh_execute_downloaded_script5 telnet_busybox_ftpget_remote_file_download5 telnet_busybox_tftp_get_remote_file_stdout5 telnet_curl_remote_script_stdout_execution5 telnet_busybox_wget_execution4

$ sikker related 112.214.17.61

🇰🇷·More threats fromSouth Korea→AS·More threats fromHCN Dongjak→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
58.141.130.78	72%	4
49.142.79.72	85%	381
59.187.234.124	62%	4
101.235.199.67	79%	13
118.91.2.191	69%	5

IP Address	Confidence	Events
122.35.192.61	100%	376
220.92.117.221	89%	3,755
130.162.132.75	100%	263
59.22.68.213	34%	34
39.115.195.164	93%	196