Check an IP Address, Domain Name, Subnet, or ASN

115.21.140.191 was found in our database!

$ whois 115.21.140.191

country·🇰🇷 South Korea

city·Seo-gu

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 115.21.140.191scoring →

confidence

81%Very High

first_seen·Jan 26, 2026

last_seen·1h ago

sessions·11

events·253

$ sikker protocols 115.21.140.191

TELNET

11 / 253

$ sikker summary 115.21.140.191

115.21.140.191 has a threat confidence score of 81%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 11 honeypot sessions targeting TELNET protocols. First observed on January 26, 2026, most recently active March 27, 2026.

$ sikker primitives 115.21.140.191

telnet_command_cd99 telnet_busybox_echo_redirect_file_create99 telnet_shell_execute_writable_hidden_file99 telnet_busybox_binary_invocation43 telnet_command_sh21 telnet_command_ping9 telnet_command_shell9 telnet_command_enable9 telnet_command_system9 telnet_command_linuxshell9 telnet_command_iptables_flush9 telnet_rm_recursive_hidden_relative_cleanup9 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 115.21.140.191

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
220.92.117.221	90%	4,651
59.26.10.173	78%	4
14.49.149.159	12%	3
118.47.3.197	83%	55
211.106.133.202	100%	913

IP Address	Confidence	Events
1.234.19.14	88%	1,211
220.92.117.221	90%	4,651
59.26.10.173	78%	4
121.66.124.149	23%	1
14.49.149.159	12%	3