Check an IP Address, Domain Name, Subnet, or ASN

117.20.223.26 was found in our database!

$ whois 117.20.223.26

country·🇰🇷 South Korea

city·Gumi

isp·Saero Network Service LTD

asn·AS9981

network·Standard

$ sikker risk 117.20.223.26scoring →

confidence

81%Very High

first_seen·Mar 18, 2026

last_seen·23h ago

sessions·9

events·9

$ sikker protocols 117.20.223.26

TELNET

9 / 9

$ sikker summary 117.20.223.26

117.20.223.26 has a threat confidence score of 81%. This IP address from South Korea (AS9981, Saero Network Service LTD) has been observed in 9 honeypot sessions targeting TELNET protocols. First observed on March 18, 2026, most recently active March 28, 2026.

$ sikker primitives 117.20.223.26

telnet_command_cd99 telnet_busybox_echo_redirect_file_create99 telnet_shell_execute_writable_hidden_file99 telnet_command_sh36 telnet_busybox_binary_invocation36 telnet_command_ping9 telnet_command_shell9 telnet_command_enable9 telnet_command_system9 telnet_command_linuxshell9 telnet_busybox_hostname_set9 telnet_busybox_wget_execution9 telnet_sh_execute_downloaded_script9 telnet_busybox_ftpget_remote_file_download9 telnet_busybox_tftp_get_remote_file_stdout9 telnet_curl_remote_script_stdout_execution9

$ sikker related 117.20.223.26

🇰🇷·More threats fromSouth Korea→AS·More threats fromSaero Network Service LTD→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
117.20.227.25	68%	3
113.59.150.123	99%	145
122.199.123.139	90%	217
59.151.197.93	64%	85
122.199.121.178	71%	4

IP Address	Confidence	Events
1.234.19.107	75%	61
112.216.120.67	100%	1,008
222.99.15.195	87%	9
183.110.216.135	97%	5,455
211.180.247.219	63%	204