Check an IP Address, Domain Name, Subnet, or ASN

117.20.227.25 was found in our database!

$ whois 117.20.227.25

country·🇰🇷 South Korea

city·Chilgok-gun

isp·Saero Network Service LTD

asn·AS9981

network·Standard

$ sikker risk 117.20.227.25scoring →

confidence

68%High

first_seen·Mar 24, 2026

last_seen·1h ago

sessions·3

events·3

$ sikker protocols 117.20.227.25

TELNET

3 / 3

$ sikker summary 117.20.227.25

117.20.227.25 has a threat confidence score of 68%. This IP address from South Korea (AS9981, Saero Network Service LTD) has been observed in 3 honeypot sessions targeting TELNET protocols. First observed on March 24, 2026, most recently active March 28, 2026.

$ sikker primitives 117.20.227.25

telnet_command_cd33 telnet_busybox_echo_redirect_file_create33 telnet_shell_execute_writable_hidden_file32 telnet_busybox_binary_invocation10 telnet_command_sh9 telnet_command_ping3 telnet_command_shell3 telnet_command_enable3 telnet_command_system3 telnet_command_linuxshell3 telnet_busybox_hostname_set3 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2 telnet_curl_remote_script_stdout_execution2

$ sikker related 117.20.227.25

🇰🇷·More threats fromSouth Korea→AS·More threats fromSaero Network Service LTD→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
122.199.123.139	90%	217
117.20.223.26	81%	9
59.151.197.93	64%	85
122.199.121.178	71%	4
113.59.150.123	99%	143

IP Address	Confidence	Events
121.178.185.141	54%	567
1.214.162.125	92%	93
183.110.216.135	97%	5,437
43.133.77.137	96%	966
210.104.95.169	99%	286