Check an IP Address, Domain Name, Subnet, or ASN

118.47.106.97 was found in our database!

$ whois 118.47.106.97

country·🇰🇷 South Korea

city·Geoje

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 118.47.106.97scoring →

confidence

87%Very High

first_seen·Jan 22, 2026

last_seen·1h ago

sessions·15

events·553

$ sikker protocols 118.47.106.97

TELNET

15 / 553

$ sikker summary 118.47.106.97

118.47.106.97 has a threat confidence score of 87%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 15 honeypot sessions targeting TELNET protocols. First observed on January 22, 2026, most recently active March 22, 2026.

$ sikker primitives 118.47.106.97

telnet_command_cd99 telnet_busybox_echo_redirect_file_create99 telnet_shell_execute_writable_hidden_file99 telnet_busybox_binary_invocation46 telnet_command_sh27 dismissed_primitive.11 telnet_command_ping9 telnet_command_shell9 telnet_command_enable9 telnet_command_system9 telnet_command_linuxshell9 telnet_command_iptables_flush6 telnet_rm_recursive_hidden_relative_cleanup6 telnet_sh_execute_downloaded_script4 telnet_busybox_ftpget_remote_file_download4 telnet_busybox_tftp_get_remote_file_stdout4 telnet_curl_remote_script_stdout_execution4 telnet_busybox_hostname_set3 telnet_busybox_wget_execution3

$ sikker related 118.47.106.97

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
221.161.235.168	100%	960
61.77.88.90	100%	3,677
220.92.117.221	89%	2,831
183.110.216.133	97%	3,005
183.110.216.135	97%	4,947

IP Address	Confidence	Events
43.155.182.126	96%	2,361
61.77.88.90	100%	3,677
222.232.176.7	100%	743
220.92.117.221	89%	2,831
183.110.216.133	97%	3,005