Check an IP Address, Domain Name, Subnet, or ASN

118.47.3.197 was found in our database!

$ whois 118.47.3.197

country·🇰🇷 South Korea

city·Yeonje-gu

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 118.47.3.197scoring →

confidence

66%High

first_seen·Mar 21, 2026

last_seen·1h ago

sessions·2

events·2

$ sikker protocols 118.47.3.197

TELNET

2 / 2

$ sikker summary 118.47.3.197

118.47.3.197 has a threat confidence score of 66%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 21, 2026, most recently active March 23, 2026.

$ sikker primitives 118.47.3.197

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_command_sh8 telnet_busybox_binary_invocation8 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_busybox_hostname_set2 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2 telnet_curl_remote_script_stdout_execution2

$ sikker related 118.47.3.197

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
220.92.117.221	89%	3,071
203.232.16.152	69%	2
221.159.21.170	49%	380
121.139.245.144	82%	368
183.110.216.135	97%	5,056

IP Address	Confidence	Events
122.252.126.2	75%	89
220.92.117.221	89%	3,070
52.231.220.210	88%	14
221.159.21.170	49%	380
121.139.245.144	82%	368