Check an IP Address, Domain Name, Subnet, or ASN

118.91.2.191 was found in our database!

$ whois 118.91.2.191

country·🇰🇷 South Korea

isp·HCN Dongjak

asn·AS7562

network·Standard

$ sikker risk 118.91.2.191scoring →

confidence

69%High

first_seen·Feb 21, 2026

last_seen·1d ago

sessions·5

events·5

$ sikker protocols 118.91.2.191

TELNET

5 / 5

$ sikker summary 118.91.2.191

118.91.2.191 has a threat confidence score of 69%. This IP address from South Korea (AS7562, HCN Dongjak) has been observed in 5 honeypot sessions targeting TELNET protocols. First observed on February 21, 2026, most recently active March 24, 2026.

$ sikker primitives 118.91.2.191

telnet_command_cd55 telnet_busybox_echo_redirect_file_create55 telnet_shell_execute_writable_hidden_file55 telnet_busybox_binary_invocation33 telnet_command_sh11 telnet_command_ping5 telnet_command_shell5 telnet_command_enable5 telnet_command_system5 telnet_command_linuxshell5 telnet_busybox_hostname_set5 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2 telnet_curl_remote_script_stdout_execution2

$ sikker related 118.91.2.191

🇰🇷·More threats fromSouth Korea→AS·More threats fromHCN Dongjak→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
58.141.130.78	72%	4
49.142.79.72	85%	381
59.187.234.124	62%	4
101.235.199.67	79%	13
111.118.34.113	68%	3

IP Address	Confidence	Events
121.153.60.137	99%	123
220.92.117.221	89%	3,732
220.118.173.234	100%	750
220.122.115.9	67%	433
183.110.216.135	97%	5,323