Check an IP Address, Domain Name, Subnet, or ASN

119.202.204.104 was found in our database!

$ whois 119.202.204.104

country·🇰🇷 South Korea

city·Dalseo-gu

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 119.202.204.104scoring →

confidence

84%Very High

first_seen·Jan 21, 2026

last_seen·1h ago

sessions·11

events·379

$ sikker protocols 119.202.204.104

TELNET

11 / 379

$ sikker summary 119.202.204.104

119.202.204.104 has a threat confidence score of 84%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 11 honeypot sessions targeting TELNET protocols. First observed on January 21, 2026, most recently active April 7, 2026.

$ sikker primitives 119.202.204.104

telnet_command_cd44 telnet_busybox_echo_redirect_file_create44 telnet_shell_execute_writable_hidden_file44 dismissed_primitive.33 telnet_cd_absolute_path_change11 telnet_busybox_binary_invocation10 telnet_command_sh7 telnet_command_ping4 telnet_command_shell4 telnet_command_enable4 telnet_command_system4 telnet_command_linuxshell4 telnet_busybox_hostname_set4 telnet_busybox_wget_execution1 telnet_system_command_invocation1 telnet_sh_execute_downloaded_script1 telnet_hidden_dev_file_output_redirection1 telnet_hidden_etc_file_output_redirection1 telnet_hidden_mnt_file_output_redirection1 telnet_hidden_tmp_file_output_redirection1

$ sikker related 119.202.204.104

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
118.42.247.180	69%	2
221.159.119.6	68%	885
221.162.202.105	90%	317
112.161.26.125	50%	469
218.149.235.152	53%	585

IP Address	Confidence	Events
1.234.63.146	62%	219
118.42.247.180	69%	2
221.159.119.6	68%	885
211.239.181.182	44%	277
115.90.134.220	29%	29