Check an IP Address, Domain Name, Subnet, or ASN

121.154.117.191 was found in our database!

$ whois 121.154.117.191

country·🇰🇷 South Korea

city·Tangjin

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 121.154.117.191scoring →

confidence

83%Very High

first_seen·Jan 25, 2026

last_seen·1h ago

sessions·15

events·355

$ sikker protocols 121.154.117.191

TELNET

15 / 355

$ sikker summary 121.154.117.191

121.154.117.191 has a threat confidence score of 83%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 15 honeypot sessions targeting TELNET protocols. First observed on January 25, 2026, most recently active March 28, 2026.

$ sikker primitives 121.154.117.191

telnet_command_cd121 telnet_busybox_echo_redirect_file_create121 telnet_shell_execute_writable_hidden_file121 telnet_busybox_binary_invocation49 telnet_command_sh25 telnet_command_ping11 telnet_command_shell11 telnet_command_enable11 telnet_command_system11 telnet_command_linuxshell11 telnet_command_iptables_flush11 telnet_rm_recursive_hidden_relative_cleanup11 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 121.154.117.191

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
121.178.185.141	54%	567
183.110.216.135	97%	5,437
210.104.95.169	99%	286
210.114.17.26	95%	24
183.110.216.133	96%	3,045

IP Address	Confidence	Events
121.178.185.141	54%	567
1.214.162.125	92%	93
183.110.216.135	97%	5,437
43.133.77.137	96%	966
210.104.95.169	99%	286