Check an IP Address, Domain Name, Subnet, or ASN

121.154.9.109 was found in our database!

$ whois 121.154.9.109

country·🇰🇷 South Korea

city·Jeonju

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 121.154.9.109scoring →

confidence

79%High

first_seen·Mar 29, 2026

last_seen·3h ago

sessions·12

events·12

$ sikker protocols 121.154.9.109

TELNET

12 / 12

$ sikker summary 121.154.9.109

121.154.9.109 has a threat confidence score of 79%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 12 honeypot sessions targeting TELNET protocols. First observed on March 29, 2026, most recently active April 14, 2026.

$ sikker primitives 121.154.9.109

telnet_command_cd132 telnet_shell_execute_writable_hidden_file132 telnet_busybox_echo_redirect_file_create131 telnet_busybox_binary_invocation32 telnet_command_sh24 telnet_command_ping12 telnet_command_shell12 telnet_command_enable12 telnet_command_system12 telnet_command_linuxshell12 telnet_busybox_hostname_set12 telnet_busybox_wget_execution4 telnet_sh_execute_downloaded_script4 telnet_busybox_ftpget_remote_file_download4 telnet_busybox_tftp_get_remote_file_stdout4 telnet_curl_remote_script_stdout_execution4

$ sikker related 121.154.9.109

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
14.54.22.11	58%	1,051
61.76.136.25	92%	221
183.110.116.87	95%	30
222.117.0.253	57%	910
211.251.245.88	100%	144

IP Address	Confidence	Events
43.166.7.113	53%	66
27.102.76.8	96%	2,497
222.103.93.113	96%	5,972
211.228.218.47	100%	147
58.229.188.59	95%	837