14.54.22.11 has a high threat confidence level of 62%, originating from Wŏnju, South Korea, on the Korea Telecom network (4766). It has been observed across 499 sessions targeting SSH, First observed on January 21, 2026, most recently active March 7, 2026.