Check an IP Address, Domain Name, Subnet, or ASN

175.215.198.204 was found in our database!

$ whois 175.215.198.204

country·🇰🇷 South Korea

city·Changwon

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 175.215.198.204scoring →

confidence

66%High

first_seen·Mar 26, 2026

last_seen·2h ago

sessions·2

events·2

$ sikker protocols 175.215.198.204

TELNET

2 / 2

$ sikker summary 175.215.198.204

175.215.198.204 has a threat confidence score of 66%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 26, 2026, most recently active March 27, 2026.

$ sikker primitives 175.215.198.204

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_command_sh8 telnet_busybox_binary_invocation8 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_busybox_hostname_set2 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2 telnet_curl_remote_script_stdout_execution2

$ sikker related 175.215.198.204

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
115.21.71.141	92%	279
220.92.117.221	90%	4,783
119.201.59.224	50%	440
112.164.224.70	21%	9
125.138.175.113	100%	242

IP Address	Confidence	Events
211.180.247.219	63%	180
146.56.182.39	51%	456
211.44.181.178	61%	147
115.21.71.141	92%	279
220.92.117.221	90%	4,783