Check an IP Address, Domain Name, Subnet, or ASN

210.105.67.198 was found in our database!

$ whois 210.105.67.198

country·🇰🇷 South Korea

city·Boryeong

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 210.105.67.198scoring →

confidence

42%Medium

first_seen·Mar 12, 2026

last_seen·1h ago

sessions·10

events·10

$ sikker protocols 210.105.67.198

SSH

10 / 10

$ sikker summary 210.105.67.198

210.105.67.198 has a threat confidence score of 42%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 10 honeypot sessions targeting SSH protocols. First observed on March 12, 2026, most recently active May 1, 2026.

$ sikker primitives 210.105.67.198

ssh_kill_sigkill_target_root_literal4 ssh_readlink_proc_root_exe_resolved_path4 ssh_kill_sigkill_target_systemd_plus_literal3 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_then_cat_to_netai3 ssh_uname_all1 ssh_ps_aux_grep_netai_exclude_grep_count1 ssh_cpu_core_count_via_proc_cpuinfo_pipeline1 ssh_kill_sigkill_target_message_plus_literal1 ssh_top_10_processes_by_cpu_via_ps_sorted_desc1 ssh_readlink_proc_message_plus_exe_resolved_path1 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_pwd_echo1 ssh_cd_tmp_create_w_sh_if_missing_via_stdin_and_chmod_exec1 ssh_create_user_systemd_watcher_netai_service_and_enable_now1

$ sikker related 210.105.67.198

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
119.209.12.20	100%	1,067
222.103.93.113	96%	8,564
121.161.149.104	89%	758
121.141.219.98	100%	466
112.172.183.34	95%	79

IP Address	Confidence	Events
110.10.176.224	98%	6,661
183.110.116.65	100%	295
119.209.12.20	100%	1,067
222.103.93.113	96%	8,564
58.226.255.240	48%	477