Check an IP Address, Domain Name, Subnet, or ASN

218.159.8.97 was found in our database!

$ whois 218.159.8.97

country·🇰🇷 South Korea

city·Cheongju-si

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 218.159.8.97scoring →

confidence

72%High

first_seen·Mar 19, 2026

last_seen·34m ago

sessions·7

events·7

$ sikker protocols 218.159.8.97

TELNET

7 / 7

$ sikker summary 218.159.8.97

218.159.8.97 has a threat confidence score of 72%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 7 honeypot sessions targeting TELNET protocols. First observed on March 19, 2026, most recently active April 12, 2026.

$ sikker primitives 218.159.8.97

telnet_command_cd77 telnet_busybox_echo_redirect_file_create77 telnet_shell_execute_writable_hidden_file77 telnet_busybox_binary_invocation18 telnet_command_sh13 telnet_command_ping7 telnet_command_shell7 telnet_command_enable7 telnet_command_system7 telnet_command_linuxshell7 telnet_busybox_hostname_set7 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2 telnet_curl_remote_script_stdout_execution2

$ sikker related 218.159.8.97

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
183.104.220.84	49%	457
125.142.87.100	23%	1
222.103.93.113	96%	5,358
218.149.235.152	52%	593
121.180.67.208	79%	153

IP Address	Confidence	Events
222.103.93.113	96%	5,359
1.176.134.235	97%	71
36.39.140.2	47%	381
121.189.198.60	49%	445
180.71.9.31	49%	439