Check an IP Address, Domain Name, Subnet, or ASN

220.197.15.206 was found in our database!

$ whois 220.197.15.206

country·🇨🇳 China

city·Guiyang

isp·CHINA UNICOM China169 Backbone

asn·AS4837

network·Standard

$ sikker risk 220.197.15.206scoring →

confidence

67%High

first_seen·Jan 29, 2026

last_seen·1h ago

sessions·14

events·26

$ sikker protocols 220.197.15.206

SSH

11 / 23

REDIS

3 / 3

$ sikker summary 220.197.15.206

220.197.15.206 has a threat confidence score of 67%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 14 honeypot sessions targeting SSH, REDIS protocols. First observed on January 29, 2026, most recently active March 23, 2026.

$ sikker primitives 220.197.15.206

redis_config_set_dbfilename_custom9 redis_flushdb6 ssh_password_authenthication.6 redis_uppercase_slaveof_no_one6 redis_config_set_dir_current_directory6 redis_save3 redis_info_lowercase3 redis_config_set_dir_cron3 redis_config_set_dir_root_ssh3 redis_config_set_rdbcompression_no3 redis_uppercase_config_set_dir_tmp3 redis_config_set_rdbcompression_yes3 redis_system_exec_remove_tmp_exp_so3 redis_uppercase_module_unload_system3 redis_uppercase_module_load_tmp_exp_so3 redis_uppercase_slaveof_remote_host_port3 redis_uppercase_config_set_dbfilename_exp_so3 redis_set_cron_ssh_rsa_authorized_key_injection3

$ sikker related 220.197.15.206

🇨🇳·More threats fromChina→AS·More threats fromCHINA UNICOM China169 Backbone→SSH·More threats targetingSSH→REDI·More threats targetingREDIS→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
112.248.178.186	100%	67
183.184.215.3	92%	35
123.14.17.138	23%	1
123.188.239.125	97%	3,238
122.136.195.32	49%	347

IP Address	Confidence	Events
112.46.212.189	93%	20
202.103.219.230	26%	75
112.248.178.186	100%	67
111.53.212.38	21%	40
182.35.100.246	35%	3