Check an IP Address, Domain Name, Subnet, or ASN

220.197.78.254 was found in our database!

$ whois 220.197.78.254

country·🇨🇳 China

city·Guiyang

isp·CHINA UNICOM China169 Backbone

asn·AS4837

network·Standard

$ sikker risk 220.197.78.254scoring →

confidence

18%Low

first_seen·Mar 10, 2026

last_seen·1h ago

sessions·2

events·2

$ sikker protocols 220.197.78.254

SSH

1 / 1

ELASTICSEARCH

1 / 1

$ sikker summary 220.197.78.254

220.197.78.254 has a threat confidence score of 18%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 2 honeypot sessions targeting SSH, ELASTICSEARCH protocols. First observed on March 10, 2026, most recently active April 2, 2026.

$ sikker primitives 220.197.78.254

elastic_root_path_probe1 elastic_http_get_request1

$ sikker related 220.197.78.254

🇨🇳·More threats fromChina→AS·More threats fromCHINA UNICOM China169 Backbone→SSH·More threats targetingSSH→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
42.178.17.143	79%	152
121.29.4.46	94%	49
122.114.69.235	100%	649
122.97.215.234	92%	2
58.22.255.28	49%	407

IP Address	Confidence	Events
39.107.244.123	82%	23,976
8.130.126.61	82%	21,411
112.46.213.77	98%	5,918
60.10.101.222	100%	562
112.46.214.15	97%	240