Check an IP Address, Domain Name, Subnet, or ASN

221.166.199.208 was found in our database!

$ whois 221.166.199.208

country·🇰🇷 South Korea

city·Gyeongju

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 221.166.199.208scoring →

confidence

72%High

first_seen·Mar 17, 2026

last_seen·1h ago

sessions·4

events·4

$ sikker protocols 221.166.199.208

TELNET

4 / 4

$ sikker summary 221.166.199.208

221.166.199.208 has a threat confidence score of 72%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 4 honeypot sessions targeting TELNET protocols. First observed on March 17, 2026, most recently active March 24, 2026.

$ sikker primitives 221.166.199.208

telnet_command_cd44 telnet_busybox_echo_redirect_file_create44 telnet_shell_execute_writable_hidden_file44 telnet_command_sh16 telnet_busybox_binary_invocation16 telnet_command_ping4 telnet_command_shell4 telnet_command_enable4 telnet_command_system4 telnet_command_linuxshell4 telnet_busybox_hostname_set4 telnet_busybox_wget_execution4 telnet_sh_execute_downloaded_script4 telnet_busybox_ftpget_remote_file_download4 telnet_busybox_tftp_get_remote_file_stdout4 telnet_curl_remote_script_stdout_execution4

$ sikker related 221.166.199.208

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
220.92.117.221	89%	3,355
183.110.216.135	97%	5,188
211.194.28.203	71%	552
14.49.156.137	19%	23
121.190.139.114	28%	1

IP Address	Confidence	Events
211.194.28.203	71%	581
122.252.126.2	80%	169
43.128.156.102	96%	2,436
43.155.205.171	96%	2,238
118.219.234.233	100%	960