Check an IP Address, Domain Name, Subnet, or ASN

222.103.254.190 was found in our database!

$ whois 222.103.254.190

country·🇰🇷 South Korea

city·Gimcheon

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 222.103.254.190scoring →

confidence

58%Medium

first_seen·Mar 22, 2026

last_seen·1h ago

sessions·1

events·1

$ sikker protocols 222.103.254.190

TELNET

1 / 1

$ sikker summary 222.103.254.190

222.103.254.190 has a threat confidence score of 58%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 22, 2026, most recently active March 22, 2026.

$ sikker primitives 222.103.254.190

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh4 telnet_busybox_binary_invocation4 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_busybox_hostname_set1 telnet_busybox_wget_execution1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 222.103.254.190

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
121.140.135.27	23%	1
220.92.117.221	88%	2,578
121.171.222.70	96%	90
125.138.26.212	58%	1
121.146.75.226	46%	3

IP Address	Confidence	Events
220.92.117.221	88%	2,581
141.101.84.121	8%	1
169.213.136.111	64%	2
175.112.226.174	17%	3
121.140.135.27	23%	1