Check an IP Address, Domain Name, Subnet, or ASN

222.104.76.94 was found in our database!

$ whois 222.104.76.94

country·🇰🇷 South Korea

city·Gumi

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 222.104.76.94scoring →

confidence

69%High

first_seen·Apr 24, 2026

last_seen·1h ago

sessions·10

events·10

$ sikker protocols 222.104.76.94

SSH

10 / 10

$ sikker summary 222.104.76.94

222.104.76.94 has a threat confidence score of 69%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 10 honeypot sessions targeting SSH protocols. First observed on April 24, 2026, most recently active April 29, 2026.

$ sikker primitives 222.104.76.94

ssh_kill_sigkill_target_root_literal16 ssh_readlink_proc_root_exe_resolved_path16 ssh_kill_sigkill_target_systemd_plus_literal12 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_then_cat_to_netai9 ssh_uname_all5 ssh_ps_aux_grep_netai_exclude_grep_count5 ssh_cpu_core_count_via_proc_cpuinfo_pipeline5 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_pwd_echo5 ssh_cd_tmp_create_w_sh_if_missing_via_stdin_and_chmod_exec5 ssh_create_user_systemd_watcher_netai_service_and_enable_now5 ssh_kill_sigkill_target_message_plus_literal4 ssh_top_10_processes_by_cpu_via_ps_sorted_desc4 ssh_readlink_proc_message_plus_exe_resolved_path4

$ sikker related 222.104.76.94

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
14.55.144.22	100%	1,692
222.103.93.113	96%	8,487
61.76.136.25	92%	263
59.23.3.146	72%	62
121.128.173.237	44%	32

IP Address	Confidence	Events
123.58.200.167	95%	915
222.103.93.113	96%	8,488
58.229.188.59	95%	1,687
175.194.163.234	9%	4
112.161.26.125	50%	552