Check an IP Address, Domain Name, Subnet, or ASN

59.187.234.124 was found in our database!

$ whois 59.187.234.124

country·🇰🇷 South Korea

city·Dongjak-gu

isp·HCN Dongjak

asn·AS7562

network·Standard

$ sikker risk 59.187.234.124scoring →

confidence

62%High

first_seen·Feb 27, 2026

last_seen·13h ago

sessions·4

events·4

$ sikker protocols 59.187.234.124

TELNET

4 / 4

$ sikker summary 59.187.234.124

59.187.234.124 has a threat confidence score of 62%. This IP address from South Korea (AS7562, HCN Dongjak) has been observed in 4 honeypot sessions targeting TELNET protocols. First observed on February 27, 2026, most recently active March 25, 2026.

$ sikker primitives 59.187.234.124

telnet_command_cd44 telnet_busybox_echo_redirect_file_create44 telnet_shell_execute_writable_hidden_file44 telnet_busybox_binary_invocation12 telnet_command_sh8 telnet_command_ping4 telnet_command_shell4 telnet_command_enable4 telnet_command_system4 telnet_command_linuxshell4 telnet_command_iptables_flush4 telnet_rm_recursive_hidden_relative_cleanup4

$ sikker related 59.187.234.124

🇰🇷·More threats fromSouth Korea→AS·More threats fromHCN Dongjak→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
58.141.130.78	72%	4
49.142.79.72	85%	381
101.235.199.67	79%	13
118.91.2.191	69%	5
111.118.34.113	68%	3

IP Address	Confidence	Events
121.153.60.137	99%	123
220.92.117.221	89%	3,732
220.118.173.234	100%	750
220.122.115.9	67%	433
183.110.216.135	97%	5,323