Check an IP Address, Domain Name, Subnet, or ASN

59.23.3.146 was found in our database!

$ whois 59.23.3.146

country·🇰🇷 South Korea

city·Gumi

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 59.23.3.146scoring →

confidence

72%High

first_seen·Feb 22, 2026

last_seen·1h ago

sessions·62

events·62

$ sikker protocols 59.23.3.146

SSH

62 / 62

$ sikker summary 59.23.3.146

59.23.3.146 has a threat confidence score of 72%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 62 honeypot sessions targeting SSH protocols. First observed on February 22, 2026, most recently active April 29, 2026.

$ sikker primitives 59.23.3.146

ssh_kill_sigkill_target_root_literal32 ssh_readlink_proc_root_exe_resolved_path32 ssh_kill_sigkill_target_systemd_plus_literal24 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_then_cat_to_netai15 ssh_uname_all8 ssh_ps_aux_grep_netai_exclude_grep_count8 ssh_cpu_core_count_via_proc_cpuinfo_pipeline8 ssh_kill_sigkill_target_message_plus_literal8 ssh_top_10_processes_by_cpu_via_ps_sorted_desc8 ssh_readlink_proc_message_plus_exe_resolved_path8 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_pwd_echo8 ssh_cd_tmp_create_w_sh_if_missing_via_stdin_and_chmod_exec8 ssh_create_user_systemd_watcher_netai_service_and_enable_now8

$ sikker related 59.23.3.146

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
118.37.247.23	23%	1
222.103.93.113	96%	8,489
220.80.223.144	100%	1,603
121.153.76.187	20%	4
203.228.30.198	100%	1,150

IP Address	Confidence	Events
123.58.200.244	95%	854
118.37.247.23	23%	1
1.214.117.218	100%	591
222.103.93.113	96%	8,489
112.217.199.222	100%	174