Check an IP Address, Domain Name, Subnet, or ASN

59.23.30.237 was found in our database!

$ whois 59.23.30.237

country·🇰🇷 South Korea

city·Gumi

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 59.23.30.237scoring →

confidence

65%High

first_seen·Feb 16, 2026

last_seen·1h ago

sessions·8

events·8

$ sikker protocols 59.23.30.237

TELNET

8 / 8

$ sikker summary 59.23.30.237

59.23.30.237 has a threat confidence score of 65%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 8 honeypot sessions targeting TELNET protocols. First observed on February 16, 2026, most recently active April 1, 2026.

$ sikker primitives 59.23.30.237

telnet_command_cd88 telnet_busybox_echo_redirect_file_create88 telnet_shell_execute_writable_hidden_file88 telnet_busybox_binary_invocation24 telnet_command_sh16 telnet_command_ping8 telnet_command_shell8 telnet_command_enable8 telnet_command_system8 telnet_command_linuxshell8

$ sikker related 59.23.30.237

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
14.58.62.183	100%	957
222.103.93.113	96%	3,794
183.110.216.135	96%	5,917
183.110.216.133	96%	3,248
121.168.139.251	100%	541

IP Address	Confidence	Events
14.58.62.183	100%	964
43.131.253.67	96%	2,814
43.133.77.137	96%	1,546
43.128.156.102	96%	2,780
222.103.93.113	96%	3,796