Check an IP Address, Domain Name, Subnet, or ASN

61.81.158.204 was found in our database!

$ whois 61.81.158.204

country·🇰🇷 South Korea

city·Iksan

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 61.81.158.204scoring →

confidence

84%Very High

first_seen·Jan 27, 2026

last_seen·1h ago

sessions·19

events·359

$ sikker protocols 61.81.158.204

TELNET

19 / 359

$ sikker summary 61.81.158.204

61.81.158.204 has a threat confidence score of 84%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 19 honeypot sessions targeting TELNET protocols. First observed on January 27, 2026, most recently active March 28, 2026.

$ sikker primitives 61.81.158.204

telnet_command_cd154 telnet_busybox_echo_redirect_file_create154 telnet_shell_execute_writable_hidden_file154 telnet_busybox_binary_invocation58 telnet_command_sh31 telnet_command_ping14 telnet_command_shell14 telnet_command_enable14 telnet_command_system14 telnet_command_linuxshell14 telnet_command_iptables_flush14 telnet_rm_recursive_hidden_relative_cleanup14 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 61.81.158.204

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
112.171.32.21	99%	242
183.110.216.135	97%	5,446
221.153.190.28	85%	15
121.142.87.218	100%	897
183.110.216.133	96%	3,047

IP Address	Confidence	Events
112.171.32.21	99%	242
211.169.20.238	56%	1
45.93.30.244	99%	148
183.110.216.135	97%	5,446
114.30.223.119	48%	348