Check an IP Address, Domain Name, Subnet, or ASN

1.196.90.172 was found in our database!

$ whois 1.196.90.172

country·🇨🇳 China

isp·Chinanet

asn·AS4134

network·Standard

$ sikker risk 1.196.90.172scoring →

confidence

62%High

first_seen·Mar 26, 2026

last_seen·1h ago

sessions·2

events·2

$ sikker protocols 1.196.90.172

TELNET

2 / 2

$ sikker summary 1.196.90.172

1.196.90.172 has a threat confidence score of 62%. This IP address from China (AS4134, Chinanet) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 26, 2026, most recently active March 29, 2026.

$ sikker primitives 1.196.90.172

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_busybox_binary_invocation6 telnet_command_sh5 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_busybox_hostname_set2 telnet_busybox_wget_execution1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 1.196.90.172

🇨🇳·More threats fromChina→AS·More threats fromChinanet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
221.228.10.71	91%	485
124.116.23.182	42%	64
27.185.102.215	43%	1
14.29.245.15	100%	166
183.145.108.234	89%	371

IP Address	Confidence	Events
8.152.99.77	88%	6,021
139.196.233.120	90%	36,447
221.228.10.71	91%	485
140.249.212.172	100%	126
139.199.80.137	86%	105,424