Check an IP Address, Domain Name, Subnet, or ASN

101.71.39.27 was found in our database!

$ whois 101.71.39.27

country·🇨🇳 China

city·Hangzhou

isp·CHINA UNICOM China169 Backbone

asn·AS4837

network·Standard

$ sikker risk 101.71.39.27scoring →

confidence

67%High

first_seen·Feb 27, 2026

last_seen·1h ago

sessions·4

events·4

$ sikker protocols 101.71.39.27

TELNET

4 / 4

$ sikker summary 101.71.39.27

101.71.39.27 has a threat confidence score of 67%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 4 honeypot sessions targeting TELNET protocols. First observed on February 27, 2026, most recently active March 23, 2026.

$ sikker primitives 101.71.39.27

telnet_command_cd33 telnet_busybox_echo_redirect_file_create33 telnet_shell_execute_writable_hidden_file33 telnet_command_sh13 telnet_busybox_binary_invocation13 telnet_command_ping4 telnet_command_shell4 telnet_command_enable4 telnet_command_system4 telnet_command_linuxshell4 telnet_busybox_hostname_set3 telnet_busybox_wget_execution3 telnet_sh_execute_downloaded_script3 telnet_busybox_ftpget_remote_file_download3 telnet_busybox_tftp_get_remote_file_stdout3 telnet_curl_remote_script_stdout_execution3

$ sikker related 101.71.39.27

🇨🇳·More threats fromChina→AS·More threats fromCHINA UNICOM China169 Backbone→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
218.56.160.82	100%	581
153.35.171.225	91%	426
58.17.6.119	47%	314
123.188.239.125	97%	3,242
124.152.90.68	49%	351

IP Address	Confidence	Events
117.48.143.69	82%	2,541
47.109.53.221	84%	1,772
14.216.219.2	47%	8
47.108.30.155	78%	15,420
112.4.79.138	100%	626