Check an IP Address, Domain Name, Subnet, or ASN

113.228.158.79 was found in our database!

$ whois 113.228.158.79

country·🇨🇳 China

isp·CHINA UNICOM China169 Backbone

asn·AS4837

network·Standard

$ sikker risk 113.228.158.79scoring →

confidence

79%High

first_seen·Mar 19, 2026

last_seen·1h ago

sessions·8

events·8

$ sikker protocols 113.228.158.79

TELNET

8 / 8

$ sikker summary 113.228.158.79

113.228.158.79 has a threat confidence score of 79%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 8 honeypot sessions targeting TELNET protocols. First observed on March 19, 2026, most recently active March 28, 2026.

$ sikker primitives 113.228.158.79

telnet_command_cd77 telnet_busybox_echo_redirect_file_create77 telnet_shell_execute_writable_hidden_file77 telnet_command_sh29 telnet_busybox_binary_invocation28 telnet_command_ping8 telnet_command_shell8 telnet_command_enable8 telnet_command_system8 telnet_command_linuxshell8 telnet_busybox_hostname_set7 telnet_busybox_wget_execution7 telnet_sh_execute_downloaded_script7 telnet_busybox_ftpget_remote_file_download7 telnet_busybox_tftp_get_remote_file_stdout7 telnet_curl_remote_script_stdout_execution7

$ sikker related 113.228.158.79

🇨🇳·More threats fromChina→AS·More threats fromCHINA UNICOM China169 Backbone→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
125.45.65.128	100%	14
125.39.93.171	51%	6
112.123.17.84	40%	2
153.37.76.34	95%	970
42.5.79.95	100%	25

IP Address	Confidence	Events
115.191.35.75	94%	81
125.45.65.128	100%	21
43.226.40.202	100%	493
113.88.242.8	71%	95
116.113.30.114	59%	997