Check an IP Address, Domain Name, Subnet, or ASN

116.234.76.167 was found in our database!

$ whois 116.234.76.167

country·🇨🇳 China

city·Shanghai

isp·China Telecom Group

asn·AS4812

network·Standard

$ sikker risk 116.234.76.167scoring →

confidence

57%Medium

first_seen·Apr 30, 2026

last_seen·3h ago

sessions·1

events·1

$ sikker protocols 116.234.76.167

HTTP

1 / 1

$ sikker summary 116.234.76.167

116.234.76.167 has a threat confidence score of 57%. This IP address from China (AS4812, China Telecom Group) has been observed in 1 honeypot sessions targeting HTTP protocols. First observed on April 30, 2026, most recently active April 30, 2026.

$ sikker primitives 116.234.76.167

http_method_get36 http_php_echo_md5_hello_phpunit_marker36 http_body_wget_curl_pipe_to_sh_selfrep2 http_php_cgi_allow_url_include_auto_prepend_input_injection2 http_cgi_bin_direct_bin_sh_access1 http_phpunit_eval_stdin_php_path_access1 http_phpunit_license_eval_stdin_path_probe1 http_phpunit_util_php_eval_stdin_path_access1 http_root_phpunit_src_eval_stdin_path_access1 http_root_phpunit_util_eval_stdin_path_access1 http_double_vendor_phpunit_eval_stdin_path_probe1 http_phpunit_src_util_php_eval_stdin_path_access1 http_root_phpunit_util_php_eval_stdin_path_access1 http_phpunit_legacy_util_php_eval_stdin_path_access1 http_root_phpunit_src_util_php_eval_stdin_path_access1 http_cgi_bin_percent_encoded_directory_traversal_bin_sh1

$ sikker related 116.234.76.167

🇨🇳·More threats fromChina→AS·More threats fromChina Telecom Group→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
180.167.96.50	100%	1,104
58.33.97.119	100%	1,330
124.78.20.49	42%	3
218.78.132.164	100%	1,037
222.71.116.214	100%	833

IP Address	Confidence	Events
112.46.213.42	85%	1,480
82.157.185.205	96%	1,003
112.4.79.138	100%	926
115.190.158.192	96%	902
112.46.212.152	96%	2,359