Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
118.196.69.28 has a threat confidence score of 64%. This IP address from China (AS4811, China Telecom Group) has been observed in 14 honeypot sessions targeting SSH protocols. First observed on March 18, 2026, most recently active March 22, 2026.
Identifies SSH session activity where the attacker executes uname -s -m to retrieve the operating system name and machine architecture for host fingerprinting and payload targeting.