Check an IP Address, Domain Name, Subnet, or ASN

120.85.112.127 was found in our database!

$ whois 120.85.112.127

country·🇨🇳 China

city·Guangzhou

isp·China Unicom Guangzhou network

asn·AS17622

network·Standard

$ sikker risk 120.85.112.127scoring →

confidence

34%Low

first_seen·Mar 6, 2026

last_seen·2h ago

sessions·2

events·2

$ sikker protocols 120.85.112.127

HTTP

1 / 1

TELNET

1 / 1

$ sikker summary 120.85.112.127

120.85.112.127 has a threat confidence score of 34%. This IP address from China (AS17622, China Unicom Guangzhou network) has been observed in 2 honeypot sessions targeting HTTP, TELNET protocols. First observed on March 6, 2026, most recently active March 29, 2026.

$ sikker primitives 120.85.112.127

http_method_get1 telnet_command_cd1 telnet_command_sh1 telnet_command_su1 telnet_command_shell1 telnet_command_start1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_command_config_terminal1 http_query_next_file_netgear_cfg_syscmd_access1

$ sikker related 120.85.112.127

🇨🇳·More threats fromChina→AS·More threats fromChina Unicom Guangzhou network→HTTP·More threats targetingHTTP→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
120.85.115.147	39%	1
58.249.166.106	50%	10
112.94.190.180	27%	1
27.47.24.213	23%	1
27.47.26.124	23%	1

IP Address	Confidence	Events
39.99.214.254	85%	72,893
8.152.99.77	88%	6,776
106.75.86.71	93%	189
115.120.246.188	96%	146
182.121.108.226	100%	21