Check an IP Address, Domain Name, Subnet, or ASN

123.138.237.156 was found in our database!

$ whois 123.138.237.156

country·🇨🇳 China

city·Xi'an

isp·CHINA UNICOM China169 Backbone

asn·AS4837

network·Standard

$ sikker risk 123.138.237.156scoring →

confidence

97%Very High

first_seen·Feb 6, 2026

last_seen·41m ago

sessions·177

events·593

$ sikker protocols 123.138.237.156

TELNET

177 / 593

$ sikker summary 123.138.237.156

123.138.237.156 has a threat confidence score of 97%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 177 honeypot sessions targeting TELNET protocols. First observed on February 6, 2026, most recently active March 18, 2026.

$ sikker primitives 123.138.237.156

telnet_rm_absolute_path_file_removal1389 telnet_busybox_rm_absolute_path1356 telnet_busybox_echo_hex_redirect_write1356 telnet_busybox_cat_hidden_absolute_path1190 telnet_busybox_unknown_applet_invocation679 telnet_command_sh170 telnet_command_su170 telnet_command_shell170 telnet_busybox_cat_proc_mounts170 telnet_busybox_rm_hidden_proc_path170 telnet_command_literal_token_zyad5001170 telnet_command_cd169 telnet_relative_file_output_redirection169 telnet_busybox_chmod_numeric_permission_change169 telnet_command_system168 telnet_command_enable152

$ sikker related 123.138.237.156

🇨🇳·More threats fromChina→AS·More threats fromCHINA UNICOM China169 Backbone→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
101.71.39.16	64%	4
122.114.69.235	100%	568
101.71.39.12	58%	1
124.67.34.191	30%	2
153.37.177.219	62%	1,082

IP Address	Confidence	Events
183.196.204.13	22%	6
139.196.233.120	84%	24,508
115.191.23.165	68%	25
118.178.98.98	85%	5,721
94.231.206.107	77%	154