Check an IP Address, Domain Name, Subnet, or ASN

123.138.237.220 was found in our database!

$ whois 123.138.237.220

country·🇨🇳 China

city·Xi'an

isp·CHINA UNICOM China169 Backbone

asn·AS4837

network·Standard

$ sikker risk 123.138.237.220scoring →

confidence

94%Very High

first_seen·Mar 26, 2026

last_seen·32m ago

sessions·28

events·28

$ sikker protocols 123.138.237.220

TELNET

28 / 28

$ sikker summary 123.138.237.220

123.138.237.220 has a threat confidence score of 94%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 28 honeypot sessions targeting TELNET protocols. First observed on March 26, 2026, most recently active March 26, 2026.

$ sikker primitives 123.138.237.220

telnet_rm_absolute_path_file_removal228 telnet_busybox_rm_absolute_path216 telnet_busybox_echo_hex_redirect_write216 telnet_busybox_cat_hidden_absolute_path189 telnet_busybox_unknown_applet_invocation108 telnet_command_cd27 telnet_command_sh27 telnet_command_su27 telnet_command_shell27 telnet_busybox_cat_proc_mounts27 telnet_busybox_rm_hidden_proc_path27 telnet_command_literal_token_zyad500127 telnet_relative_file_output_redirection27 telnet_busybox_chmod_numeric_permission_change27 telnet_command_system26 telnet_command_enable24

$ sikker related 123.138.237.220

🇨🇳·More threats fromChina→AS·More threats fromCHINA UNICOM China169 Backbone→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
61.156.217.77	48%	350
123.138.237.121	27%	1
112.123.17.102	35%	2
153.101.132.65	100%	641
112.248.0.74	100%	2,181

IP Address	Confidence	Events
111.61.117.120	21%	2
101.71.38.205	30%	2
101.71.38.13	23%	1
14.103.126.73	100%	557
118.122.147.195	100%	706