Check an IP Address, Domain Name, Subnet, or ASN

125.41.96.131 was found in our database!

$ whois 125.41.96.131

country·🇨🇳 China

city·Zhengzhou

isp·CHINA UNICOM China169 Backbone

asn·AS4837

network·Standard

$ sikker risk 125.41.96.131scoring →

confidence

58%Medium

first_seen·Mar 25, 2026

last_seen·1h ago

sessions·1

events·1

$ sikker protocols 125.41.96.131

TELNET

1 / 1

$ sikker summary 125.41.96.131

125.41.96.131 has a threat confidence score of 58%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 25, 2026, most recently active March 25, 2026.

$ sikker primitives 125.41.96.131

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh4 telnet_busybox_binary_invocation4 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_busybox_hostname_set1 telnet_busybox_wget_execution1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 125.41.96.131

🇨🇳·More threats fromChina→AS·More threats fromCHINA UNICOM China169 Backbone→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
123.188.239.247	95%	613
123.5.157.17	100%	22
153.37.76.34	94%	519
171.39.49.52	84%	33
118.81.218.113	43%	1

IP Address	Confidence	Events
121.199.48.149	75%	374
123.5.157.17	100%	19
39.105.14.55	25%	6
123.188.239.247	95%	612
112.46.212.148	87%	25