Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
196.42.34.153 has a threat confidence score of 76%. This IP address from Puerto Rico (AS10396, DATACOM CARIBE, INC.) has been observed in 4 honeypot sessions targeting TELNET protocols. Detected attack patterns include telnet busybox payload execution and cleanup. First observed on March 30, 2026, most recently active April 5, 2026.
Identifies post-authentication Telnet activity where an attacker leverages BusyBox to create a payload via echo redirection, enables shell execution, runs commands (sh/system/linuxshell), performs network actions (ping), modifies firewall rules (iptables flush), and removes artifacts via recursive hidden cleanup. Represents full payload staging, execution, and anti-forensics sequence typical of botnet propagation or remote access deployment.