Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
218.104.239.37 has a threat confidence score of 52%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 12 honeypot sessions targeting SSH protocols. First observed on April 12, 2026, most recently active April 20, 2026.
Identifies SSH session activity where the attacker executes uname -s -m to retrieve the operating system name and machine architecture for host fingerprinting and payload targeting.