Check an IP Address, Domain Name, Subnet, or ASN

4.1.123.194 was found in our database!

$ whois 4.1.123.194

country·🇺🇸 United States

city·Denver

isp·Level 3 Parent, LLC

asn·AS3356

network·Standard

$ sikker risk 4.1.123.194scoring →

confidence

71%High

first_seen·Jan 24, 2026

last_seen·27d ago

sessions·5

events·16

$ sikker protocols 4.1.123.194

TELNET

5 / 16

$ sikker summary 4.1.123.194

4.1.123.194 has a threat confidence score of 71%. This IP address from United States (AS3356, Level 3 Parent, LLC) has been observed in 5 honeypot sessions targeting TELNET protocols. First observed on January 24, 2026, most recently active February 22, 2026.

$ sikker primitives 4.1.123.194

telnet_command_cd33 telnet_busybox_echo_redirect_file_create33 telnet_shell_execute_writable_hidden_file33 telnet_busybox_binary_invocation14 telnet_command_sh9 telnet_command_ping3 telnet_command_shell3 telnet_command_enable3 telnet_command_system3 telnet_command_linuxshell3 telnet_command_iptables_flush3 telnet_rm_recursive_hidden_relative_cleanup3 shell_fallback_probe2 system_shell_entry1 shell_interpreter_probe1 linux_shell_entry_attempt1 network_connectivity_probe1 privileged_mode_enable_attempt1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1

$ sikker related 4.1.123.194

🇺🇸·More threats fromUnited States→AS·More threats fromLevel 3 Parent, LLC→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
4.16.252.229	41%	282
8.245.17.190	95%	22
8.243.169.150	77%	5
8.243.50.114	100%	665
205.169.39.19	25%	2

IP Address	Confidence	Events
208.3.195.65	100%	96,889
92.118.39.63	100%	49,107
162.254.3.130	87%	15,273
45.79.187.143	23%	1
206.168.34.39	49%	1,519