Check an IP Address, Domain Name, Subnet, or ASN

42.5.94.234 was found in our database!

$ whois 42.5.94.234

country·🇨🇳 China

isp·CHINA UNICOM China169 Backbone

asn·AS4837

network·Standard

$ sikker risk 42.5.94.234scoring →

confidence

69%High

first_seen·Mar 17, 2026

last_seen·1h ago

sessions·3

events·3

$ sikker protocols 42.5.94.234

TELNET

3 / 3

$ sikker summary 42.5.94.234

42.5.94.234 has a threat confidence score of 69%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 3 honeypot sessions targeting TELNET protocols. First observed on March 17, 2026, most recently active March 21, 2026.

$ sikker primitives 42.5.94.234

telnet_command_cd33 telnet_busybox_echo_redirect_file_create33 telnet_shell_execute_writable_hidden_file32 telnet_command_sh12 telnet_busybox_binary_invocation12 telnet_command_ping3 telnet_command_shell3 telnet_command_enable3 telnet_command_system3 telnet_command_linuxshell3 telnet_busybox_hostname_set3 telnet_busybox_wget_execution3 telnet_sh_execute_downloaded_script3 telnet_busybox_ftpget_remote_file_download3 telnet_busybox_tftp_get_remote_file_stdout3 telnet_curl_remote_script_stdout_execution3

$ sikker related 42.5.94.234

🇨🇳·More threats fromChina→AS·More threats fromCHINA UNICOM China169 Backbone→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
42.238.118.156	98%	5
175.42.32.205	96%	2,579
123.188.239.125	98%	2,207
123.188.239.222	97%	1,814
222.139.245.137	43%	213

IP Address	Confidence	Events
211.140.151.11	30%	104
47.100.249.70	79%	13,224
218.78.92.220	99%	89
117.66.240.200	96%	1,346
116.153.81.58	100%	741