Check an IP Address, Domain Name, Subnet, or ASN

42.58.1.91 was found in our database!

$ whois 42.58.1.91

country·🇨🇳 China

isp·CHINA UNICOM China169 Backbone

asn·AS4837

network·Standard

$ sikker risk 42.58.1.91scoring →

confidence

81%Very High

first_seen·Mar 19, 2026

last_seen·1h ago

first_reported·Mar 20, 2026

last_reported·1d ago

sessions·3

events·3

reports·1

$ sikker protocols 42.58.1.91

TELNET

3 / 3 / 1r

$ sikker summary 42.58.1.91

42.58.1.91 has a threat confidence score of 81%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 3 honeypot sessions and reported 1 times targeting TELNET protocols. First observed on March 19, 2026, most recently active March 22, 2026.

$ sikker primitives 42.58.1.91

telnet_command_cd33 telnet_busybox_echo_redirect_file_create33 telnet_shell_execute_writable_hidden_file33 telnet_command_sh12 telnet_busybox_binary_invocation12 telnet_command_ping3 telnet_command_shell3 telnet_command_enable3 telnet_command_system3 telnet_command_linuxshell3 telnet_busybox_hostname_set3 telnet_busybox_wget_execution3 telnet_sh_execute_downloaded_script3 telnet_busybox_ftpget_remote_file_download3 telnet_busybox_tftp_get_remote_file_stdout3 telnet_curl_remote_script_stdout_execution3

$ sikker reports 42.58.1.91submit →

Showing 1 of 1 report from 1 contributor

Reporter	Date	Category	Protocol	Comment
User	Mar 20, 2026, 12:24	Brute Force	TELNET	SikkerGuard: 4 blocked packets

$ sikker related 42.58.1.91

🇨🇳·More threats fromChina→AS·More threats fromCHINA UNICOM China169 Backbone→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
42.232.86.2	100%	11
58.18.38.116	42%	178
123.129.245.170	47%	4
122.114.113.177	100%	753
219.159.57.4	49%	354

IP Address	Confidence	Events
47.103.36.53	89%	482
139.224.112.216	83%	11,598
112.46.213.239	84%	476
117.48.143.69	83%	1,880
42.232.86.2	100%	11