Check an IP Address, Domain Name, Subnet, or ASN

49.118.71.253 was found in our database!

$ whois 49.118.71.253

country·🇨🇳 China

isp·Chinanet

asn·AS4134

network·Standard

$ sikker risk 49.118.71.253scoring →

confidence

62%High

first_seen·Mar 7, 2026

last_seen·14d ago

sessions·15

events·15

$ sikker protocols 49.118.71.253

SSH

15 / 15

$ sikker summary 49.118.71.253

49.118.71.253 has a threat confidence score of 62%. This IP address from China (AS4134, Chinanet) has been observed in 15 honeypot sessions targeting SSH protocols. First observed on March 7, 2026, most recently active March 7, 2026.

$ sikker primitives 49.118.71.253

ssh_mobaxterm_proc_monitoring_loop_ppid_guard12 ssh_unset_locale_env_and_recon_pwd_ls6 ssh_top_interactive_process_monitor_invocation1

$ sikker related 49.118.71.253

🇨🇳·More threats fromChina→AS·More threats fromChinanet→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
112.67.216.151	97%	499
106.58.219.148	95%	666
58.48.132.106	100%	145
121.15.140.235	100%	952
140.240.33.121	96%	214

IP Address	Confidence	Events
121.37.208.141	51%	4
120.195.161.46	93%	96,649
115.190.162.210	93%	179
221.131.45.31	96%	1,531
175.42.32.205	97%	2,736