Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
49.72.111.25 has a threat confidence score of 80%. This IP address from China (AS4134, Chinanet) has been observed in 144 honeypot sessions targeting SSH protocols. First observed on January 24, 2026, most recently active March 28, 2026.
Identifies SSH session activity where the attacker executes uname -s -m to retrieve the operating system name and machine architecture for host fingerprinting and payload targeting.