Check an IP Address, Domain Name, Subnet, or ASN

104.131.23.170 was found in our database!

$ whois 104.131.23.170

country·🇺🇸 United States

city·Clifton

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 104.131.23.170scoring →

confidence

77%High

first_seen·Apr 24, 2026

last_seen·1h ago

sessions·15

events·15

$ sikker protocols 104.131.23.170

SSH

15 / 15

$ sikker summary 104.131.23.170

104.131.23.170 has a threat confidence score of 77%. This IP address from United States (AS14061, DigitalOcean, LLC) has been observed in 15 honeypot sessions targeting SSH protocols. First observed on April 24, 2026, most recently active April 26, 2026.

$ sikker primitives 104.131.23.170

ssh_kill_sigkill_target_root_literal20 ssh_readlink_proc_root_exe_resolved_path20 ssh_kill_sigkill_target_systemd_plus_literal15 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_then_cat_to_netai9 ssh_uname_all5 ssh_ps_aux_grep_netai_exclude_grep_count5 ssh_cpu_core_count_via_proc_cpuinfo_pipeline5 ssh_kill_sigkill_target_message_plus_literal5 ssh_top_10_processes_by_cpu_via_ps_sorted_desc5 ssh_readlink_proc_message_plus_exe_resolved_path5 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_pwd_echo5 ssh_cd_tmp_create_w_sh_if_missing_via_stdin_and_chmod_exec5 ssh_create_user_systemd_watcher_netai_service_and_enable_now5

$ sikker related 104.131.23.170

🇺🇸·More threats fromUnited States→AS·More threats fromDigitalOcean, LLC→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
159.89.95.201	28%	66
178.128.18.131	56%	74
138.197.16.14	92%	1,488
64.226.107.13	89%	98
143.110.195.142	59%	38

IP Address	Confidence	Events
168.235.91.128	80%	3,551
185.218.138.27	97%	25,787
198.235.24.76	98%	427
143.110.195.142	59%	38
209.127.178.131	96%	11,027