Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
12.23.182.69 has a threat confidence score of 73%. This IP address from United States (AS7018, AT&T Enterprises, LLC) has been observed in 16 honeypot sessions targeting TELNET protocols. Detected attack patterns include telnet busybox payload execution and cleanup. First observed on February 10, 2026, most recently active April 3, 2026.
Identifies post-authentication Telnet activity where an attacker leverages BusyBox to create a payload via echo redirection, enables shell execution, runs commands (sh/system/linuxshell), performs network actions (ping), modifies firewall rules (iptables flush), and removes artifacts via recursive hidden cleanup. Represents full payload staging, execution, and anti-forensics sequence typical of botnet propagation or remote access deployment.