Check an IP Address, Domain Name, Subnet, or ASN

131.161.142.254 was found in our database!

$ whois 131.161.142.254

country·🇧🇷 Brazil

city·Passo Fundo

isp·RazaoInfo Internet Ltda

asn·AS263077

network·Standard

$ sikker risk 131.161.142.254scoring →

confidence

83%Very High

first_seen·Mar 6, 2026

last_seen·14d ago

sessions·55

events·55

$ sikker protocols 131.161.142.254

SSH

45 / 45

FTP

8 / 8

HTTPS

2 / 2

$ sikker summary 131.161.142.254

131.161.142.254 has a threat confidence score of 83%. This IP address from Brazil (AS263077, RazaoInfo Internet Ltda) has been observed in 55 honeypot sessions targeting SSH, FTP, HTTPS protocols. First observed on March 6, 2026, most recently active March 7, 2026.

$ sikker primitives 131.161.142.254

ssh_mobaxterm_proc_monitoring_loop15 ftp_auth_tls5 ftp_set_utf85 ftp_user_probe5 ftp_set_binary_mode5 ftp_password_attempt5 ftp_enter_passive_mode5 ftp_print_working_directory5 ssh_unset_locale_env_and_recon_pwd_ls2 ftp_system_type_request1 ftp_feature_list_request1 ssh_ls_long_all_directory_listing_absolute1

$ sikker related 131.161.142.254

🇧🇷·More threats fromBrazil→AS·More threats fromRazaoInfo Internet Ltda→SSH·More threats targetingSSH→FTP·More threats targetingFTP→HTTP·More threats targetingHTTPS→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
170.254.152.115	33%	4
191.5.31.61	100%	657

IP Address	Confidence	Events
191.209.30.33	17%	27
128.14.249.115	23%	1
45.171.194.61	23%	8
206.84.40.58	43%	1
191.6.55.198	18%	2