Check an IP Address, Domain Name, Subnet, or ASN

131.221.236.23 was found in our database!

$ whois 131.221.236.23

country·🇧🇷 Brazil

city·Ouricuri

isp·OuriNet TELECOM

asn·AS264439

network·Standard

$ sikker risk 131.221.236.23scoring →

confidence

85%Very High

first_seen·Jan 22, 2026

last_seen·1h ago

sessions·12

events·256

$ sikker protocols 131.221.236.23

TELNET

12 / 256

$ sikker summary 131.221.236.23

131.221.236.23 has a threat confidence score of 85%. This IP address from Brazil (AS264439, OuriNet TELECOM) has been observed in 12 honeypot sessions targeting TELNET protocols. First observed on January 22, 2026, most recently active March 18, 2026.

$ sikker primitives 131.221.236.23

telnet_command_cd121 telnet_busybox_echo_redirect_file_create121 telnet_shell_execute_writable_hidden_file121 telnet_busybox_binary_invocation70 telnet_command_sh31 telnet_command_ping11 dismissed_primitive.11 telnet_command_shell11 telnet_command_enable11 telnet_command_system11 telnet_command_linuxshell11 telnet_command_iptables_flush11 telnet_rm_recursive_hidden_relative_cleanup11 telnet_sh_execute_downloaded_script3 telnet_busybox_ftpget_remote_file_download3 telnet_busybox_tftp_get_remote_file_stdout3 telnet_curl_remote_script_stdout_execution3

$ sikker related 131.221.236.23

🇧🇷·More threats fromBrazil→AS·More threats fromOuriNet TELECOM→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
190.123.65.197	100%	1,033
201.76.120.30	100%	1,157
179.189.85.66	51%	389
177.36.220.22	100%	181
200.246.161.130	28%	93