Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
138.59.233.5 has a threat confidence score of 80%. This IP address from Brazil (AS264114, RZ NET LTDA.) has been observed in 27 honeypot sessions and reported 1 times targeting SSH protocols. First observed on January 23, 2026, most recently active March 21, 2026.
Repeated SSH password authentication attempts observed within the same activity window, indicating automated credential guessing against the SSH service. The behavior reflects authentication-based access attempts derived from observed password login events without assuming successful compromise.
| Reporter | Date | Category | Protocol | Comment |
|---|---|---|---|---|
| User | Mar 12, 2026, 19:21 | Brute Force | SSH | SikkerGuard: 2 blocked packets |