Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
191.252.186.58 has a threat confidence score of 53%. This IP address from Brazil (AS27715, Locaweb Servicos de Internet SA) has been observed in 3 honeypot sessions targeting SSH, TELNET protocols. First observed on March 9, 2026, most recently active March 10, 2026.
Identifies SSH session activity where the attacker executes uname -s -m to retrieve the operating system name and machine architecture for host fingerprinting and payload targeting.