Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
221.226.31.137 has a threat confidence score of 78%. This IP address from China (AS4134, Chinanet) has been observed in 59 honeypot sessions targeting SSH, TELNET protocols. First observed on January 30, 2026, most recently active April 20, 2026.
Identifies SSH session activity where the attacker executes uname -s -m to retrieve the operating system name and machine architecture for host fingerprinting and payload targeting.