Check an IP Address, Domain Name, Subnet, or ASN
31.59.114.211 has a very high threat confidence level of 94%, originating from Amsterdam, The Netherlands, on the Cgi Global Limited network (56594). It has been observed across 152 sessions targeting SSH, with detected attack patterns including ssh post auth full host reconnaissance sweep, First observed on March 9, 2026, most recently active March 10, 2026.
Identifies structured post-authentication SSH activity consistent with automated host profiling. The session executes a broad enumeration sequence including system versioning, CPU details, network configuration, listening services, process snapshots, identity context, environment variables, filesystem inspection, and credential file probing to fingerprint the host and assess exploitation potential.