Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
42.240.131.211 has a threat confidence score of 78%. This IP address from China (AS58466, CHINANET Guangdong province network) has been observed in 57 honeypot sessions targeting SSH protocols. First observed on April 5, 2026, most recently active April 19, 2026.
Identifies SSH session activity where the attacker executes uname -s -m to retrieve the operating system name and machine architecture for host fingerprinting and payload targeting.