Check an IP Address, Domain Name, Subnet, or ASN

59.31.131.5 was found in our database!

$ whois 59.31.131.5

country·🇰🇷 South Korea

city·Cheongju-si

isp·Korea Telecom

asn·AS4766

network·Standard

$ sikker risk 59.31.131.5scoring →

confidence

88%Very High

first_seen·Mar 19, 2026

last_seen·1h ago

sessions·22

events·22

$ sikker protocols 59.31.131.5

TELNET

22 / 22

$ sikker summary 59.31.131.5

59.31.131.5 has a threat confidence score of 88%. This IP address from South Korea (AS4766, Korea Telecom) has been observed in 22 honeypot sessions targeting TELNET protocols. First observed on March 19, 2026, most recently active April 1, 2026.

$ sikker primitives 59.31.131.5

telnet_command_cd242 telnet_busybox_echo_redirect_file_create242 telnet_shell_execute_writable_hidden_file241 telnet_busybox_binary_invocation86 telnet_command_sh85 telnet_command_ping22 telnet_command_shell22 telnet_command_enable22 telnet_command_system22 telnet_command_linuxshell22 telnet_busybox_hostname_set22 telnet_busybox_wget_execution21 telnet_sh_execute_downloaded_script21 telnet_busybox_ftpget_remote_file_download21 telnet_busybox_tftp_get_remote_file_stdout21 telnet_curl_remote_script_stdout_execution21

$ sikker related 59.31.131.5

🇰🇷·More threats fromSouth Korea→AS·More threats fromKorea Telecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
14.58.62.183	100%	1,324
218.144.217.8	16%	2
220.93.167.144	57%	463
125.142.37.91	100%	1,019
183.99.89.74	51%	443

IP Address	Confidence	Events
14.58.62.183	100%	1,323
220.93.167.144	57%	463
125.142.37.91	100%	1,019
1.222.164.75	23%	1
183.99.89.74	51%	443