131.222.253.99
131.222.253.99 is a threat-intelligence indicator (IPv4 address) classified as Suspicious, corroborated across 3 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.
Indicator facts
- Type
- IPv4 address
- Indicator
131.222.253.99- Classification
- Suspicious
- Confidence
- 80 / 100
- Corroboration
- 3 independent sources
- First seen
- Last seen
- Network (ASN)
- AS216472 — -Reserved AS-
- Country
- SY
Tags
- brute-force
- sshpwauth
- scanner
- ssh
- attacker
Related CVEs (131)
- CVE-2026-49975
- CVE-2026-44631
- CVE-2026-44186
- CVE-2026-44185
- CVE-2026-44119
- CVE-2026-43951
- CVE-2026-42536
- CVE-2026-42535
- CVE-2026-34356
- CVE-2026-34355
- CVE-2026-34059
- CVE-2026-34032
- CVE-2026-33857
- CVE-2026-33523
- CVE-2026-33007
- CVE-2026-33006
- CVE-2026-29170
- CVE-2026-29169
- CVE-2026-29168
- CVE-2026-29167
- CVE-2026-28780
- CVE-2026-24072
- CVE-2025-66200
- CVE-2025-65082
- CVE-2025-59775
- CVE-2025-58098
- CVE-2025-55753
- CVE-2025-53020
- CVE-2025-49812
- CVE-2025-49630
- CVE-2025-23048
- CVE-2024-47252
- CVE-2024-43394
- CVE-2024-43204
- CVE-2024-42516
- CVE-2024-40898
- CVE-2024-39573
- CVE-2024-38477
- CVE-2024-38476
- CVE-2024-38475
- CVE-2024-38474
- CVE-2024-38473
- CVE-2024-38472
- CVE-2024-3566
- CVE-2024-27316
- CVE-2024-25117
- CVE-2024-24795
- CVE-2023-45802
- CVE-2023-38709
- CVE-2023-31122
← Threat intelligence command center · Explore the indicator corpus