Check an IP Address, Domain Name, Subnet, or ASN

149.210.235.123 was found in our database!

$ whois 149.210.235.123

country·🇳🇱 The Netherlands

isp·Signet B.V.

asn·AS20857

network·Standard

$ sikker risk 149.210.235.123scoring →

confidence

87%Very High

first_seen·Apr 20, 2026

last_seen·3h ago

sessions·24

events·24

$ sikker protocols 149.210.235.123

SSH

24 / 24

$ sikker summary 149.210.235.123

149.210.235.123 has a threat confidence score of 87%. This IP address from The Netherlands (AS20857, Signet B.V.) has been observed in 24 honeypot sessions targeting SSH protocols. First observed on April 20, 2026, most recently active April 20, 2026.

$ sikker primitives 149.210.235.123

ssh_kill_sigkill_target_root_literal48 ssh_readlink_proc_root_exe_resolved_path48 ssh_kill_sigkill_target_systemd_plus_literal36 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_then_cat_to_netai36 ssh_uname_all12 ssh_ps_aux_grep_netai_exclude_grep_count12 ssh_cpu_core_count_via_proc_cpuinfo_pipeline12 ssh_kill_sigkill_target_message_plus_literal12 ssh_top_10_processes_by_cpu_via_ps_sorted_desc12 ssh_readlink_proc_message_plus_exe_resolved_path12 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_pwd_echo12 ssh_cd_tmp_create_w_sh_if_missing_via_stdin_and_chmod_exec12 ssh_create_user_systemd_watcher_netai_service_and_enable_now12

$ sikker related 149.210.235.123

🇳🇱·More threats fromThe Netherlands→AS·More threats fromSignet B.V.→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
37.97.223.86	74%	135
136.144.199.172	91%	6
136.144.178.135	29%	24
136.144.253.66	100%	66
37.97.201.75	23%	1

IP Address	Confidence	Events
46.151.182.189	93%	4,124
45.148.10.192	100%	38,936
45.148.10.183	100%	14,775
46.151.178.13	95%	10,896
130.12.180.51	100%	26,712