Check an IP Address, Domain Name, Subnet, or ASN

159.89.16.209 was found in our database!

$ whois 159.89.16.209

country·🇩🇪 Germany

city·Frankfurt am Main

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 159.89.16.209scoring →

confidence

96%Very High

first_seen·Mar 1, 2026

last_seen·17d ago

sessions·449

events·449

$ sikker protocols 159.89.16.209

SSH

449 / 449

$ sikker summary 159.89.16.209

159.89.16.209 has a threat confidence score of 96%. This IP address from Germany (AS14061, DigitalOcean, LLC) has been observed in 449 honeypot sessions targeting SSH protocols. First observed on March 1, 2026, most recently active March 2, 2026.

$ sikker primitives 159.89.16.209

ssh_uname_single_flag_query_via_awk1270 ssh_uname_s_v_n_r_m425 ssh_nproc_available_cpu_count425 ssh_uptime_text_parsing_pipeline425 ssh_uname_machine_architecture421 ssh_lscpu_model_name_field_extraction421 ssh_lspci_vga_and_3d_controller_enumeration421 ssh_nvidia_smi_product_name_gpu_count_query421 ssh_nvidia_smi_product_name_filter420 ssh_command_v_kill_binary_presence_check4

$ sikker related 159.89.16.209

🇩🇪·More threats fromGermany→AS·More threats fromDigitalOcean, LLC→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
206.81.13.62	27%	1
178.128.124.66	85%	7
162.243.230.219	23%	1
142.93.247.251	30%	2
167.71.83.32	27%	1

IP Address	Confidence	Events
87.106.147.36	100%	179,284
45.146.253.119	87%	19
146.0.42.48	87%	61,441
144.31.147.180	43%	4
88.214.25.123	88%	1,279