Check an IP Address, Domain Name, Subnet, or ASN

172.86.70.20 was found in our database!

$ whois 172.86.70.20

country·🇩🇪 Germany

city·Frankfurt am Main

isp·RouterHosting LLC

asn·AS14956

network·Tor Exit Node

$ sikker risk 172.86.70.20scoring →

confidence

24%Low

first_seen·Feb 28, 2026

last_seen·4h ago

sessions·19

events·19

$ sikker protocols 172.86.70.20

POSTGRES

9 / 9

SSH

8 / 8

ELASTICSEARCH

2 / 2

$ sikker summary 172.86.70.20

172.86.70.20 has a threat confidence score of 24%. This IP address from Germany (AS14956, RouterHosting LLC) has been observed in 19 honeypot sessions targeting POSTGRES, SSH, ELASTICSEARCH protocols. This IP is a known Tor exit node. First observed on February 28, 2026, most recently active April 19, 2026.

$ sikker primitives 172.86.70.20

elastic_http_get_request2

$ sikker related 172.86.70.20

🇩🇪·More threats fromGermany→AS·More threats fromRouterHosting LLC→POST·More threats targetingPOSTGRES→SSH·More threats targetingSSH→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
144.172.95.158	99%	3,350
144.172.101.50	84%	102
45.61.133.122	29%	177
172.86.67.130	98%	1,390
172.86.69.91	89%	42

IP Address	Confidence	Events
87.98.245.221	99%	17,234
62.171.147.220	96%	739
185.91.127.85	71%	1,858
217.216.108.129	85%	1,554
45.65.112.108	87%	1,853