Check an IP Address, Domain Name, Subnet, or ASN

185.139.68.252 was found in our database!

$ whois 185.139.68.252

country·🇷🇺 Russia

city·Moscow

isp·First Server Limited

asn·AS204997

network·Standard

$ sikker risk 185.139.68.252scoring →

confidence

85%Very High

first_seen·Apr 20, 2026

last_seen·9d ago

sessions·4

events·4

$ sikker protocols 185.139.68.252

SSH

2 / 2

HTTPS

1 / 1

DOCKER

1 / 1

$ sikker summary 185.139.68.252

185.139.68.252 has a threat confidence score of 85%. This IP address from Russia (AS204997, First Server Limited) has been observed in 4 honeypot sessions targeting SSH, HTTPS, DOCKER protocols. First observed on April 20, 2026, most recently active April 20, 2026.

$ sikker primitives 185.139.68.252

php_phpunit_md5_marker37 docker_post_method3 https_index_php_root_request3 docker_container_exec_path2 https_query_thinkphp_invokefunction_md5_probe2 https_body_wget_curl_pipe_to_sh_apache_selfrep2 https_php_ini_directive_injection_allow_url_include_auto_prepend_file2 https_path_root1 docker_get_method1 docker_exec_start_endpoint1 https_hello_world_path_request1 https_public_index_php_request1 docker_list_containers_endpoint1 https_cgi_bin_sh_execution_request1 https_phpunit_eval_stdin_rce_probe1 https_php_lfi_tmp_index1_file_request1 php_pearcmd_config_create_md5_hi_marker1 phpunit_eval_stdin_php_header_execution1 https_docker_containers_json_api_request1 https_phpunit_eval_stdin_lib_path_request1

$ sikker related 185.139.68.252

🇷🇺·More threats fromRussia→AS·More threats fromFirst Server Limited→SSH·More threats targetingSSH→HTTP·More threats targetingHTTPS→DOCK·More threats targetingDOCKER→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
178.253.44.103	91%	7
185.204.3.143	75%	9
185.195.25.167	92%	26
185.189.15.8	30%	2
178.253.44.164	42%	2

IP Address	Confidence	Events
2.63.211.145	78%	24,256
92.255.196.185	48%	511
185.81.24.25	35%	3
79.174.63.130	20%	7
80.66.83.43	100%	9,370