Check an IP Address, Domain Name, Subnet, or ASN

185.170.114.25 was found in our database!

$ whois 185.170.114.25

country·🇩🇪 Germany

city·Nuremberg

isp·netcup GmbH

asn·AS197540

network·Tor Exit Node

$ sikker risk 185.170.114.25scoring →

confidence

15%Low

first_seen·Jan 27, 2026

last_seen·1h ago

sessions·6

events·8

$ sikker protocols 185.170.114.25

SSH

6 / 8

$ sikker summary 185.170.114.25

185.170.114.25 has a threat confidence score of 15%. This IP address from Germany (AS197540, netcup GmbH) has been observed in 6 honeypot sessions targeting SSH protocols. This IP is a known Tor exit node. First observed on January 27, 2026, most recently active March 25, 2026.

$ sikker primitives 185.170.114.25

ssh_password_authenthication.1

$ sikker related 185.170.114.25

🇩🇪·More threats fromGermany→AS·More threats fromnetcup GmbH→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
152.53.248.193	96%	2,584
152.53.230.56	97%	8,458
152.53.191.128	83%	56,741
159.195.60.65	96%	67
5.252.226.149	75%	5

IP Address	Confidence	Events
134.209.235.25	74%	383
207.154.232.101	75%	1,069
146.0.42.48	87%	63,038
167.172.171.218	90%	6
212.227.150.65	28%	32