Check an IP Address, Domain Name, Subnet, or ASN

185.254.158.239 was found in our database!

$ whois 185.254.158.239

country·🇫🇮 Finland

city·Helsinki

isp·Anton Levin

asn·AS50053

network·Standard

$ sikker risk 185.254.158.239scoring →

confidence

28%Low

first_seen·Mar 6, 2026

last_seen·31m ago

sessions·5

events·5

$ sikker protocols 185.254.158.239

SSH

4 / 4

SMTP

1 / 1

$ sikker summary 185.254.158.239

185.254.158.239 has a threat confidence score of 28%. This IP address from Finland (AS50053, Anton Levin) has been observed in 5 honeypot sessions targeting SSH, SMTP protocols. First observed on March 6, 2026, most recently active March 25, 2026.

$ sikker primitives 185.254.158.239

ssh_hostname2 ssh_id_identity_query1 ssh_whoami_user_identity1 ssh_which_command_resolution1 ssh_uname_kernel_release_query1

$ sikker related 185.254.158.239

🇫🇮·More threats fromFinland→AS·More threats fromAnton Levin→SSH·More threats targetingSSH→SMTP·More threats targetingSMTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
185.23.238.122	92%	12
103.80.87.39	99%	33
103.80.87.150	30%	14
103.80.87.208	96%	27
194.146.223.153	84%	10

IP Address	Confidence	Events
95.85.251.170	75%	32
95.217.42.50	18%	9
89.167.109.67	75%	3
157.180.44.68	93%	18
95.217.248.45	36%	1