Check an IP Address, Domain Name, Subnet, or ASN

185.254.75.40 was found in our database!

$ whois 185.254.75.40

country·🇩🇪 Germany

city·Düsseldorf

isp·Owl Limited

asn·AS43357

network·Standard

$ sikker risk 185.254.75.40scoring →

confidence

73%High

first_seen·Apr 13, 2026

last_seen·5d ago

sessions·28

events·28

$ sikker protocols 185.254.75.40

SSH

15 / 15

REDIS

12 / 12

ELASTICSEARCH

1 / 1

$ sikker summary 185.254.75.40

185.254.75.40 has a threat confidence score of 73%. This IP address from Germany (AS43357, Owl Limited) has been observed in 28 honeypot sessions targeting SSH, REDIS, ELASTICSEARCH protocols. First observed on April 13, 2026, most recently active April 14, 2026.

$ sikker primitives 185.254.75.40

ssh_ls_long_all_directory_listing_absolute9 ssh_uptime_default2 ssh_hostname1 redis_info_uppercase1 elastic_root_path_probe1 elastic_http_get_request1 ssh_whoami_user_identity1 ssh_pwd_current_directory1 ssh_which_command_resolution1

$ sikker related 185.254.75.40

🇩🇪·More threats fromGermany→AS·More threats fromOwl Limited→SSH·More threats targetingSSH→REDI·More threats targetingREDIS→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
194.127.167.98	63%	153
194.127.167.118	53%	88
194.127.167.78	44%	6
194.36.25.10	41%	3
194.36.25.40	23%	1

IP Address	Confidence	Events
193.142.146.230	100%	40,116
46.101.212.120	58%	21
62.171.147.220	96%	772
87.98.242.75	97%	27,680
45.65.112.108	86%	2,110