Check an IP Address, Domain Name, Subnet, or ASN

195.39.214.158 was found in our database!

$ whois 195.39.214.158

country·🇳🇱 The Netherlands

city·Amsterdam

isp·Simoresta UAB

asn·AS211373

network·Standard

$ sikker risk 195.39.214.158scoring →

confidence

90%Very High

first_seen·Apr 4, 2026

last_seen·2h ago

sessions·141

events·141

$ sikker protocols 195.39.214.158

SSH

141 / 141

$ sikker summary 195.39.214.158

195.39.214.158 has a threat confidence score of 90%. This IP address from The Netherlands (AS211373, Simoresta UAB) has been observed in 141 honeypot sessions targeting SSH protocols. First observed on April 4, 2026, most recently active April 7, 2026.

$ sikker primitives 195.39.214.158

ssh_kill_sigkill_target_root_literal234 ssh_readlink_proc_root_exe_resolved_path234 ssh_kill_sigkill_target_systemd_plus_literal176 ssh_top_10_processes_by_cpu_via_ps_sorted_desc59 ssh_kill_sigkill_target_message_plus_literal58 ssh_readlink_proc_message_plus_exe_resolved_path58 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_then_cat_to_netai6 ssh_uname_all2 ssh_ps_aux_grep_netai_exclude_grep_count2 ssh_cpu_core_count_via_proc_cpuinfo_pipeline2 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_pwd_echo2 ssh_cd_tmp_create_w_sh_if_missing_via_stdin_and_chmod_exec2 ssh_create_user_systemd_watcher_netai_service_and_enable_now2

$ sikker related 195.39.214.158

🇳🇱·More threats fromThe Netherlands→AS·More threats fromSimoresta UAB→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
213.239.138.220	89%	129
5.181.37.106	92%	1,921
195.39.214.235	86%	73
192.146.138.209	85%	219
194.53.139.110	61%	28

IP Address	Confidence	Events
64.227.76.184	78%	416
130.12.180.51	100%	25,039
45.153.34.43	74%	1,579
93.174.93.12	97%	12,076
46.151.178.13	93%	3,987