Check an IP Address, Domain Name, Subnet, or ASN

213.239.138.220 was found in our database!

$ whois 213.239.138.220

country·🇳🇱 The Netherlands

isp·Simoresta UAB

asn·AS211373

network·Standard

$ sikker risk 213.239.138.220scoring →

confidence

89%Very High

first_seen·Apr 4, 2026

last_seen·50m ago

sessions·128

events·129

$ sikker protocols 213.239.138.220

SSH

128 / 129

$ sikker summary 213.239.138.220

213.239.138.220 has a threat confidence score of 89%. This IP address from The Netherlands (AS211373, Simoresta UAB) has been observed in 128 honeypot sessions targeting SSH protocols. First observed on April 4, 2026, most recently active April 7, 2026.

$ sikker primitives 213.239.138.220

ssh_kill_sigkill_target_root_literal218 ssh_readlink_proc_root_exe_resolved_path218 ssh_kill_sigkill_target_systemd_plus_literal164 ssh_top_10_processes_by_cpu_via_ps_sorted_desc55 ssh_kill_sigkill_target_message_plus_literal54 ssh_readlink_proc_message_plus_exe_resolved_path54 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_then_cat_to_netai6 ssh_uname_all2 ssh_ps_aux_grep_netai_exclude_grep_count2 ssh_cpu_core_count_via_proc_cpuinfo_pipeline2 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_pwd_echo2 ssh_cd_tmp_create_w_sh_if_missing_via_stdin_and_chmod_exec2 ssh_create_user_systemd_watcher_netai_service_and_enable_now2

$ sikker related 213.239.138.220

🇳🇱·More threats fromThe Netherlands→AS·More threats fromSimoresta UAB→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
195.39.214.158	90%	141
5.181.37.106	92%	1,921
195.39.214.235	86%	73
192.146.138.209	85%	219
194.53.139.110	61%	28

IP Address	Confidence	Events
45.148.10.240	100%	530,853
46.151.178.13	93%	3,954
45.148.10.192	100%	29,422
130.12.180.51	100%	25,026
188.226.132.113	50%	460