Check an IP Address, Domain Name, Subnet, or ASN

5.253.59.171 was found in our database!

$ whois 5.253.59.171

country·🇳🇱 The Netherlands

city·Amsterdam

isp·Global Connectivity Solutions Llp

asn·AS215540

network·Standard

$ sikker risk 5.253.59.171scoring →

confidence

89%Very High

first_seen·Apr 9, 2026

last_seen·3h ago

sessions·16

events·16

$ sikker protocols 5.253.59.171

SSH

10 / 10

HTTPS

3 / 3

HTTP

1 / 1

DOCKER

1 / 1

TELNET

1 / 1

$ sikker summary 5.253.59.171

5.253.59.171 has a threat confidence score of 89%. This IP address from The Netherlands (AS215540, Global Connectivity Solutions Llp) has been observed in 16 honeypot sessions targeting SSH, HTTPS, HTTP, DOCKER, TELNET protocols. Detected attack patterns include http mass web rce exploitation scanning. First observed on April 9, 2026, most recently active April 20, 2026.

$ sikker behaviors 5.253.59.171catalog →

highHttp Mass Web Rce Exploitation Scanning1x

Coordinated automated exploitation attempts targeting public-facing web services, including PHPUnit eval-stdin access, PHP-CGI argument injection, Docker API exposure, directory traversal, ThinkPHP invokeFunction abuse, and command execution patterns (wget/curl pipe to shell). Identifies opportunistic bot-driven RCE scanning and framework-specific exploit chaining against internet-exposed applications.

$ sikker primitives 5.253.59.171

php_phpunit_md5_marker111 http_method_get42 http_php_echo_md5_hello_phpunit_marker37 https_index_php_root_request9 https_query_thinkphp_invokefunction_md5_probe6 https_body_wget_curl_pipe_to_sh_apache_selfrep6 https_php_ini_directive_injection_allow_url_include_auto_prepend_file6 https_path_root3 docker_post_method3 https_hello_world_path_request3 https_public_index_php_request3 https_cgi_bin_sh_execution_request3 https_phpunit_eval_stdin_rce_probe3 https_php_lfi_tmp_index1_file_request3 php_pearcmd_config_create_md5_hi_marker3 phpunit_eval_stdin_php_header_execution3 https_docker_containers_json_api_request3 https_phpunit_eval_stdin_lib_path_request3 https_phpunit_eval_stdin_license_path_request3 phpunit_eval_stdin_endpoint_access_legacy_path3

$ sikker related 5.253.59.171

🇳🇱·More threats fromThe Netherlands→AS·More threats fromGlobal Connectivity Solutions Llp→SSH·More threats targetingSSH→HTTP·More threats targetingHTTPS→HTTP·More threats targetingHTTP→DOCK·More threats targetingDOCKER→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
77.83.246.124	90%	4
45.148.102.6	76%	9
85.234.100.88	99%	87
89.185.81.112	99%	846
194.87.216.198	94%	28

IP Address	Confidence	Events
45.148.10.192	100%	38,704
45.8.17.97	82%	2,253
5.187.35.142	82%	694
45.148.10.183	100%	14,663
46.151.178.13	95%	10,736