Check an IP Address, Domain Name, Subnet, or ASN

5.9.157.26 was found in our database!

$ whois 5.9.157.26

country·🇩🇪 Germany

city·Falkenstein

isp·Hetzner Online GmbH

asn·AS24940

network·Standard

$ sikker risk 5.9.157.26scoring →

confidence

100%Very High

first_seen·Apr 16, 2026

last_seen·2d ago

sessions·440

events·440

$ sikker protocols 5.9.157.26

SSH

440 / 440

$ sikker summary 5.9.157.26

5.9.157.26 has a threat confidence score of 100%. This IP address from Germany (AS24940, Hetzner Online GmbH) has been observed in 440 honeypot sessions targeting SSH protocols. First observed on April 16, 2026, most recently active April 16, 2026.

$ sikker primitives 5.9.157.26

ssh_which_command_resolution1760 ssh_whoami_user_identity880 ssh_pwd_current_directory880 ssh_cpu_model_name_enumeration880 ssh_rm_force_tmp_file_deletion880 ssh_hostname440 ssh_uname_all440 ssh_uptime_default440 ssh_ss_socket_count440 ssh_id_identity_query440 ssh_env_head_truncated440 ssh_dd_write_speed_test_tmp440 ssh_netstat_listen_ports_head440 ssh_ip_route_table_enumeration440 ssh_mount_top_entries_snapshot440 ssh_uname_kernel_release_query440 ssh_passwd_file_first_line_read440 ssh_ps_aux_top_process_snapshot440 ssh_shadow_file_first_line_read440 ssh_history_tail_recent_commands440

$ sikker related 5.9.157.26

🇩🇪·More threats fromGermany→AS·More threats fromHetzner Online GmbH→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
94.130.218.118	75%	5,887
204.168.220.82	63%	512
95.216.1.83	63%	222
178.63.154.178	84%	58
89.167.35.98	39%	4

IP Address	Confidence	Events
85.215.254.181	78%	473
158.173.154.150	82%	1,485
89.163.204.62	87%	90,746
185.91.127.85	71%	1,986
62.171.147.220	96%	743