Check an IP Address, Domain Name, Subnet, or ASN

104.22.7.166 was found in our database!

$ whois 104.22.7.166

country·🇪🇸 Spain

city·Madrid

isp·Cloudflare, Inc.

asn·AS13335

network·Standard

$ sikker risk 104.22.7.166scoring →

confidence

13%Low

first_seen·Mar 16, 2026

last_seen·1h ago

sessions·4

events·4

$ sikker protocols 104.22.7.166

HTTP

4 / 4

$ sikker summary 104.22.7.166

104.22.7.166 has a threat confidence score of 13%. This IP address from Spain (AS13335, Cloudflare, Inc.) has been observed in 4 honeypot sessions targeting HTTP protocols. First observed on March 16, 2026, most recently active March 25, 2026.

$ sikker behaviors 104.22.7.166catalog →

mediumWordpress Urlencoded Auth Probe2x

Identifies HTTP sessions where WordPress authentication is attempted through URL-encoded form credential submission. This pattern is commonly associated with automated login probing, credential stuffing frameworks, or scripted reconnaissance against WordPress admin authentication workflows.

$ sikker primitives 104.22.7.166

http_wp_login_form_urlencoded_credentials_unordered4 http_wp_login_form_urlencoded_credentials1

$ sikker related 104.22.7.166

🇪🇸·More threats fromSpain→AS·More threats fromCloudflare, Inc.→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
104.23.168.19	8%	8
172.71.127.102	12%	1
162.158.216.221	17%	3
172.68.245.193	10%	9
162.158.154.158	21%	45

IP Address	Confidence	Events
82.223.35.19	95%	1,115
82.223.17.218	95%	826
82.223.13.32	95%	1,105
82.223.33.25	95%	1,084
82.223.43.244	95%	821