Check an IP Address, Domain Name, Subnet, or ASN

143.59.229.16 was found in our database!

$ whois 143.59.229.16

country·🇺🇸 United States

city·Ashford

isp·WideOpenWest Finance LLC

asn·AS12083

network·Standard

$ sikker risk 143.59.229.16scoring →

confidence

76%High

first_seen·Feb 24, 2026

last_seen·Mar 2, 2026

sessions·11

events·11

$ sikker protocols 143.59.229.16

SSH

11 / 11

$ sikker summary 143.59.229.16

143.59.229.16 has a threat confidence score of 76%. This IP address from United States (AS12083, WideOpenWest Finance LLC) has been observed in 11 honeypot sessions targeting SSH protocols. Detected attack patterns include ssh routeros cloud probe and telegram sms artifact discovery. First observed on February 24, 2026, most recently active March 2, 2026.

$ sikker behaviors 143.59.229.16catalog →

highSsh Routeros Cloud Probe And Telegram Sms Artifact Discovery3x

SSH post-auth sequence running RouterOS cloud/DDNS commands, Telegram data path checks, GSM/SMS artifact searches, and miner process lookups (`ps | grep miner`), preceded by basic system enumeration.

$ sikker primitives 143.59.229.16

ssh_routeros_ip_cloud_print_probe6 ssh_uname_all3 ssh_cat_proc_cpuinfo3 ssh_ps_ef_grep_miner_bracket_case3 ssh_ifconfig_interface_enumeration3 ssh_routeros_user_set_password_id03 ssh_echo_hi_pipe_cat_numbering_test3 ssh_locate_telegram_tdata_identifier3 ssh_routeros_interface_lte_print_probe3 ssh_routeros_ip_cloud_set_ddns_enabled3 ssh_ps_pipe_grep_miner_case_insensitive3 ssh_ls_telegram_tdata_and_gsm_sms_artifacts3

$ sikker related 143.59.229.16

🇺🇸·More threats fromUnited States→AS·More threats fromWideOpenWest Finance LLC→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
143.59.229.5	9%	3
67.149.70.47	31%	68
143.59.164.74	80%	30
69.14.250.6	52%	1
24.236.74.115	67%	28

IP Address	Confidence	Events
185.218.138.18	97%	9,905
185.218.138.17	97%	10,896
208.109.34.31	97%	413
92.118.39.87	100%	264,893
185.218.138.16	97%	11,161