Check an IP Address, Domain Name, Subnet, or ASN

161.118.186.127 was found in our database!

$ whois 161.118.186.127

country·🇮🇳 India

city·Mumbai

isp·Oracle Corporation

asn·AS31898

network·Standard

$ sikker risk 161.118.186.127scoring →

confidence

83%Very High

first_seen·Apr 17, 2026

last_seen·1h ago

sessions·4

events·4

$ sikker protocols 161.118.186.127

SSH

2 / 2

HTTPS

1 / 1

TELNET

1 / 1

$ sikker summary 161.118.186.127

161.118.186.127 has a threat confidence score of 83%. This IP address from India (AS31898, Oracle Corporation) has been observed in 4 honeypot sessions targeting SSH, HTTPS, TELNET protocols. First observed on April 17, 2026, most recently active April 19, 2026.

$ sikker primitives 161.118.186.127

php_phpunit_md5_marker36 https_index_php_root_request3 telnet_echo_hex_escape_sequence_output2 https_query_thinkphp_invokefunction_md5_probe2 https_body_wget_curl_pipe_to_sh_apache_selfrep2 https_php_ini_directive_injection_allow_url_include_auto_prepend_file2 https_path_root1 telnet_command_sh1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 https_hello_world_path_request1 https_public_index_php_request1 https_cgi_bin_sh_execution_request1 https_phpunit_eval_stdin_rce_probe1 https_php_lfi_tmp_index1_file_request1 php_pearcmd_config_create_md5_hi_marker1 phpunit_eval_stdin_php_header_execution1 https_docker_containers_json_api_request1 https_phpunit_eval_stdin_lib_path_request1

$ sikker related 161.118.186.127

🇮🇳·More threats fromIndia→AS·More threats fromOracle Corporation→SSH·More threats targetingSSH→HTTP·More threats targetingHTTPS→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
138.2.88.194	68%	114
129.121.84.193	99%	48
155.248.164.42	100%	1,622
129.121.87.230	87%	48
129.213.122.13	99%	87

IP Address	Confidence	Events
103.109.181.59	96%	1,368
52.66.69.41	96%	4,605
103.59.208.173	29%	156
183.82.43.211	94%	1,194
165.22.218.119	93%	11,673