Check an IP Address, Domain Name, Subnet, or ASN

162.159.104.20 was found in our database!

$ whois 162.159.104.20

country·🇺🇸 United States

city·Dallas

isp·Cloudflare, Inc.

asn·AS13335

network·Standard

$ sikker risk 162.159.104.20scoring →

confidence

19%Low

first_seen·Apr 30, 2026

last_seen·43m ago

sessions·4

events·4

$ sikker protocols 162.159.104.20

HTTP

4 / 4

$ sikker summary 162.159.104.20

162.159.104.20 has a threat confidence score of 19%. This IP address from United States (AS13335, Cloudflare, Inc.) has been observed in 4 honeypot sessions targeting HTTP protocols. First observed on April 30, 2026, most recently active May 1, 2026.

$ sikker behaviors 162.159.104.20catalog →

mediumWordpress Urlencoded Auth Probe4x

Identifies HTTP sessions where WordPress authentication is attempted through URL-encoded form credential submission. This pattern is commonly associated with automated login probing, credential stuffing frameworks, or scripted reconnaissance against WordPress admin authentication workflows.

$ sikker primitives 162.159.104.20

http_wp_login_form_urlencoded_credentials_unordered4

$ sikker related 162.159.104.20

🇺🇸·More threats fromUnited States→AS·More threats fromCloudflare, Inc.→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.71.126.104	22%	9
162.159.106.33	12%	1
172.70.54.63	16%	1
108.162.210.247	4%	3
172.71.167.85	11%	2

IP Address	Confidence	Events
162.241.178.67	97%	26
72.167.225.241	72%	5,038
45.148.9.8	96%	1,084
40.76.137.103	65%	84
43.130.174.100	95%	710