Check an IP Address, Domain Name, Subnet, or ASN

166.186.196.155 was found in our database!

$ whois 166.186.196.155

country·🇺🇸 United States

isp·AT&T Enterprises, LLC

asn·AS20057

network·Standard

$ sikker risk 166.186.196.155scoring →

confidence

74%High

first_seen·Apr 23, 2026

last_seen·1d ago

sessions·8

events·8

$ sikker protocols 166.186.196.155

SSH

8 / 8

$ sikker summary 166.186.196.155

166.186.196.155 has a threat confidence score of 74%. This IP address from United States (AS20057, AT&T Enterprises, LLC) has been observed in 8 honeypot sessions targeting SSH protocols. First observed on April 23, 2026, most recently active April 27, 2026.

$ sikker primitives 166.186.196.155

ssh_kill_sigkill_target_root_literal32 ssh_readlink_proc_root_exe_resolved_path32 ssh_kill_sigkill_target_systemd_plus_literal16 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_then_cat_to_netai15 ssh_uname_all8 ssh_ps_aux_grep_netai_exclude_grep_count8 ssh_cpu_core_count_via_proc_cpuinfo_pipeline8 ssh_top_10_processes_by_cpu_via_ps_sorted_desc8 ssh_readlink_proc_message_plus_exe_resolved_path8 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_pwd_echo8 ssh_cd_tmp_create_w_sh_if_missing_via_stdin_and_chmod_exec8 ssh_create_user_systemd_watcher_netai_service_and_enable_now8 ssh_kill_sigkill_target_message_plus_literal7

$ sikker related 166.186.196.155

🇺🇸·More threats fromUnited States→AS·More threats fromAT&T Enterprises, LLC→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
166.130.176.136	37%	221
166.186.196.103	40%	2
166.186.196.251	45%	1
166.186.196.126	49%	1
155.166.68.162	14%	8

IP Address	Confidence	Events
45.131.194.160	80%	9,982
147.135.15.2	99%	13,078
43.153.30.114	95%	688
3.143.162.210	100%	13,632
66.132.186.175	100%	412