Check an IP Address, Domain Name, Subnet, or ASN

172.105.158.25 was found in our database!

$ whois 172.105.158.25

country·🇺🇸 United States

city·Atlanta

isp·Akamai Connected Cloud

asn·AS63949

network·Standard

$ sikker risk 172.105.158.25scoring →

confidence

57%Medium

first_seen·Feb 27, 2026

last_seen·1h ago

sessions·78

events·78

$ sikker protocols 172.105.158.25

REDIS

39 / 39

SMB

20 / 20

SSH

7 / 7

HTTPS

6 / 6

SMTP

3 / 3

HTTP

1 / 1

MONGODB

1 / 1

ELASTICSEARCH

1 / 1

$ sikker summary 172.105.158.25

172.105.158.25 has a threat confidence score of 57%. This IP address from United States (AS63949, Akamai Connected Cloud) has been observed in 78 honeypot sessions targeting REDIS, SMB, SSH, HTTPS, SMTP and 3 other protocols. First observed on February 27, 2026, most recently active March 27, 2026.

$ sikker primitives 172.105.158.25

elastic_http_get_request14 elastic_http_bad_request_path_probe12 elastic_root_path_probe2 http_method_get1 smtp_ehlo_greeting1

$ sikker related 172.105.158.25

🇺🇸·More threats fromUnited States→AS·More threats fromAkamai Connected Cloud→REDI·More threats targetingREDIS→SMB·More threats targetingSMB→SSH·More threats targetingSSH→HTTP·More threats targetingHTTPS→SMTP·More threats targetingSMTP→HTTP·More threats targetingHTTP→MONG·More threats targetingMONGODB→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
66.175.212.125	91%	81
45.56.103.66	96%	76
50.116.17.167	60%	24
69.164.213.194	44%	22
66.228.35.42	65%	122

IP Address	Confidence	Events
173.237.206.66	99%	444
181.215.65.34	79%	343
162.254.3.130	86%	23,094
208.3.195.65	100%	106,577
66.132.172.102	99%	177