Check an IP Address, Domain Name, Subnet, or ASN

72.167.54.139 was found in our database!

$ whois 72.167.54.139

country·🇺🇸 United States

isp·GoDaddy.com, LLC

asn·AS398101

network·Standard

$ sikker risk 72.167.54.139scoring →

confidence

46%Medium

first_seen·Apr 8, 2026

last_seen·1d ago

sessions·3

events·3

$ sikker protocols 72.167.54.139

HTTPS

2 / 2

RDP

1 / 1

$ sikker summary 72.167.54.139

72.167.54.139 has a threat confidence score of 46%. This IP address from United States (AS398101, GoDaddy.com, LLC) has been observed in 3 honeypot sessions targeting HTTPS, RDP protocols. First observed on April 8, 2026, most recently active April 18, 2026.

$ sikker behaviors 72.167.54.139catalog →

mediumHttps Remote Login Lang En2x

HTTPS request to /remote/login with query string lang=en.

$ sikker primitives 72.167.54.139

https_path_remote_login2 https_query_string_lang_en2

$ sikker related 72.167.54.139

🇺🇸·More threats fromUnited States→AS·More threats fromGoDaddy.com, LLC→HTTP·More threats targetingHTTPS→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
107.180.88.176	100%	1,474
72.167.39.225	33%	2
72.167.39.245	20%	51
208.109.38.143	50%	511
184.168.21.211	100%	946

IP Address	Confidence	Events
20.65.219.43	87%	223
170.205.31.254	99%	9,665
66.132.172.103	100%	653
147.185.132.90	99%	436
205.210.31.147	95%	293