Check an IP Address, Domain Name, Subnet, or ASN

172.172.119.97 was found in our database!

$ whois 172.172.119.97

country·🇺🇸 United States

city·Boydton

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 172.172.119.97scoring →

confidence

100%Very High

first_seen·Feb 19, 2026

last_seen·29d ago

sessions·801

events·1,063

$ sikker protocols 172.172.119.97

SSH

801 / 1,063

$ sikker summary 172.172.119.97

172.172.119.97 has a threat confidence score of 100%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 801 honeypot sessions targeting SSH protocols. First observed on February 19, 2026, most recently active February 19, 2026.

$ sikker primitives 172.172.119.97

ssh_which_command_resolution2692 ssh_whoami_user_identity1347 ssh_pwd_current_directory1347 ssh_rm_force_tmp_file_deletion1346 ssh_hostname674 ssh_uname_all674 ssh_client_version674 ssh_uptime_default674 ssh_env_head_truncated674 ssh_netstat_listen_ports_head674 ssh_mount_top_entries_snapshot674 ssh_ps_aux_top_process_snapshot674 ssh_history_tail_recent_commands674 ssh_netstat_tulpn_listener_snapshot674 ssh_ip_addr_interface_header_enumeration674 ssh_ls_long_all_directory_listing_absolute674 ssh_ls_network_configuration_paths_truncated674 ssh_uname_machine_architecture_with_fallback_echo674 ssh_cpuinfo_model_name_extraction_with_fallback_echo674 ssh_ss_socket_count673

$ sikker related 172.172.119.97

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.191.157.64	100%	974
4.236.164.162	99%	55
52.187.9.8	100%	873
20.106.17.55	66%	135
20.109.38.225	100%	470

IP Address	Confidence	Events
192.227.159.126	48%	5
167.94.138.33	49%	1,299
154.16.112.232	100%	339,232
192.81.211.158	91%	34
172.86.73.58	88%	769