Check an IP Address, Domain Name, Subnet, or ASN

172.174.165.226 was found in our database!

$ whois 172.174.165.226

country·🇺🇸 United States

city·Washington

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 172.174.165.226scoring →

confidence

100%Very High

first_seen·Feb 6, 2026

last_seen·29d ago

sessions·696

events·728

$ sikker protocols 172.174.165.226

SSH

692 / 692

REDIS

4 / 36

$ sikker summary 172.174.165.226

172.174.165.226 has a threat confidence score of 100%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 696 honeypot sessions targeting SSH, REDIS protocols. First observed on February 6, 2026, most recently active February 19, 2026.

$ sikker primitives 172.174.165.226

ssh_which_command_resolution2768 ssh_pwd_current_directory1384 ssh_rm_force_tmp_file_deletion1384 ssh_whoami_user_identity1383 ssh_hostname692 ssh_uname_all692 ssh_client_version692 ssh_uptime_default692 ssh_ss_socket_count692 ssh_id_identity_query692 ssh_env_head_truncated692 ssh_dd_write_speed_test_tmp692 ssh_netstat_listen_ports_head692 ssh_cpu_model_name_enumeration692 ssh_ip_route_table_enumeration692 ssh_mount_top_entries_snapshot692 ssh_uname_kernel_release_query692 ssh_passwd_file_first_line_read692 ssh_ps_aux_top_process_snapshot692 ssh_shadow_file_first_line_read692

$ sikker related 172.174.165.226

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→REDI·More threats targetingREDIS→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.214.45.193	100%	367
40.76.181.212	100%	93
172.202.117.196	83%	168
20.127.224.63	87%	197
20.163.15.236	49%	28

IP Address	Confidence	Events
206.168.34.201	50%	2,082
173.255.221.189	72%	992
181.215.65.49	85%	1,948
45.33.109.8	74%	1,479
45.79.207.111	74%	1,296