Check an IP Address, Domain Name, Subnet, or ASN

172.215.217.104 was found in our database!

$ whois 172.215.217.104

country·🇺🇸 United States

city·Cheyenne

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 172.215.217.104scoring →

confidence

99%Very High

first_seen·Apr 6, 2026

last_seen·1m ago

sessions·44

events·44

$ sikker protocols 172.215.217.104

SSH

44 / 44

$ sikker summary 172.215.217.104

172.215.217.104 has a threat confidence score of 99%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 44 honeypot sessions targeting SSH protocols. First observed on April 6, 2026, most recently active April 6, 2026.

$ sikker primitives 172.215.217.104

ssh_which_command_resolution176 ssh_whoami_user_identity88 ssh_pwd_current_directory88 ssh_rm_force_tmp_file_deletion88 ssh_hostname44 ssh_uname_all44 ssh_client_version44 ssh_uptime_default44 ssh_ss_socket_count44 ssh_id_identity_query44 ssh_env_head_truncated44 ssh_dd_write_speed_test_tmp44 ssh_netstat_listen_ports_head44 ssh_cpu_model_name_enumeration44 ssh_ip_route_table_enumeration44 ssh_mount_top_entries_snapshot44 ssh_uname_kernel_release_query44 ssh_passwd_file_first_line_read44 ssh_ps_aux_top_process_snapshot44 ssh_shadow_file_first_line_read44

$ sikker related 172.215.217.104

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
20.55.86.54	99%	60
172.206.32.90	93%	47
20.151.229.110	64%	17
20.65.195.96	92%	250
20.64.105.25	85%	182

IP Address	Confidence	Events
66.132.224.84	95%	150
20.55.86.54	99%	60
172.206.32.90	93%	47
66.132.195.48	97%	170
43.166.239.145	40%	59