Check an IP Address, Domain Name, Subnet, or ASN

20.102.47.195 was found in our database!

$ whois 20.102.47.195

country·🇺🇸 United States

city·Washington

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 20.102.47.195scoring →

confidence

100%Very High

first_seen·Mar 15, 2026

last_seen·5d ago

sessions·2,136

events·2,136

$ sikker protocols 20.102.47.195

SSH

2,136 / 2,136

$ sikker summary 20.102.47.195

20.102.47.195 has a threat confidence score of 100%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 2,136 honeypot sessions targeting SSH protocols. First observed on March 15, 2026, most recently active March 15, 2026.

$ sikker primitives 20.102.47.195

ssh_which_command_resolution8540 ssh_whoami_user_identity4270 ssh_pwd_current_directory4270 ssh_rm_force_tmp_file_deletion4270 ssh_hostname2135 ssh_uname_all2135 ssh_client_version2135 ssh_uptime_default2135 ssh_ss_socket_count2135 ssh_id_identity_query2135 ssh_env_head_truncated2135 ssh_dd_write_speed_test_tmp2135 ssh_netstat_listen_ports_head2135 ssh_cpu_model_name_enumeration2135 ssh_ip_route_table_enumeration2135 ssh_mount_top_entries_snapshot2135 ssh_uname_kernel_release_query2135 ssh_passwd_file_first_line_read2135 ssh_ps_aux_top_process_snapshot2135 ssh_shadow_file_first_line_read2135

$ sikker related 20.102.47.195

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.191.157.64	100%	974
4.236.164.162	99%	55
52.187.9.8	100%	873
20.106.17.55	66%	135
20.109.38.225	100%	470

IP Address	Confidence	Events
45.79.115.59	84%	1,190
172.191.157.64	100%	974
92.118.39.87	100%	250,931
66.132.172.199	95%	35
147.182.135.104	78%	110