Check an IP Address, Domain Name, Subnet, or ASN

20.109.38.225 was found in our database!

$ whois 20.109.38.225

country·🇺🇸 United States

city·Boydton

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 20.109.38.225scoring →

confidence

99%Very High

first_seen·Mar 21, 2026

last_seen·2m ago

sessions·53

events·413

$ sikker protocols 20.109.38.225

SSH

53 / 413

$ sikker summary 20.109.38.225

20.109.38.225 has a threat confidence score of 99%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 53 honeypot sessions targeting SSH protocols. First observed on March 21, 2026, most recently active March 21, 2026.

$ sikker primitives 20.109.38.225

ssh_which_command_resolution212 ssh_whoami_user_identity106 ssh_pwd_current_directory106 ssh_rm_force_tmp_file_deletion106 ssh_hostname53 ssh_uname_all53 ssh_client_version53 ssh_uptime_default53 ssh_ss_socket_count53 ssh_id_identity_query53 ssh_env_head_truncated53 ssh_dd_write_speed_test_tmp53 ssh_netstat_listen_ports_head53 ssh_cpu_model_name_enumeration53 ssh_ip_route_table_enumeration53 ssh_mount_top_entries_snapshot53 ssh_uname_kernel_release_query53 ssh_passwd_file_first_line_read53 ssh_ps_aux_top_process_snapshot53 ssh_shadow_file_first_line_read53

$ sikker related 20.109.38.225

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
20.29.23.198	67%	103
40.76.181.212	99%	42
20.102.112.104	82%	939
20.65.184.116	70%	116
52.180.137.14	63%	117

IP Address	Confidence	Events
38.54.104.5	97%	582
68.183.119.68	68%	53
16.58.56.214	100%	31,574
170.106.167.247	95%	943
20.83.185.81	70%	135