Check an IP Address, Domain Name, Subnet, or ASN

20.161.58.227 was found in our database!

$ whois 20.161.58.227

country·🇺🇸 United States

city·Boydton

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 20.161.58.227scoring →

confidence

100%Very High

first_seen·Feb 28, 2026

last_seen·20d ago

sessions·325

events·325

$ sikker protocols 20.161.58.227

SSH

325 / 325

$ sikker summary 20.161.58.227

20.161.58.227 has a threat confidence score of 100%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 325 honeypot sessions targeting SSH protocols. First observed on February 28, 2026, most recently active February 28, 2026.

$ sikker primitives 20.161.58.227

ssh_which_command_resolution1292 ssh_pwd_current_directory647 ssh_whoami_user_identity646 ssh_rm_force_tmp_file_deletion646 ssh_hostname324 ssh_uname_all324 ssh_client_version324 ssh_uptime_default324 ssh_env_head_truncated324 ssh_netstat_listen_ports_head324 ssh_mount_top_entries_snapshot324 ssh_ps_aux_top_process_snapshot324 ssh_history_tail_recent_commands324 ssh_netstat_tulpn_listener_snapshot324 ssh_ls_long_all_directory_listing_absolute324 ssh_ls_network_configuration_paths_truncated324 ssh_uname_machine_architecture_with_fallback_echo324 ssh_cpuinfo_model_name_extraction_with_fallback_echo324 ssh_ss_socket_count323 ssh_id_identity_query323

$ sikker related 20.161.58.227

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.174.109.244	99%	89
20.109.38.225	100%	468
4.246.135.39	99%	62
172.214.45.193	100%	363
172.172.196.177	100%	884

IP Address	Confidence	Events
192.227.159.126	48%	5
167.94.138.33	49%	1,299
154.16.112.232	100%	339,232
192.81.211.158	91%	34
172.86.73.58	88%	769