20.164.21.26 has a threat confidence score of 26%. This IP address from South Africa (AS8075, Microsoft Corporation) has been observed in 30 honeypot sessions targeting SSH protocols. First observed on January 22, 2026, most recently active March 20, 2026.