Check an IP Address, Domain Name, Subnet, or ASN

20.168.115.114 was found in our database!

$ whois 20.168.115.114

country·🇺🇸 United States

city·Phoenix

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 20.168.115.114scoring →

confidence

100%Very High

first_seen·Apr 9, 2026

last_seen·just now

sessions·374

events·411

$ sikker protocols 20.168.115.114

SSH

374 / 411

$ sikker summary 20.168.115.114

20.168.115.114 has a threat confidence score of 100%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 374 honeypot sessions targeting SSH protocols. First observed on April 9, 2026, most recently active April 9, 2026.

$ sikker primitives 20.168.115.114

ssh_which_command_resolution1472 ssh_whoami_user_identity736 ssh_pwd_current_directory736 ssh_rm_force_tmp_file_deletion736 ssh_hostname368 ssh_uname_all368 ssh_client_version368 ssh_uptime_default368 ssh_ss_socket_count368 ssh_id_identity_query368 ssh_env_head_truncated368 ssh_dd_write_speed_test_tmp368 ssh_netstat_listen_ports_head368 ssh_cpu_model_name_enumeration368 ssh_ip_route_table_enumeration368 ssh_mount_top_entries_snapshot368 ssh_uname_kernel_release_query368 ssh_passwd_file_first_line_read368 ssh_ps_aux_top_process_snapshot368 ssh_shadow_file_first_line_read368

$ sikker related 20.168.115.114

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
48.214.144.31	93%	149
20.207.238.171	100%	93
20.168.12.169	81%	196
20.15.225.33	82%	218
20.65.194.43	81%	217

IP Address	Confidence	Events
3.130.168.2	100%	35,866
188.213.202.55	82%	690
147.185.132.174	99%	400
52.225.73.166	99%	63
92.118.39.92	100%	112,187