20.185.38.120 has a threat confidence score of 35%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 113 honeypot sessions targeting SSH protocols. First observed on February 18, 2026, most recently active March 28, 2026.