Check an IP Address, Domain Name, Subnet, or ASN

20.51.198.210 was found in our database!

$ whois 20.51.198.210

country·🇺🇸 United States

city·Washington

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 20.51.198.210scoring →

confidence

99%Very High

first_seen·Feb 15, 2026

last_seen·26d ago

sessions·94

events·134

$ sikker protocols 20.51.198.210

SSH

94 / 134

$ sikker summary 20.51.198.210

20.51.198.210 has a threat confidence score of 99%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 94 honeypot sessions targeting SSH protocols. First observed on February 15, 2026, most recently active February 22, 2026.

$ sikker primitives 20.51.198.210

ssh_which_command_resolution148 ssh_rm_force_tmp_file_deletion74 ssh_whoami_user_identity73 ssh_pwd_current_directory73 ssh_ss_socket_count37 ssh_id_identity_query37 ssh_dd_write_speed_test_tmp37 ssh_cpu_model_name_enumeration37 ssh_ip_route_table_enumeration37 ssh_uname_kernel_release_query37 ssh_passwd_file_first_line_read37 ssh_shadow_file_first_line_read37 ssh_proc_version_first_line_read37 ssh_systemctl_running_service_list37 ssh_ip_addr_interface_header_enumeration37 ssh_ping_single_packet_transmission_check37 ssh_ls_network_configuration_paths_truncated37 ssh_uname_machine_architecture_with_fallback_echo37 ssh_hostname36 ssh_uname_all36

$ sikker related 20.51.198.210

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
20.151.11.236	52%	44
20.65.193.176	59%	161
172.191.94.172	100%	176
172.212.224.40	65%	64
52.180.145.98	63%	158

IP Address	Confidence	Events
92.118.39.63	100%	48,158
185.238.231.181	85%	1,598
181.215.65.49	85%	1,652
38.54.50.81	96%	1,449
43.162.109.139	96%	1,626