Check an IP Address, Domain Name, Subnet, or ASN

20.97.196.163 was found in our database!

$ whois 20.97.196.163

country·🇺🇸 United States

city·Boydton

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 20.97.196.163scoring →

confidence

100%Very High

first_seen·Apr 8, 2026

last_seen·8m ago

sessions·150

events·150

$ sikker protocols 20.97.196.163

SSH

150 / 150

$ sikker summary 20.97.196.163

20.97.196.163 has a threat confidence score of 100%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 150 honeypot sessions targeting SSH protocols. First observed on April 8, 2026, most recently active April 8, 2026.

$ sikker primitives 20.97.196.163

ssh_which_command_resolution592 ssh_pwd_current_directory298 ssh_whoami_user_identity297 ssh_rm_force_tmp_file_deletion296 ssh_uptime_default150 ssh_env_head_truncated150 ssh_mount_top_entries_snapshot150 ssh_ps_aux_top_process_snapshot150 ssh_netstat_tulpn_listener_snapshot150 ssh_ls_long_all_directory_listing_absolute150 ssh_uname_machine_architecture_with_fallback_echo150 ssh_cpuinfo_model_name_extraction_with_fallback_echo150 ssh_hostname149 ssh_uname_all149 ssh_client_version149 ssh_netstat_listen_ports_head149 ssh_history_tail_recent_commands149 ssh_ls_network_configuration_paths_truncated149 ssh_ss_socket_count148 ssh_id_identity_query148

$ sikker related 20.97.196.163

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
20.65.193.83	83%	167
57.151.99.52	50%	66
20.168.6.88	57%	42
128.203.203.233	75%	172
172.206.225.82	61%	127

IP Address	Confidence	Events
208.109.34.31	97%	1,769
159.89.53.7	45%	2
185.218.138.27	97%	13,159
142.54.232.1	37%	299
57.151.99.52	50%	66