Check an IP Address, Domain Name, Subnet, or ASN

4.236.164.162 was found in our database!

$ whois 4.236.164.162

country·🇺🇸 United States

city·Washington

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 4.236.164.162scoring →

confidence

98%Very High

first_seen·Mar 21, 2026

last_seen·6m ago

sessions·26

events·26

$ sikker protocols 4.236.164.162

SSH

26 / 26

$ sikker summary 4.236.164.162

4.236.164.162 has a threat confidence score of 98%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 26 honeypot sessions targeting SSH protocols. First observed on March 21, 2026, most recently active March 21, 2026.

$ sikker primitives 4.236.164.162

ssh_which_command_resolution104 ssh_whoami_user_identity52 ssh_pwd_current_directory52 ssh_rm_force_tmp_file_deletion52 ssh_hostname26 ssh_uname_all26 ssh_client_version26 ssh_uptime_default26 ssh_ss_socket_count26 ssh_id_identity_query26 ssh_env_head_truncated26 ssh_dd_write_speed_test_tmp26 ssh_netstat_listen_ports_head26 ssh_cpu_model_name_enumeration26 ssh_ip_route_table_enumeration26 ssh_mount_top_entries_snapshot26 ssh_uname_kernel_release_query26 ssh_passwd_file_first_line_read26 ssh_ps_aux_top_process_snapshot26 ssh_shadow_file_first_line_read26

$ sikker related 4.236.164.162

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
20.65.193.191	77%	158
135.222.40.33	50%	35
20.102.112.104	82%	935
20.109.38.225	99%	412
20.65.144.62	63%	134

IP Address	Confidence	Events
38.54.104.5	97%	582
68.183.119.68	68%	53
16.58.56.214	100%	31,574
170.106.167.247	95%	943
20.83.185.81	70%	135