Check an IP Address, Domain Name, Subnet, or ASN

40.124.175.226 was found in our database!

$ whois 40.124.175.226

country·🇺🇸 United States

city·San Antonio

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 40.124.175.226scoring →

confidence

41%Medium

first_seen·Apr 26, 2026

last_seen·1h ago

sessions·9

events·9

$ sikker protocols 40.124.175.226

FTP

4 / 4

SSH

2 / 2

HTTPS

2 / 2

ELASTICSEARCH

1 / 1

$ sikker summary 40.124.175.226

40.124.175.226 has a threat confidence score of 41%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 9 honeypot sessions targeting FTP, SSH, HTTPS, ELASTICSEARCH protocols. First observed on April 26, 2026, most recently active May 1, 2026.

$ sikker behaviors 40.124.175.226catalog →

infoFtp Tls Upgrade1x

FTP session where the client issues AUTH TLS to upgrade the connection to Transport Layer Security. This reflects protocol-level encryption negotiation prior to further interaction.

$ sikker primitives 40.124.175.226

ftp_auth_tls1 elastic_http_get_request1

$ sikker related 40.124.175.226

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→FTP·More threats targetingFTP→SSH·More threats targetingSSH→HTTP·More threats targetingHTTPS→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
20.39.42.109	99%	63
52.180.144.125	79%	204
13.89.124.220	97%	227
135.237.127.54	51%	614
20.203.42.204	100%	4,978

IP Address	Confidence	Events
47.251.66.163	84%	2,342
16.58.56.214	100%	60,639
45.148.9.8	96%	1,164
35.235.71.243	49%	9
207.189.16.214	93%	1,193