Check an IP Address, Domain Name, Subnet, or ASN

40.76.181.212 was found in our database!

$ whois 40.76.181.212

country·🇺🇸 United States

city·Washington

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 40.76.181.212scoring →

confidence

99%Very High

first_seen·Mar 21, 2026

last_seen·just now

sessions·42

events·42

$ sikker protocols 40.76.181.212

SSH

42 / 42

$ sikker summary 40.76.181.212

40.76.181.212 has a threat confidence score of 99%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 42 honeypot sessions targeting SSH protocols. First observed on March 21, 2026, most recently active March 21, 2026.

$ sikker primitives 40.76.181.212

ssh_which_command_resolution168 ssh_whoami_user_identity84 ssh_pwd_current_directory84 ssh_rm_force_tmp_file_deletion84 ssh_hostname42 ssh_uname_all42 ssh_client_version42 ssh_uptime_default42 ssh_ss_socket_count42 ssh_id_identity_query42 ssh_env_head_truncated42 ssh_dd_write_speed_test_tmp42 ssh_netstat_listen_ports_head42 ssh_cpu_model_name_enumeration42 ssh_ip_route_table_enumeration42 ssh_mount_top_entries_snapshot42 ssh_uname_kernel_release_query42 ssh_passwd_file_first_line_read42 ssh_ps_aux_top_process_snapshot42 ssh_shadow_file_first_line_read42

$ sikker related 40.76.181.212

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
20.65.193.191	77%	158
135.222.40.33	50%	35
20.102.112.104	82%	935
20.109.38.225	99%	412
20.65.144.62	63%	134

IP Address	Confidence	Events
38.54.104.5	97%	582
68.183.119.68	68%	53
16.58.56.214	100%	31,574
170.106.167.247	95%	943
20.83.185.81	70%	135