Check an IP Address, Domain Name, Subnet, or ASN

52.154.20.50 was found in our database!

$ whois 52.154.20.50

country·🇺🇸 United States

city·Des Moines

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 52.154.20.50scoring →

confidence

84%Very High

first_seen·Feb 19, 2026

last_seen·29d ago

sessions·48

events·48

$ sikker protocols 52.154.20.50

SSH

48 / 48

$ sikker summary 52.154.20.50

52.154.20.50 has a threat confidence score of 84%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 48 honeypot sessions targeting SSH protocols. First observed on February 19, 2026, most recently active February 19, 2026.

$ sikker primitives 52.154.20.50

ssh_which_command_resolution4 ssh_rm_force_tmp_file_deletion2 ssh_ss_socket_count1 ssh_id_identity_query1 ssh_whoami_user_identity1 ssh_pwd_current_directory1 ssh_dd_write_speed_test_tmp1 ssh_cpu_model_name_enumeration1 ssh_ip_route_table_enumeration1 ssh_uname_kernel_release_query1 ssh_passwd_file_first_line_read1 ssh_shadow_file_first_line_read1 ssh_proc_version_first_line_read1 ssh_systemctl_running_service_list1 ssh_shell_history_tail_with_fallback1 ssh_mount_snapshot_top5_with_fallback1 ssh_process_snapshot_top10_suppressed1 ssh_uptime_pretty_or_fallback_standard1 ssh_hostname_retrieval_suppressed_errors1 ssh_ip_addr_interface_header_enumeration1

$ sikker related 52.154.20.50

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
20.151.11.236	52%	44
20.65.193.176	59%	161
172.191.94.172	100%	176
172.212.224.40	65%	64
52.180.145.98	63%	158

IP Address	Confidence	Events
92.118.39.63	100%	48,158
185.238.231.181	85%	1,598
181.215.65.49	85%	1,652
38.54.50.81	96%	1,449
43.162.109.139	96%	1,626