Check an IP Address, Domain Name, Subnet, or ASN

52.159.229.3 was found in our database!

$ whois 52.159.229.3

country·🇺🇸 United States

city·San Jose

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 52.159.229.3scoring →

confidence

100%Very High

first_seen·Mar 20, 2026

last_seen·1m ago

sessions·369

events·376

$ sikker protocols 52.159.229.3

SSH

369 / 376

$ sikker summary 52.159.229.3

52.159.229.3 has a threat confidence score of 100%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 369 honeypot sessions targeting SSH protocols. First observed on March 20, 2026, most recently active March 20, 2026.

$ sikker primitives 52.159.229.3

ssh_which_command_resolution1472 ssh_whoami_user_identity736 ssh_pwd_current_directory736 ssh_rm_force_tmp_file_deletion736 ssh_hostname368 ssh_uname_all368 ssh_client_version368 ssh_uptime_default368 ssh_ss_socket_count368 ssh_id_identity_query368 ssh_env_head_truncated368 ssh_dd_write_speed_test_tmp368 ssh_netstat_listen_ports_head368 ssh_cpu_model_name_enumeration368 ssh_ip_route_table_enumeration368 ssh_mount_top_entries_snapshot368 ssh_uname_kernel_release_query368 ssh_passwd_file_first_line_read368 ssh_ps_aux_top_process_snapshot368 ssh_shadow_file_first_line_read368

$ sikker related 52.159.229.3

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
52.140.102.59	95%	818
20.49.0.100	99%	131
20.102.112.104	80%	388
40.124.174.148	67%	180
20.118.32.171	66%	173

IP Address	Confidence	Events
144.172.105.60	98%	20,893
47.254.30.91	100%	178
206.168.34.52	49%	1,522
97.74.90.88	96%	877
193.37.33.184	75%	683