Check an IP Address, Domain Name, Subnet, or ASN

52.159.245.180 was found in our database!

$ whois 52.159.245.180

country·🇺🇸 United States

city·San Jose

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 52.159.245.180scoring →

confidence

100%Very High

first_seen·Apr 8, 2026

last_seen·1m ago

sessions·168

events·168

$ sikker protocols 52.159.245.180

SSH

168 / 168

$ sikker summary 52.159.245.180

52.159.245.180 has a threat confidence score of 100%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 168 honeypot sessions targeting SSH protocols. First observed on April 8, 2026, most recently active April 8, 2026.

$ sikker primitives 52.159.245.180

ssh_which_command_resolution672 ssh_whoami_user_identity336 ssh_pwd_current_directory336 ssh_rm_force_tmp_file_deletion336 ssh_hostname168 ssh_uname_all168 ssh_client_version168 ssh_uptime_default168 ssh_ss_socket_count168 ssh_id_identity_query168 ssh_env_head_truncated168 ssh_dd_write_speed_test_tmp168 ssh_netstat_listen_ports_head168 ssh_cpu_model_name_enumeration168 ssh_ip_route_table_enumeration168 ssh_mount_top_entries_snapshot168 ssh_uname_kernel_release_query168 ssh_passwd_file_first_line_read168 ssh_ps_aux_top_process_snapshot168 ssh_shadow_file_first_line_read168

$ sikker related 52.159.245.180

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
4.156.218.251	52%	39
20.97.196.163	97%	20
20.55.223.181	99%	50
52.248.40.89	86%	241
20.65.168.78	80%	151

IP Address	Confidence	Events
45.56.79.53	84%	2,566
20.97.196.163	97%	17
69.164.217.245	91%	2,250
173.239.254.241	74%	139
104.234.32.83	74%	144