Check an IP Address, Domain Name, Subnet, or ASN

52.159.247.67 was found in our database!

$ whois 52.159.247.67

country·🇺🇸 United States

city·San Jose

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 52.159.247.67scoring →

confidence

98%Very High

first_seen·Mar 24, 2026

last_seen·3m ago

sessions·31

events·31

$ sikker protocols 52.159.247.67

SSH

31 / 31

$ sikker summary 52.159.247.67

52.159.247.67 has a threat confidence score of 98%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 31 honeypot sessions targeting SSH protocols. First observed on March 24, 2026, most recently active March 24, 2026.

$ sikker primitives 52.159.247.67

ssh_which_command_resolution124 ssh_whoami_user_identity62 ssh_pwd_current_directory62 ssh_rm_force_tmp_file_deletion62 ssh_hostname31 ssh_uname_all31 ssh_client_version31 ssh_uptime_default31 ssh_ss_socket_count31 ssh_id_identity_query31 ssh_env_head_truncated31 ssh_dd_write_speed_test_tmp31 ssh_netstat_listen_ports_head31 ssh_cpu_model_name_enumeration31 ssh_ip_route_table_enumeration31 ssh_mount_top_entries_snapshot31 ssh_uname_kernel_release_query31 ssh_passwd_file_first_line_read31 ssh_ps_aux_top_process_snapshot31 ssh_shadow_file_first_line_read31

$ sikker related 52.159.247.67

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
13.94.117.127	81%	562
20.127.200.74	64%	54
135.119.96.127	55%	63
20.64.104.114	77%	162
172.210.249.152	100%	223

IP Address	Confidence	Events
162.216.149.47	53%	70
165.22.190.98	70%	30
107.173.254.55	69%	79
45.61.184.223	99%	6,193
206.223.225.190	65%	249