Check an IP Address, Domain Name, Subnet, or ASN

52.225.73.166 was found in our database!

$ whois 52.225.73.166

country·🇺🇸 United States

city·San Jose

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 52.225.73.166scoring →

confidence

99%Very High

first_seen·Apr 9, 2026

last_seen·31m ago

sessions·81

events·81

$ sikker protocols 52.225.73.166

SSH

81 / 81

$ sikker summary 52.225.73.166

52.225.73.166 has a threat confidence score of 99%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 81 honeypot sessions targeting SSH protocols. First observed on April 9, 2026, most recently active April 9, 2026.

$ sikker primitives 52.225.73.166

ssh_which_command_resolution324 ssh_whoami_user_identity162 ssh_pwd_current_directory162 ssh_rm_force_tmp_file_deletion162 ssh_hostname81 ssh_uname_all81 ssh_client_version81 ssh_uptime_default81 ssh_ss_socket_count81 ssh_id_identity_query81 ssh_env_head_truncated81 ssh_dd_write_speed_test_tmp81 ssh_netstat_listen_ports_head81 ssh_cpu_model_name_enumeration81 ssh_ip_route_table_enumeration81 ssh_mount_top_entries_snapshot81 ssh_uname_kernel_release_query81 ssh_passwd_file_first_line_read81 ssh_ps_aux_top_process_snapshot81 ssh_shadow_file_first_line_read81

$ sikker related 52.225.73.166

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.203.245.156	87%	210
20.163.60.90	92%	190
172.202.113.141	72%	120
135.237.125.177	70%	59
40.124.173.139	84%	194

IP Address	Confidence	Events
135.233.96.247	73%	155
212.102.40.218	82%	38,237
66.132.186.197	97%	155
157.254.223.75	95%	1,786
193.148.63.132	96%	1,394