Check an IP Address, Domain Name, Subnet, or ASN

52.238.26.242 was found in our database!

$ whois 52.238.26.242

country·🇺🇸 United States

city·San Jose

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 52.238.26.242scoring →

confidence

100%Very High

first_seen·Mar 15, 2026

last_seen·5d ago

sessions·417

events·417

$ sikker protocols 52.238.26.242

SSH

417 / 417

$ sikker summary 52.238.26.242

52.238.26.242 has a threat confidence score of 100%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 417 honeypot sessions targeting SSH protocols. First observed on March 15, 2026, most recently active March 15, 2026.

$ sikker primitives 52.238.26.242

ssh_which_command_resolution1660 ssh_whoami_user_identity830 ssh_pwd_current_directory830 ssh_rm_force_tmp_file_deletion830 ssh_hostname415 ssh_uname_all415 ssh_client_version415 ssh_uptime_default415 ssh_ss_socket_count415 ssh_id_identity_query415 ssh_env_head_truncated415 ssh_dd_write_speed_test_tmp415 ssh_netstat_listen_ports_head415 ssh_cpu_model_name_enumeration415 ssh_ip_route_table_enumeration415 ssh_mount_top_entries_snapshot415 ssh_uname_kernel_release_query415 ssh_passwd_file_first_line_read415 ssh_ps_aux_top_process_snapshot415 ssh_shadow_file_first_line_read415

$ sikker related 52.238.26.242

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.191.157.64	100%	974
4.236.164.162	99%	55
52.187.9.8	100%	873
20.106.17.55	66%	135
20.109.38.225	100%	470

IP Address	Confidence	Events
192.227.159.126	48%	5
167.94.138.33	49%	1,299
154.16.112.232	100%	339,232
192.81.211.158	91%	34
172.86.73.58	88%	769