Check an IP Address, Domain Name, Subnet, or ASN

52.238.26.243 was found in our database!

$ whois 52.238.26.243

country·🇺🇸 United States

city·San Jose

isp·Microsoft Corporation

asn·AS8075

network·Standard

$ sikker risk 52.238.26.243scoring →

confidence

99%Very High

first_seen·Feb 8, 2026

last_seen·21d ago

sessions·356

events·442

$ sikker protocols 52.238.26.243

SSH

356 / 442

$ sikker summary 52.238.26.243

52.238.26.243 has a threat confidence score of 99%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 356 honeypot sessions targeting SSH protocols. First observed on February 8, 2026, most recently active February 27, 2026.

$ sikker primitives 52.238.26.243

ssh_which_command_resolution296 ssh_whoami_user_identity160 ssh_pwd_current_directory160 ssh_rm_force_tmp_file_deletion148 ssh_hostname86 ssh_uname_all86 ssh_ps_aux_top_process_snapshot86 ssh_ls_long_all_directory_listing_absolute86 ssh_uname_machine_architecture_with_fallback_echo86 ssh_client_version74 ssh_uptime_default74 ssh_ss_socket_count74 ssh_id_identity_query74 ssh_env_head_truncated74 ssh_dd_write_speed_test_tmp74 ssh_netstat_listen_ports_head74 ssh_cpu_model_name_enumeration74 ssh_ip_route_table_enumeration74 ssh_mount_top_entries_snapshot74 ssh_uname_kernel_release_query74

$ sikker related 52.238.26.243

🇺🇸·More threats fromUnited States→AS·More threats fromMicrosoft Corporation→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.214.45.193	99%	290
172.174.109.244	99%	48
20.169.105.48	88%	207
40.76.181.212	99%	46
40.67.161.178	83%	186

IP Address	Confidence	Events
45.131.194.105	85%	1,719
144.172.105.60	98%	35,378
97.74.90.88	96%	2,202
18.116.101.220	100%	31,968
38.54.104.5	97%	587