64.236.141.177 — Microsoft Corporation, US — Very High (100%)

Check an IP Address, Domain Name, Subnet, or ASN

64.236.141.177 was found in our database!

Confidence Level

100%

Very High?

Geolocation

🇺🇸

United StatesChicago

ISPMicrosoft Corporation

ASNAS8075

Activity Timeline

First seenFeb 8, 2026, 01:50 AM

Last seen22d ago

795Sessions

32,510Events

Protocol Breakdown

SSH

795 / 32510

64.236.141.177 has a very high threat confidence level of 100%, originating from Chicago, United States, on the Microsoft Corporation network (8075). It has been observed across 795 sessions targeting SSH, First observed on February 8, 2026, most recently active February 8, 2026.

Primitives

Individual actions observed

Ssh Which Command Resolution92 Ssh Whoami User Identity46 Ssh Pwd Current Directory46 Ssh Rm Force Tmp File Deletion46 Ssh Ls Long All Directory Listing Absolute46 Ssh Hostname23 Ssh Uname All23 Ssh Client Version23 Ssh Uptime Default23 Ssh Ss Socket Count23 Ssh Id Identity Query23 Ssh Env Head Truncated23 Ssh Dd Write Speed Test Tmp23 Ssh Netstat Listen Ports Head23 Ssh Cpu Model Name Enumeration23 Ssh Ip Route Table Enumeration23 Ssh Mount Top Entries Snapshot23 Ssh Uname Kernel Release Query23 Ssh Passwd File First Line Read23 Ssh Ps Aux Top Process Snapshot23

Related Threats

Explore related threat intelligence

🇺🇸More threats fromUnited States ASMore threats fromMicrosoft Corporation SSHMore threats targetingSSH { }Browse allAttack Patterns

WHOIS Lookup

IP Address	Confidence	Events
20.163.16.165	72%	134
20.151.11.236	50%	10
20.65.194.47	72%	110
135.233.96.197	61%	102
20.168.121.252	67%	99

IP Address	Confidence	Events
24.237.119.118	54%	390
162.243.212.243	99%	1,276
137.184.226.163	99%	179
198.74.54.62	85%	277
208.3.195.65	100%	56,600