20.40.251.158

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
137 reports
75 reporters Β· latest 30 minutes ago
ISP Microsoft Corporation
Usage Type Data Center/Web Hosting/Transit
ASN AS8075
Domain Name microsoft.com
Country πŸ‡ΊπŸ‡Έ United States of America
City Des Moines, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.40.251.158

This IP address has been reported a total of 137 times from 75 distinct sources. 20.40.251.158 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 40 reports; Germany with 26 reports; France with 12 reports. The most common categories in these recent reports were: Port Scan 118 times; Hacking 24 times; Brute-Force 15 times; Web App Attack 9 times; SSH 5 times; Other 14 times.

Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡«πŸ‡· security.rdmc.fr
Port Scan Attack proto:TCP src:32820 dst:5432
Port Scan
πŸ‡ΈπŸ‡ͺ venix
Unauthorized connection attempt detected from IP address 20.40.251.158 to port 139 (compute01.malmo)
Brute-Force Exploited Host
πŸ‡©πŸ‡ͺ David Ferneding
Port Scan
πŸ‡ΉπŸ‡· muratkaya665
Hacking
πŸ‡·πŸ‡΄ Viperel
RouterOS: Repeated connections to sensitive (SSH/RDP/TELNET/DB/MGM) ports detected.
Port Scan Brute-Force
πŸ‡·πŸ‡Ί dnsbd.tech
nftables: Port scan (TCP:5006) [srv1]
Port Scan Hacking
πŸ‡ΊπŸ‡Έ xmission.com
Port Scan
πŸ‡ΊπŸ‡Έ xmission.com
Port Scan
πŸ‡ΊπŸ‡Έ RAP
2026-10-19 05:20:23 UTC Unauthorized activity to TCP port 9200.
Port Scan
πŸ‡ΊπŸ‡Έ xmission.com
Port Scan
πŸ‡¬πŸ‡§ knock
Knock-Knock honeypot brute-force: HTTP (1 total hits)
Web App Attack
πŸ‡ΊπŸ‡Έ xmission.com
Port Scan
πŸ‡©πŸ‡ͺ gurnip
Vulnerability probe of page /hudson, not found on the server.
Brute-Force Web App Attack
πŸ‡ΉπŸ‡­ MWA SOC
Port Scan
πŸ‡©πŸ‡ͺ iNetWorker
trying to access non-authorized port
Port Scan

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

πŸ‡¨πŸ‡³ 211.138.96.90
πŸ‡ΊπŸ‡¦ 193.176.251.229
πŸ‡¨πŸ‡¦ 172.69.130.88
πŸ‡΅πŸ‡° 119.156.28.157
πŸ‡ΏπŸ‡¦ 105.30.59.90
πŸ‡¨πŸ‡³ 101.126.64.76
πŸ‡ͺπŸ‡Έ 68.221.29.70
πŸ‡ΈπŸ‡¬ 47.128.96.183
πŸ‡¨πŸ‡³ 8.134.157.132
πŸ‡·πŸ‡Ί 185.244.21.90
πŸ‡ΊπŸ‡Έ 172.237.147.252
πŸ‡ΊπŸ‡Έ 172.110.223.188
πŸ‡¨πŸ‡¦ 172.69.130.89
πŸ‡¨πŸ‡¦ 167.99.182.39
πŸ‡©πŸ‡ͺ 159.89.1.61
πŸ‡³πŸ‡± 142.93.129.190
πŸ‡ΊπŸ‡¦ 91.196.97.156
πŸ‡ΉπŸ‡· 78.135.111.63
πŸ‡§πŸ‡· 205.210.31.209