20.79.40.52

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
81 reports
33 reporters · latest 5 months ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

20.79.40.52 has been reported 81 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
81 from 33 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 bescared
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -151302cd-
Port Scan
🇺🇸 MPL
tcp/23
Port Scan
🇺🇸 RAP
2026-06-03 13:18:10 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇵🇱 sefinek.net
Honeypot hit: Brute-force attack detected on 23/TELNET • Credentials: pi:raspberry, ftp:ftp • Number of login attempts: 2 • 2 command(s) were executed during the session Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Brute-Force Hacking
Anonymous
Port Scan Brute-Force
🇺🇸 RAP
2026-06-03 12:13:12 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:55660 dst:23
Port Scan
Anonymous
Unauthorized connection attempt on Port 23
Port Scan Hacking Exploited Host
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 51677 TTL: 232 Packet length: 40 TOS: 0x00 This report (for 20.79.40.52) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇺🇸 MPL
tcp/23
Port Scan
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇫🇷 sthoyer.de
May 28 15:24:06 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=20.79.40.52 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=50789 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ...
Port Scan
🇺🇸 RAP
2026-05-28 13:08:14 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=36092 dstport=23
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 187.13.13.191
🇳🇱 172.71.99.209
🇺🇸 165.154.163.10
🇺🇸 34.133.235.204
🇺🇸 24.234.225.125
🇹🇼 198.235.24.79
🇫🇷 193.163.92.212
🇺🇦 176.108.120.44
🇮🇩 103.59.161.168
🇧🇬 79.124.62.134
🇵🇭 61.28.158.34
🇮🇹 46.234.224.75
🇧🇭 37.131.109.146
🇧🇪 35.210.157.247
🇧🇪 35.210.63.160
🇺🇸 20.150.212.117
🇺🇸 3.227.192.235
🇺🇿 213.230.87.93
🇮🇳 203.192.207.38
🇫🇷 185.250.237.11
feedback