JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 40.124.85.13

40.124.85.13 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Antonio, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 40.124.85.13

Whois 40.124.85.13

IP Abuse Reports for 40.124.85.13:

This IP address has been reported a total of 128 times from 63 distinct sources. 40.124.85.13 was first reported on September 14th 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-09-20 13:29:33 (12 minutes ago)	Blocked by UFW (TCP on 443) Source port: 50284 TTL: 52 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 50284 TTL: 52 Packet length: 52 TOS: 0x00 This report (for 40.124.85.13) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 Hans Wurst	2026-09-20 12:58:43 (43 minutes ago)	1789909122 - 09/20/2026 14:58:42 Host: 40.124.85.13/40.124.85.13 Port: 2000 TCP Blocked	Port Scan
🇺🇸 xmission.com	2026-09-20 10:50:05 (2 hours ago)	Blocked by UFW (TCP on 9200) Source port: 58748 TTL: 52 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 9200) Source port: 58748 TTL: 52 Packet length: 52 TOS: 0x00 This report (for 40.124.85.13) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-20 09:57:25 (3 hours ago)	[Sun Sep 20 11:57:24.867342 2026] [:error] [pid 3321451:tid 3321451] [client 40.124.85.13:37094] Mod ... show more [Sun Sep 20 11:57:24.867342 2026] [:error] [pid 3321451:tid 3321451] [client 40.124.85.13:37094] ModSecurity: Warning. Matched "Operator `PmFromFile' with parameter `scanners-user-agents.data' against variable `REQUEST_HEADERS:User-Agent' (Value: `Mozilla/5.0 zgrab/0.x' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "38"] [id "913100"] [rev ""] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 zgrab/0.x"] [severity "2"] [ver "OWASP_CRS/4.30.0-dev"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [uri "/developmentserver/metadatauploader"] [unique_id "178989824464.651165"] [ref "o12,5v82,21"] ... show less	Web App Attack
🇺🇸 chronos	2026-09-20 09:57:14 (3 hours ago)	[AUTORAVALT][[20/09/2026 - 06:57:14 -03:00 UTC] Attack from [Microsoft Corporation] [40.124.85.13] A ... show more [AUTORAVALT][[20/09/2026 - 06:57:14 -03:00 UTC] Attack from [Microsoft Corporation] [40.124.85.13] Action: BLocKed Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing. ] ... show less	Bad Web Bot
🇺🇸 xmission.com	2026-09-20 09:40:08 (4 hours ago)	Blocked by UFW (TCP on 2375) Source port: 52330 TTL: 52 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2375) Source port: 52330 TTL: 52 Packet length: 52 TOS: 0x00 This report (for 40.124.85.13) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 iNetWorker	2026-09-20 09:20:38 (4 hours ago)	firewall-block, port(s): 5986/tcp	Port Scan
🇭🇰 CyberFox	2026-09-20 07:24:20 (6 hours ago)	9300/tcp (1 or more attempts)	Port Scan
🇺🇸 MPL	2026-09-20 06:16:19 (7 hours ago)	tcp/1830	Port Scan
🇷🇴 Viperel	2026-09-20 05:00:58 (8 hours ago)	RouterOS: Repeated connections to sensitive (SSH/RDP/TELNET/DB/MGM) ports detected.	Port Scan Brute-Force
🇩🇪 David Ferneding	2026-09-20 04:36:22 (9 hours ago)	Blocked by UFW (TCP on 5800) Source port: 56792 TTL: 51 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 5800) Source port: 56792 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 40.124.85.13) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-09-20 04:35:25 (9 hours ago)	2026-09-20T07:35:25.207604+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-20T07:35:25.207604+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:08:00 SRC=40.124.85.13 DST=5.61.88.83 LEN=52 TOS=0x00 PREC=0x00 TTL=44 ID=1486 PROTO=TCP SPT=59800 DPT=5800 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇷 noconex	2026-09-20 04:33:42 (9 hours ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Suspicious inbound to PostgreSQL port 5432) ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Suspicious inbound to PostgreSQL port 5432) detectado de 40.124.85.13 show less	Port Scan Brute-Force SSH
Anonymous	2026-09-20 04:17:04 (9 hours ago)	Reported by RattusGuard: Honeypot: mssql emulator (port 1434/tcp)	Port Scan Hacking
🇩🇪 iNetWorker	2026-09-20 03:42:53 (9 hours ago)	trying to access non-authorized port	Port Scan

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.222

🇷🇺 185.46.197.79

🇮🇹 172.70.216.172

🇧🇬 109.160.32.44

🇮🇹 95.231.169.38

🇫🇮 35.228.222.172

🇬🇧 35.203.210.182

🇷🇺 5.137.21.22

🇮🇹 172.69.68.174

🇩🇪 167.94.146.52

🇺🇸 162.216.149.158

🇫🇮 147.185.133.122

🇮🇪 80.233.12.109

🇰🇷 61.72.55.130

🇩🇪 34.32.68.153

🇷🇺 31.13.19.104

🇰🇷 220.118.173.234

🇨🇴 200.31.12.187

🇮🇹 172.70.216.112

🇮🇹 172.70.216.88