IP Address: 20.40.252.89


Threat level: 2%
Attack count: 22
Country: United States
Region: Iowa
City: Des Moines
ASN: 8075
ISP: MICROSOFT-CORP-MSN-AS-BLOCK
Net Block: 20.36.0.0-20.46.255.255
Domain name: microsoft.com
Abuse contact: [email protected]
Stats (UTC)

Discuss this ip address


Add comment...

Recent submissions


Reported by
Timestamp
Notes
Flags
System
✅ imcas
ipban 3.1.0 - 5152
BruteForce
RDP
✅ imcas
ipban 3.1.0 - 5152
BruteForce
RDP
[rede-188] 2026-11-10 04:00:03, Client: 20.40.252.89, Protocol: 6, Unauthorized activity to HTTP: GET /actuator/health
PortScan
HTTP
✅ imcas
ipban 3.1.0 - 5152
BruteForce
RDP
[probe-168-134] 2026-11-05 21:16:14, Client: 20.40.252.89, Protocol: 6, Unauthorized activity to HTTP: GET /
PortScan
HTTP
SSH honeypot port (no real service exposed)
BruteForce, PortScan
SSH
✅ imcas
ipban 3.1.0 - 5152
BruteForce
RDP
✅ imcas
ipban 3.1.0 - 5152
BruteForce
RDP
[probe-68-69] 2026-10-23 06:52:24, Client: 20.40.252.89, Protocol: 6, Unauthorized activity to HTTP: GET /autodiscover/autodiscover.json
PortScan
HTTP
✅ Anonymous
ipban 1.9.0 - 5152
BruteForce
RDP
ipban 2.0.0 - 5152
BruteForce
RDP
[probe-44-49] 2026-10-16 22:53:33, Client: 20.40.252.89, Protocol: 6, Unauthorized activity to HTTP: GET /
PortScan
HTTP
✅ imcas
ipban 3.1.0 - 5152
BruteForce
RDP
[rede-188] 2026-10-14 15:02:49, Client: 20.40.252.89, Protocol: 6, Unauthorized activity to HTTP: POST /mcp
PortScan
HTTP
✅ imcas
ipban 3.1.0 - 5152
BruteForce
RDP
▲ Contact IPThreat