20.163.57.252

Classification: Whitelisted

20.163.57.252 is a whitelisted (trusted) IP address. Reported by 5 threat sources, last seen 2026-09-13. Network: AS8075 Microsoft Corporation.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2026-08-28 09:02:20 2026-09-13 09:02:19 malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2026-08-28 09:02:18 2026-09-13 09:02:17 malicious-activity
Unauthorized scanning of hosts Blocklist.net.ua 2026-09-09 16:01:03 2026-09-12 16:03:22 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-11 16:03:21 2026-09-11 16:03:21 attacker malicious-activity
Malicious Host CIArmy 2026-08-27 20:00:22 2026-09-07 20:00:23 attacker malicious-activity
Matched whitelist source: Microsoft_asn Maltiverse 2026-08-27 20:00:27 2026-08-27 20:00:27 benign
Malicious Host AbuseIPDB 2026-08-27 19:52:24 2026-08-27 19:52:24 attacker compromised malicious-activity
Bruteforce AbuseIPDB 2026-08-27 00:05:38 2026-08-27 19:52:24 attacker malicious-activity
Port Scanner AbuseIPDB 2026-08-26 15:26:10 2026-08-27 18:13:55 anomalous-activity attacker malicious-activity reconnaissance
Hacking AbuseIPDB 2026-08-26 22:00:11 2026-08-27 05:31:36 attacker malicious-activity
Phishing AbuseIPDB 2026-08-27 05:28:20 2026-08-27 05:28:20 malicious-activity phishing
HTTP Attacker AbuseIPDB 2026-08-27 05:28:20 2026-08-27 05:28:20 attacker malicious-activity

Tags

abuse

Whois information

AS name
AS8075 Microsoft Corporation
Registrant
Microsoft Corporation
City
Phoenix
State
AZ
Postal code
85004
Country
US — United States 🇺🇸
First indexed
2026-08-27 20:00:22
Last updated
2026-09-13 09:02:45