20.40.218.159
20.40.218.159 is a threat-intelligence indicator (IPv4 address) classified as Suspicious, corroborated across 5 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.
Indicator facts
- Type
- IPv4 address
- Indicator
20.40.218.159- Classification
- Suspicious
- Confidence
- 90 / 100
- Corroboration
- 5 independent sources
- First seen
- Last seen
- Network (ASN)
- AS8075 — MICROSOFT-CORP-MSN-AS-BLOCK
- Country
- US
Tags
- sipquery
- dnsversion
- attacker
- smtpgreet
- dnsrd
- scanner
Related CVEs (60)
- CVE-2026-93546
- CVE-2026-79768
- CVE-2026-73637
- CVE-2026-73636
- CVE-2026-63718
- CVE-2026-63686
- CVE-2026-63292
- CVE-2026-63045
- CVE-2026-59797
- CVE-2026-59685
- CVE-2026-58415
- CVE-2026-57941
- CVE-2026-56449
- CVE-2026-56154
- CVE-2026-56153
- CVE-2026-49975
- CVE-2026-48913
- CVE-2026-48005
- CVE-2026-47360
- CVE-2026-46729
- CVE-2026-44631
- CVE-2026-44186
- CVE-2026-44185
- CVE-2026-44119
- CVE-2026-43951
- CVE-2026-42536
- CVE-2026-42535
- CVE-2026-42528
- CVE-2026-42356
- CVE-2026-34356
- CVE-2026-34355
- CVE-2026-34059
- CVE-2026-34032
- CVE-2026-33857
- CVE-2026-33523
- CVE-2026-33007
- CVE-2026-33006
- CVE-2026-29170
- CVE-2026-29169
- CVE-2026-29168
- CVE-2026-29167
- CVE-2026-28780
- CVE-2026-24072
- CVE-2025-66200
- CVE-2025-65082
- CVE-2025-59775
- CVE-2025-58098
- CVE-2025-55753
- CVE-2013-4365
- CVE-2013-2765
← Threat intelligence command center · Explore the indicator corpus