Malicious IP lookup
Cross-check owned honeypot observations and public threat sources. No match only means not observed within current coverage; it never means safe.
20.118.250.50
No match in current coverageIPv4Microsoft CorporationAS8075
Current threat sources and owned sensors did not match. This is not a permanent safety verdict.- PTR
- Not provided
- ASN
- AS8075
- Network prefix
- 20.64.0.0/10
- IP network location
- United States
Public threat matches0Exact IP / prefix matches
24-hour events0Owned honeypot observations
90-day events0Behavior window
Fresh sources3/3Public threat coverage
Owned behavior score—No behavior sample; not scored as zero
No threat classification can currently be confirmed
Threat-list match evidence
Only exact IP or covering-prefix matches are shown. Cloud, VPN, proxy and hosting attributes are not malicious evidence here.
No current public threat-source matchThis only means the synchronized sources below returned no match; it does not mean the IP is permanently safe.
CHA.LA honeypot event aggregate
The public page shows only redacted event type, protocol, destination port, count and time. Usernames, payloads and sensor credentials are never exposed.
Owned sensors have not observed this IPThe IP may simply never have contacted the current sensors; absence cannot be interpreted as benign behavior.
Public threat sources used for this lookup
Expired or failed sources do not participate in a no-match conclusion.
| Source | Sync state | Records | Lookup match | Latest evidence time | Valid until |
|---|---|---|---|---|---|
| Blocklist.de attacker list | Fresh | 24,889 | No match | 10/15/2026, 06:54:40 | 10/15/2026, 07:54:40 |
| abuse.ch Feodo Tracker | Fresh | 5 | No match | 10/15/2026, 01:20:35 | 10/15/2026, 07:20:35 |
| Spamhaus DROP | Fresh | 1,681 | No match | 10/14/2026, 11:57:07 | 10/15/2026, 11:57:07 |