Attacked from AZURE?

FlashNoob98 1 Reputation point
2020-08-12T10:56:39.383+00:00

Hi, probably this is the wrong section, I apologize for that.
I recently received a message from my NAS located in my house (ITALY) saying that the IP address 40.87.2.69 tried to connect 10 times to SSH service, today 12/08/20 at 10:23(CEST) and it was blocked by the NAS itself.
I checked on GEO-IP and I found that it is probably a Microsoft Azure IP.
Is there any way to verify the activity from this IP on Azure? Probably someone is using Azure from illegal purpose, I just wanted to report that event.

Thanks you all for your attention, regards
Daniele

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Austin Morphies 6 Reputation points
    2020-08-12T22:21:17.453+00:00

    Good Evening @FlashNoob98

    Please utilize the following form to assist in submitting this potential azure platform abuse.

    https://portal.msrc.microsoft.com/en-us/engage/cars

    Thank you,
    Austin Morphies
    Azure Security Engineer (Non-Microsoft Affiliated)

    1 person found this answer helpful.