JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.109.38.242

20.109.38.242 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.109.38.242

Whois 20.109.38.242

IP Abuse Reports for 20.109.38.242:

This IP address has been reported a total of 101 times from 70 distinct sources. 20.109.38.242 was first reported on July 21st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-14 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 sthoyer.de	2026-06-14 04:50:14 (2 weeks ago)	Jun 14 06:50:13 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 14 06:50:13 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=20.109.38.242 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=1238 DF PROTO=TCP SPT=21440 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Voluna	2026-06-14 04:48:30 (2 weeks ago)	2026-06-14T06:48:26.700796+02:00 MailServer sshd[1984976]: pam_unix(sshd:auth): authentication failu ... show more 2026-06-14T06:48:26.700796+02:00 MailServer sshd[1984976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.109.38.242 user=root 2026-06-14T06:48:28.829761+02:00 MailServer sshd[1984976]: Failed password for root from 20.109.38.242 port 21505 ssh2 ... show less	Brute-Force SSH
🇫🇷 edoram	2026-06-14 04:45:37 (2 weeks ago)	SSH brute-force from honeypot. 60 attempts in 24h, 1 unique usernames tried.	Brute-Force SSH
🇩🇪 RobertR11	2026-06-14 04:37:19 (2 weeks ago)	2026-06-14T06:37:16.148058+02:00 HAMA sshd-session[321148]: pam_unix(sshd:auth): authentication fail ... show more 2026-06-14T06:37:16.148058+02:00 HAMA sshd-session[321148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.109.38.242 user=root 2026-06-14T06:37:18.246300+02:00 HAMA sshd-session[321148]: Failed password for root from 20.109.38.242 port 21441 ssh2 ... show less	Brute-Force SSH
🇫🇷 Richie	2026-06-14 04:10:53 (2 weeks ago)	2026-06-14T06:10:50.109397+02:00 host2 sshd[889913]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-06-14T06:10:50.109397+02:00 host2 sshd[889913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.109.38.242 user=root 2026-06-14T06:10:52.198674+02:00 host2 sshd[889913]: Failed password for root from 20.109.38.242 port 21441 ssh2 ... show less	Brute-Force SSH
🇩🇪 moretrix	2026-06-14 03:44:27 (2 weeks ago)	2026-06-14T03:39:46.263520+02:00 ieyasu.moretrix.com sshd-session[761278]: User root from 20.109.38. ... show more 2026-06-14T03:39:46.263520+02:00 ieyasu.moretrix.com sshd-session[761278]: User root from 20.109.38.242 not allowed because none of user's groups are listed in AllowGroups 2026-06-14T05:44:26.003938+02:00 ieyasu.moretrix.com sshd-session[767899]: Connection from 20.109.38.242 port 21505 on 176.9.64.17 port 22 rdomain "" 2026-06-14T05:44:26.572617+02:00 ieyasu.moretrix.com sshd-session[767899]: User root from 20.109.38.242 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇩🇪 derLoosi	2026-06-14 03:39:33 (2 weeks ago)	HV1.2 Blocked by UFW	Port Scan
🇩🇪 invalidLuca	2026-06-14 03:27:35 (2 weeks ago)	[SSH2] Unauthorized connection attempt from 20.109.38.242	Brute-Force SSH
🇩🇪 sbajic	2026-06-14 03:23:04 (2 weeks ago)	2026-06-14T05:14:22.981974+02:00 gaia sshd[2546427]: Failed password for invalid user root from 20.1 ... show more 2026-06-14T05:14:22.981974+02:00 gaia sshd[2546427]: Failed password for invalid user root from 20.109.38.242 port 21505 ssh2 2026-06-14T05:23:02.599978+02:00 gaia sshd[2549442]: Connection from 20.109.38.242 port 21505 on 148.251.110.65 port 22 rdomain "" 2026-06-14T05:23:03.313064+02:00 gaia sshd[2549442]: User root from 20.109.38.242 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇦🇺 bret.dk	2026-06-14 03:07:29 (2 weeks ago)	Jun 14 03:07:27 au-mirror sshd[1170150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Jun 14 03:07:27 au-mirror sshd[1170150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.109.38.242 user=root Jun 14 03:07:28 au-mirror sshd[1170150]: Failed password for root from 20.109.38.242 port 21505 ssh2 ... show less	Brute-Force SSH
🇩🇪 sbajic	2026-06-14 02:43:09 (2 weeks ago)	Jun 14 04:43:06 eos sshd-session[2527592]: User root from 20.109.38.242 not allowed because none of ... show more Jun 14 04:43:06 eos sshd-session[2527592]: User root from 20.109.38.242 not allowed because none of user's groups are listed in AllowGroups Jun 14 04:43:09 eos sshd-session[2527592]: error: PAM: Authentication failure for illegal user root from 20.109.38.242 Jun 14 04:43:09 eos sshd-session[2527592]: Failed keyboard-interactive/pam for invalid user root from 20.109.38.242 port 21505 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-06-14 02:42:04 (2 weeks ago)	2026-06-14T02:20:06.427879+00:00 nbg01-02-secure sshd[11941]: Failed password for root from 20.109.3 ... show more 2026-06-14T02:20:06.427879+00:00 nbg01-02-secure sshd[11941]: Failed password for root from 20.109.38.242 port 21505 ssh2 2026-06-14T02:42:00.646846+00:00 nbg01-02-secure sshd[12033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.109.38.242 user=root 2026-06-14T02:42:03.017844+00:00 nbg01-02-secure sshd[12033]: Failed password for root from 20.109.38.242 port 21505 ssh2 ... show less	Brute-Force
🇫🇷 Richie	2026-06-14 02:40:12 (2 weeks ago)	2026-06-14T04:37:30.655659+02:00 host2 sshd[868254]: Failed password for root from 20.109.38.242 por ... show more 2026-06-14T04:37:30.655659+02:00 host2 sshd[868254]: Failed password for root from 20.109.38.242 port 21505 ssh2 2026-06-14T04:40:09.029543+02:00 host2 sshd[868990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.109.38.242 user=root 2026-06-14T04:40:11.160317+02:00 host2 sshd[868990]: Failed password for root from 20.109.38.242 port 21505 ssh2 2026-06-14T04:40:09.029543+02:00 host2 sshd[868990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.109.38.242 user=root 2026-06-14T04:40:11.160317+02:00 host2 sshd[868990]: Failed password for root from 20.109.38.242 port 21505 ssh2 ... show less	Brute-Force SSH
🇩🇪 NxtGenIT	2026-06-14 02:39:07 (2 weeks ago)	Cowrie Honeypot hit, Event Type: cowrie.login.failed, Username: root, Password: Contabo1	Brute-Force

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 163.7.14.156

🇮🇳 49.207.247.181

🇭🇰 47.238.127.5

🇩🇪 45.139.104.36

🇺🇸 44.15.108.207

🇲🇾 183.171.49.144

🇺🇸 172.182.239.221

🇨🇳 112.50.152.46

🇺🇸 66.132.172.196

🇱🇺 64.89.161.93

🇺🇸 44.181.189.210

🇺🇦 212.90.169.79

🇸🇬 191.101.221.28

🇨🇳 125.39.179.192

🇨🇳 116.114.8.12

🇮🇩 103.151.140.79

🇩🇪 87.106.239.83

🇫🇷 51.83.10.147

🇭🇰 47.83.124.31

🇳🇱 45.148.10.147