JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.174.10.94

20.174.10.94 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 96%: ?

96%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇪 United Arab Emirates
City	Dubai, Dubai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.174.10.94

Whois 20.174.10.94

IP Abuse Reports for 20.174.10.94:

This IP address has been reported a total of 24 times from 17 distinct sources. 20.174.10.94 was first reported on July 22nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-07-28 14:11:29 (1 hour ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/4145 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/4145 (socks). Tried credentials: b'brian':None Family fingerprint: proxy-scanner Commands captured: $ socks4 CONNECT -> 172.67.74.152:443 $ user_id: 'brian' show less	DDoS Attack
Anonymous	2026-07-27 18:01:33 (21 hours ago)	SSH brute force attempt. User: ubuntu, Pass: [REDACTED]	Brute-Force SSH
🇫🇷 tecnicorioja	2026-07-27 18:00:32 (21 hours ago)	Failed password for invalid user Jul 27 17:47:24 port 43092	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 17:52:57 (21 hours ago)	20.174.10.94 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [ubuntu] in the last ... show more 20.174.10.94 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 12:52:53 14107 sshd[14503]: Invalid user ubuntu from 20.174.10.94 port 57532 Jul 27 12:47:57 14107 sshd[11974]: Invalid user ubuntu from 82.65.32.163 port 49685 Jul 27 12:48:00 14107 sshd[11974]: Failed password for invalid user ubuntu from 82.65.32.163 port 49685 ssh2 Jul 27 12:43:06 14107 sshd[9736]: Invalid user ubuntu from 219.109.219.42 port 64298 Jul 27 12:43:07 14107 sshd[9736]: Failed password for invalid user ubuntu from 219.109.219.42 port 64298 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇮🇳 Parth Maniar	2026-07-27 17:22:23 (22 hours ago)	This IP address carried out 120 port scanning attempts on 26-07-2026. For more information or to rep ... show more This IP address carried out 120 port scanning attempts on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇺🇸 bigscoots.com	2026-07-27 16:02:57 (23 hours ago)	20.174.10.94 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [ubuntu] in the last ... show more 20.174.10.94 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 10:57:35 15634 sshd[20838]: Invalid user ubuntu from 40.113.175.214 port 45498 Jul 27 10:57:37 15634 sshd[20838]: Failed password for invalid user ubuntu from 40.113.175.214 port 45498 ssh2 Jul 27 10:47:53 15634 sshd[15901]: Invalid user ubuntu from 20.174.10.94 port 58528 Jul 27 11:02:43 15634 sshd[23413]: Invalid user ubuntu from 148.66.14.250 port 50939 Jul 27 10:47:55 15634 sshd[15901]: Failed password for invalid user ubuntu from 20.174.10.94 port 58528 ssh2 IP Addresses Blocked: 40.113.175.214 (NL/The Netherlands/-) show less	Brute-Force SSH
🇩🇪 xdpdrop	2026-07-27 14:33:18 (1 day ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-07-27T14:33:18Z	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 14:19:15 (1 day ago)	20.174.10.94 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [root] in the last 3 ... show more 20.174.10.94 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 09:19:09 15583 sshd[24231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.174.10.94 user=root Jul 27 09:14:03 15583 sshd[21714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.52.32.91 user=root Jul 27 09:14:05 15583 sshd[21714]: Failed password for root from 217.52.32.91 port 3176 ssh2 Jul 27 09:04:42 15583 sshd[16875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.208.10 user=root Jul 27 09:04:44 15583 sshd[16875]: Failed password for root from 103.97.208.10 port 56726 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇮🇳 Parth Maniar	2026-07-27 13:13:18 (1 day ago)	This IP address carried out 30 SSH credential attack (attempts) on 26-07-2026. For more information ... show more This IP address carried out 30 SSH credential attack (attempts) on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 11:48:15 (1 day ago)	20.174.10.94 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [root] in the last 3 ... show more 20.174.10.94 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 06:43:40 15616 sshd[30424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.164.134.46 user=root Jul 27 06:43:42 15616 sshd[30424]: Failed password for root from 202.164.134.46 port 60841 ssh2 Jul 27 06:39:10 15616 sshd[28020]: Failed password for root from 154.201.70.154 port 50118 ssh2 Jul 27 06:48:04 15616 sshd[660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.174.10.94 user=root Jul 27 06:39:08 15616 sshd[28020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.201.70.154 user=root IP Addresses Blocked: 202.164.134.46 (IN/India/46.134.164.202.asianet.co.in) 154.201.70.154 (HK/Hong Kong/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 11:14:20 (1 day ago)	20.174.10.94 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [root] in the last 3 ... show more 20.174.10.94 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 06:05:18 14423 sshd[10865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.253.142.149 user=root Jul 27 06:05:20 14423 sshd[10865]: Failed password for root from 117.253.142.149 port 56013 ssh2 Jul 27 06:14:02 14423 sshd[15950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.143.207.31 user=root Jul 27 06:09:40 14423 sshd[13229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.174.10.94 user=root Jul 27 06:09:42 14423 sshd[13229]: Failed password for root from 20.174.10.94 port 59602 ssh2 IP Addresses Blocked: 117.253.142.149 (IN/India/-) 103.143.207.31 (VN/Vietnam/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 09:56:32 (1 day ago)	20.174.10.94 (AE/United Arab Emirates/-), 6 distributed sshd attacks on account [root] in the last 3 ... show more 20.174.10.94 (AE/United Arab Emirates/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 04:56:26 15736 sshd[25719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.174.10.94 user=root Jul 27 04:32:09 15736 sshd[9946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.212.80.48 user=root Jul 27 04:32:11 15736 sshd[9946]: Failed password for root from 172.212.80.48 port 63594 ssh2 Jul 27 04:38:17 15736 sshd[13945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.212.80.48 user=root Jul 27 04:38:19 15736 sshd[13945]: Failed password for root from 172.212.80.48 port 16762 ssh2 Jul 27 04:44:24 15736 sshd[17872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.212.80.48 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇬🇧 gbzret4d	2026-07-26 20:26:10 (1 day ago)	Honeypot [uk-production01]: SSH handshake/banner (532 bytes of payload); 2200 [1] TCP	SSH
🇩🇪 NetWatch	2026-07-26 15:04:22 (2 days ago)	The IP 20.174.10.94 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇰🇷 tjx	2026-07-26 14:30:16 (2 days ago)	Honeypot brute-force via Cowrie SSH/Telnet honeypot. Username: azureuser \| Password: Pa5sw0rd2026 Se ... show more Honeypot brute-force via Cowrie SSH/Telnet honeypot. Username: azureuser \| Password: Pa5sw0rd2026 Session: bff8a735 show less	Brute-Force SSH

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 158.158.32.229

🇺🇸 152.232.15.188

🇫🇮 147.185.133.196

🇺🇸 147.185.132.223

🇵🇱 176.53.159.198

🇺🇸 135.119.74.228

🇭🇰 118.99.3.3

🇫🇷 85.217.140.50

🇩🇪 69.5.169.101

🇬🇧 35.203.210.192

🇬🇧 35.203.210.18

🇺🇸 34.48.182.165

🇺🇸 20.29.56.247

🇺🇸 2607:f8b0:4023:1002::12d

🇺🇸 135.119.96.68

🇭🇰 103.149.92.36

🇺🇿 94.232.25.229

🇺🇸 47.77.229.101

🇬🇧 35.203.211.27

🇺🇸 20.9.63.139