AbuseIPDB » 20.194.13.218
20.194.13.218
This IP was reported 4 times. Confidence of
Abuse
is 25% : ?
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇰🇷
Korea (the Republic of)
City
Seoul, Seoul
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 20.194.13.218 :
This IP address has been reported a total of
4
times from
4 distinct
sources.
20.194.13.218 was first reported on
June 22nd 2026 , and the most recent report was
6 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
LRNP
2026-06-24 20:21:09
(6 days ago)
2026-06-24T20:21:04.863770+00:00 helium sshd-session[474544]: Connection closed by authenticating us ...
show more
2026-06-24T20:21:04.863770+00:00 helium sshd-session[474544]: Connection closed by authenticating user root 20.194.13.218 port 34774 [preauth]
2026-06-24T20:21:06.242532+00:00 helium sshd-session[474547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.194.13.218 user=root
2026-06-24T20:21:08.459812+00:00 helium sshd-session[474547]: Failed password for root from 20.194.13.218 port 42204 ssh2
...
show less
Brute-Force
SSH
🇺🇸
Hydrated8853
2026-06-24 08:10:50
(6 days ago)
2026-06-24T16:10:40.429496+08:00 mg-us sshd[2417547]: Failed password for root from 20.194.13.218 po ...
show more
2026-06-24T16:10:40.429496+08:00 mg-us sshd[2417547]: Failed password for root from 20.194.13.218 port 45844 ssh2
2026-06-24T16:10:42.805423+08:00 mg-us sshd[2417549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.194.13.218 user=root
2026-06-24T16:10:44.482321+08:00 mg-us sshd[2417549]: Failed password for root from 20.194.13.218 port 45852 ssh2
2026-06-24T16:10:47.394349+08:00 mg-us sshd[2417551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.194.13.218 user=root
2026-06-24T16:10:49.427157+08:00 mg-us sshd[2417551]: Failed password for root from 20.194.13.218 port 47038 ssh2
...
show less
Brute-Force
SSH
🇺🇸
bigscoots.com
2026-06-24 07:59:19
(6 days ago)
20.194.13.218 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs ...
show more
20.194.13.218 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 24 02:24:00 15379 sshd[26893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.45.20 user=root
Jun 24 02:24:02 15379 sshd[26893]: Failed password for root from 14.103.45.20 port 37884 ssh2
Jun 24 02:58:58 15379 sshd[16271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.194.13.218 user=root
Jun 24 02:59:00 15379 sshd[16271]: Failed password for root from 20.194.13.218 port 42148 ssh2
Jun 24 02:59:01 15379 sshd[16277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.194.13.218 user=root
IP Addresses Blocked:
14.103.45.20 (CN/China/-)
show less
Brute-Force
SSH
🇩🇪
guldkage
2026-06-22 03:53:06
(1 week ago)
Unauthorized connection attempt detected from IP address 20.194.13.218 to port 22 (ger-02) [SSH]
Exploited Host
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: