JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.38.34.199

20.38.34.199 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Hostname(s)	azpdws7nwbs3.stretchoid.com
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.38.34.199

Whois 20.38.34.199

IP Abuse Reports for 20.38.34.199:

This IP address has been reported a total of 110 times from 54 distinct sources. 20.38.34.199 was first reported on August 26th 2026, and the most recent report was 18 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-31 18:53:56 (18 minutes ago)	Blocked by UFW (TCP on 162) Source port: 45862 TTL: 53 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 162) Source port: 45862 TTL: 53 Packet length: 52 TOS: 0x00 This report (for 20.38.34.199) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-08-31 18:06:40 (1 hour ago)	tcp ports: 5269,139 (3 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-08-31 16:57:58 (2 hours ago)	Blocked by UFW (TCP on 443) Source port: 58876 TTL: 53 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 58876 TTL: 53 Packet length: 52 TOS: 0x00 This report (for 20.38.34.199) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 MPL	2026-08-31 15:38:01 (3 hours ago)	tcp/502 (2 or more attempts)	Port Scan
🇨🇦 polycoda	2026-08-31 15:35:31 (3 hours ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇩🇪 ValtonTahiri	2026-08-31 15:03:33 (4 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=20.38.34.199; proto=TCP; source_port=33369; target_port=21; flags=SYN show less	Port Scan
🇺🇸 xmission.com	2026-08-31 13:52:05 (5 hours ago)	Blocked by UFW (TCP on 2323) Source port: 59893 TTL: 52 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2323) Source port: 59893 TTL: 52 Packet length: 52 TOS: 0x00 This report (for 20.38.34.199) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-08-31 11:48:42 (7 hours ago)	[rede-44-49] 08/31/2026-08:48:42.290006, 20.38.34.199, Protocol: 6, ET CINS Active Threat Intelligen ... show more [rede-44-49] 08/31/2026-08:48:42.290006, 20.38.34.199, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 29 show less	Hacking
🇺🇸 MPL	2026-08-31 11:43:31 (7 hours ago)	tcp/445 (2 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-08-31 11:25:42 (7 hours ago)	Blocked by UFW (TCP on 5938) Source port: 58610 TTL: 52 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 5938) Source port: 58610 TTL: 52 Packet length: 52 TOS: 0x00 This report (for 20.38.34.199) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 gamabe	2026-08-31 09:31:28 (9 hours ago)	Detected crowdsecurity/CVE-2022-41082 attack pattern. Reported by CrowdSec IDS.	Web App Attack
🇺🇸 sandra361	2026-08-31 09:11:49 (10 hours ago)	Port scan detected: 11 attempts across 1 port (9000). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=20.38 ... show more Port scan detected: 11 attempts across 1 port (9000). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=20.38.34.199 LEN=40 TOS=0x00 PREC=0x00 TTL=43 ID=39308 DF PROTO=TCP SPT=55486 DPT=9000 WINDOW=64240 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇳🇵 radheykrishna.com.np	2026-08-31 08:23:00 (10 hours ago)	Aug 31 14:07:59 kernel: [1880746.870925] [UFW BLOCK] IN=ens160 OUT= SRC=20.38.34.199 LEN=52 TOS=0x00 ... show more Aug 31 14:07:59 kernel: [1880746.870925] [UFW BLOCK] IN=ens160 OUT= SRC=20.38.34.199 LEN=52 TOS=0x00 PREC=0x00 TTL=45 ID=1841 PROTO=TCP SPT=53053 DPT=2082 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 6kilowatti	2026-08-31 07:25:38 (11 hours ago)	2026-08-31T10:25:38.020436+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-08-31T10:25:38.020436+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=20.38.34.199 DST=83.148.240.21 LEN=52 TOS=0x00 PREC=0x00 TTL=42 ID=25681 PROTO=TCP SPT=47616 DPT=15672 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 azminawwar	2026-08-31 06:41:10 (12 hours ago)	[20.38.34.199] triggered by honeypot on port [80], Timestamp [2026-08-31T06:41:10Z]METHOD=GET PATH=/ ... show more [20.38.34.199] triggered by honeypot on port [80], Timestamp [2026-08-31T06:41:10Z]METHOD=GET PATH=/portal/redlion HTTP=HTTP/1.1 UA="Mozilla/5.0 zgrab/0.x" HOST="38.45.65.187" REF="-" show less	Port Scan Hacking

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 163.7.15.221

🇹🇲 95.85.114.218

🇧🇪 34.22.195.203

🇺🇸 20.118.242.217

🇩🇪 2.16.1.133

🇷🇺 213.167.43.130

🇧🇪 207.175.28.61

🇺🇸 161.153.12.160

🇪🇬 156.217.85.179

🇺🇸 138.207.195.68

🇲🇦 102.54.246.130

🇩🇪 80.128.189.181

🇺🇸 64.188.22.160

🇳🇱 45.148.10.157

🇨🇳 221.195.114.14

🇨🇳 218.13.157.209

🇰🇷 183.104.43.72

🇺🇸 147.182.141.151

🇺🇸 136.33.184.3

🇺🇸 40.80.203.60