JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.49.104.38

20.49.104.38 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 5%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.49.104.38

Whois 20.49.104.38

IP Abuse Reports for 20.49.104.38:

This IP address has been reported a total of 65 times from 34 distinct sources. 20.49.104.38 was first reported on December 24th 2024, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-20 22:10:43 (15 hours ago)	Blocked by UFW (TCP on 40378) Source port: 80 TTL: 111 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 40378) Source port: 80 TTL: 111 Packet length: 40 TOS: 0x00 This report (for 20.49.104.38) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 psauxit	2024-12-30 00:13:42 (1 year ago)	Fail2Ban - UFW port probing on unauthorized port	Port Scan
🇨🇦 polycoda	2024-12-24 12:03:26 (1 year ago)	📡 Port scan	Hacking Web App Attack
🇭🇺 DumaNet	2024-12-24 08:29:00 (1 year ago)	Blocked for port scanning. Time: Tue Dec 24. 06:18:52 2024 +0100 IP: 20.49.104.38 (US/United State ... show more Blocked for port scanning. Time: Tue Dec 24. 06:18:52 2024 +0100 IP: 20.49.104.38 (US/United States/-) Sample of block hits: Dec 24 06:16:19 sirius kernel: [191048647.148126] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=20.49.104.38 DST=[removed] LEN=80 TOS=0x08 PREC=0x20 TTL=126 ID=45877 PROTO=TCP SPT=46901 DPT=52668 WINDOW=64240 RES=0x00 SYN URGP=0 Dec 24 06:16:19 sirius kernel: [191048647.148164] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=20.49.104.38 DST=[removed] LEN=80 TOS=0x08 PREC=0x20 TTL=126 ID=45877 PROTO=TCP SPT=46901 DPT=52668 WINDOW=64240 RES=0x00 SYN URGP=0 Dec 24 06:16:19 sirius kernel: [191048647.148196] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=20.49.104.38 DST=[removed] LEN=80 TOS=0x08 PREC=0x20 TTL=126 ID=45877 PROTO=TCP SPT=46901 DPT=52668 WINDOW=64240 RES=0x00 SYN URGP=0 Dec 24 06:16:29 sirius kernel: [191048656.968772] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=20.49.104.38 DST=[removed] LEN=80 TOS=0x00 PREC=0x00 TTL=121 ID=34771 PROTO=TCP SPT=33747 DPT show less	Port Scan
🇭🇺 DumaNet	2024-12-24 08:13:00 (1 year ago)	Blocked for port scanning. Time: Tue Dec 24. 04:44:59 2024 +0100 IP: 20.49.104.38 (US/United State ... show more Blocked for port scanning. Time: Tue Dec 24. 04:44:59 2024 +0100 IP: 20.49.104.38 (US/United States/-) Sample of block hits: Dec 24 04:40:26 sirius kernel: [191042896.322549] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=20.49.104.38 DST=[removed] LEN=80 TOS=0x08 PREC=0x20 TTL=122 ID=26052 PROTO=TCP SPT=25028 DPT=6989 WINDOW=64240 RES=0x00 SYN URGP=0 Dec 24 04:40:26 sirius kernel: [191042896.322586] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=20.49.104.38 DST=[removed] LEN=80 TOS=0x08 PREC=0x20 TTL=122 ID=26052 PROTO=TCP SPT=25028 DPT=6989 WINDOW=64240 RES=0x00 SYN URGP=0 Dec 24 04:40:26 sirius kernel: [191042896.322618] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=20.49.104.38 DST=[removed] LEN=80 TOS=0x08 PREC=0x20 TTL=122 ID=26052 PROTO=TCP SPT=25028 DPT=6989 WINDOW=64240 RES=0x00 SYN URGP=0 Dec 24 04:42:35 sirius kernel: [191043026.080889] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=20.49.104.38 DST=[removed] LEN=80 TOS=0x00 PREC=0x00 TTL=121 ID=6511 PROTO=TCP SPT=7535 DPT=26598 show less	Port Scan
🇳🇱 Study Bitcoin 🤗	2024-12-24 06:22:21 (1 year ago)	3 port probes: 3x tcp/2628 (dict) [srv62]	Port Scan
🇨🇿 Countryman	2024-12-24 06:17:51 (1 year ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
Anonymous	2024-12-24 06:15:00 (1 year ago)	12/24/2024-07:15:00.252126 20.49.104.38 Protocol: 6 SURICATA TCP option invalid length	Hacking
🇺🇸 sumnone	2024-12-24 06:12:56 (1 year ago)	Port probing on unauthorized port 48978	Port Scan Hacking Exploited Host
🇳🇱 Study Bitcoin 🤗	2024-12-24 06:06:02 (1 year ago)	123 port probes: 3x tcp/4137, 3x tcp/19002, 3x tcp/22020, 3x tcp/25216, 3x tcp/12324, 3x tcp/24249, ... show more 123 port probes: 3x tcp/4137, 3x tcp/19002, 3x tcp/22020, 3x tcp/25216, 3x tcp/12324, 3x tcp/24249, 3x tcp/113 (authentication service), 3x tcp/11782, 3x tcp/29418, 6x tcp/15520, 3x tcp/47301, 6x tcp/13547, 3x tcp/46837, 3x tcp/16023, 3x tcp/20008, 3x tcp/34912, 3x tcp/32861, 6x tcp/20728, 6x tcp/15559, 3x tcp/45792, 3x tcp/45575, 3x tcp/8803, 3x tcp/7333, 3x tcp/36421, 3x tcp/37891, 3x tcp/8842, 3x tcp/36382, 3x tcp/30927, 3x tcp/5863, 3x tcp/42132, 3x tcp/48771, 3x tcp/41126, 6x tcp/37388, 3x tcp/34873, 3x tcp/7836, 3x tcp/28412 [srv62] show less	DDoS Attack Port Scan
🇧🇷 diego	2024-12-24 06:01:22 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 7 times in the last 10800 seconds	DDoS Attack
Anonymous	2024-12-24 05:55:19 (1 year ago)	12/24/2024-06:55:19.259464 20.49.104.38 Protocol: 6 SURICATA TCP option invalid length	Hacking
🇫🇮 Ticlem	2024-12-24 05:53:59 (1 year ago)	2024-12-24T06:53:58.208611+01:00 clement-turlure kernel: [15421884.511542] [UFW BLOCK] IN=enp0s31f6 ... show more 2024-12-24T06:53:58.208611+01:00 clement-turlure kernel: [15421884.511542] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=20.49.104.38 DST=95.216.21.136 LEN=80 TOS=0x00 PREC=0x00 TTL=127 ID=24098 PROTO=TCP SPT=23074 DPT=8363 WINDOW=64240 RES=0x00 SYN URGP=0 2024-12-24T06:53:58.208620+01:00 clement-turlure kernel: [15421884.511709] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=20.49.104.38 DST=95.216.21.136 LEN=80 TOS=0x00 PREC=0x00 TTL=127 ID=24098 PROTO=TCP SPT=23074 DPT=8363 WINDOW=64240 RES=0x00 SYN URGP=0 2024-12-24T06:53:58.208622+01:00 clement-turlure kernel: [15421884.511863] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=20.49.104.38 DST=95.216.21.136 LEN=80 TOS=0x00 PREC=0x00 TTL=127 ID=24098 PROTO=TCP SPT=23074 DPT=8363 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 Study Bitcoin 🤗	2024-12-24 05:52:10 (1 year ago)	130 port probes: 3x tcp/48307, 3x tcp/40623, 6x tcp/10351, 3x tcp/38108, 3x tcp/14553, 3x tcp/34409, ... show more 130 port probes: 3x tcp/48307, 3x tcp/40623, 6x tcp/10351, 3x tcp/38108, 3x tcp/14553, 3x tcp/34409, 3x tcp/11318, 3x tcp/27692, 3x tcp/13044, 3x tcp/5360, 3x tcp/8803, 3x tcp/36885, 3x tcp/8842, 3x tcp/46334, 3x tcp/19505, 3x tcp/44569, 3x tcp/47262 (delta source (windows trojan)), 3x tcp/39114, 3x tcp/20008, 3x tcp/21014, 3x tcp/25177, 3x tcp/27228, 3x tcp/44786, 3x tcp/9306, 3x tcp/7333, 3x tcp/11279, 3x tcp/36382, 3x tcp/29704, 3x tcp/2086, 3x tcp/21695, 3x tcp/22198, 3x tcp/1119, 3x tcp/12541, 3x tcp/3595, 3x tcp/12324, 3x tcp/12827, 3x tcp/39153, 3x tcp/32900, tcp/47983, 6x tcp/46798, 3x tcp/7836, 3x tcp/24713 [srv124,srv62] show less	DDoS Attack Port Scan
🇩🇪 gnb	2024-12-24 05:48:09 (1 year ago)	2024-12-24T06:36:39.154587+01:00 atlas kernel: [857262.981420] [UFW BLOCK] IN=eth0 OUT= MAC=(redacte ... show more 2024-12-24T06:36:39.154587+01:00 atlas kernel: [857262.981420] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=20.49.104.38 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=126 ID=5248 PROTO=TCP SPT=4224 DPT=27145 WINDOW=64240 RES=0x00 SYN URGP=0 2024-12-24T06:39:26.066546+01:00 atlas kernel: [857429.894493] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=20.49.104.38 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=124 ID=1578 PROTO=TCP SPT=554 DPT=30883 WINDOW=64240 RES=0x00 SYN URGP=0 2024-12-24T06:48:09.367832+01:00 atlas kernel: [857953.193727] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=20.49.104.38 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=124 ID=48332 PROTO=TCP SPT=47308 DPT=49733 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.194.241.54

🇬🇧 185.247.137.61

🇺🇸 172.202.9.120

🇸🇬 165.154.236.29

🇺🇸 162.216.150.88

🇭🇰 150.5.132.243

🇷🇴 92.118.39.234

🇳🇱 91.92.42.87

🇮🇩 210.79.142.69

🇲🇽 189.142.206.182

🇷🇺 188.234.32.22

🇲🇽 187.192.97.255

🇧🇩 182.48.80.240

🇺🇸 162.216.149.65

🇮🇳 106.222.204.167

🇺🇸 74.7.244.25

🇦🇷 186.39.84.5

🇩🇴 186.33.114.28

🇧🇷 177.97.94.158

🇺🇸 162.216.150.206