AbuseIPDB » 208.109.38.20

208.109.38.20 was found in our database!

This IP was reported 20,421 times. Confidence of Abuse is 0%: ?

0%

ISP	GoDaddy.com, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS398101
Hostname(s)	20.38.109.208.host.secureserver.net
Domain Name	godaddy.com
Country	United States of America
City	Tempe, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 208.109.38.20

Whois 208.109.38.20

IP Abuse Reports for 208.109.38.20:

This IP address has been reported a total of 20,421 times from 1,453 distinct sources. 208.109.38.20 was first reported on September 27th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ghostwarriors	2024-08-03 01:23:14 (11 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
AdrianT	2024-07-22 16:58:23 (11 months ago)	SSH brute force	Brute-Force SSH
AdrianT	2024-07-17 16:46:30 (11 months ago)	SSH brute force	Brute-Force SSH
qli.de	2024-07-16 05:24:25 (11 months ago)	Jun 18 06:18:44 v2202111159968167802 sshd[133189]: Invalid user dmpaint from 208.109.38.20 port 3513 ... show moreJun 18 06:18:44 v2202111159968167802 sshd[133189]: Invalid user dmpaint from 208.109.38.20 port 35132 Jun 18 06:24:56 v2202111159968167802 sshd[133716]: Invalid user naki from 208.109.38.20 port 56476 Jun 18 06:25:51 v2202111159968167802 sshd[133920]: Invalid user cameron from 208.109.38.20 port 43768 Jun 18 06:26:38 v2202111159968167802 sshd[133985]: Invalid user ehsanrezaee from 208.109.38.20 port 59288 Jun 18 06:27:29 v2202111159968167802 sshd[134066]: Invalid user back from 208.109.38.20 port 46576 ... show less	Brute-Force SSH
sf-noh.de	2024-07-16 05:24:25 (11 months ago)	Jun 18 06:18:44 v2202111159968167802 sshd[133189]: Invalid user dmpaint from 208.109.38.20 port 3513 ... show moreJun 18 06:18:44 v2202111159968167802 sshd[133189]: Invalid user dmpaint from 208.109.38.20 port 35132 Jun 18 06:24:56 v2202111159968167802 sshd[133716]: Invalid user naki from 208.109.38.20 port 56476 Jun 18 06:25:51 v2202111159968167802 sshd[133920]: Invalid user cameron from 208.109.38.20 port 43768 Jun 18 06:26:38 v2202111159968167802 sshd[133985]: Invalid user ehsanrezaee from 208.109.38.20 port 59288 Jun 18 06:27:29 v2202111159968167802 sshd[134066]: Invalid user back from 208.109.38.20 port 46576 ... show less	Brute-Force SSH
[email protected]	2024-07-15 05:56:56 (11 months ago)	Attempts bruteforce ssh login.	Brute-Force SSH
ghostwarriors	2024-07-12 16:23:06 (11 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
AdrianT	2024-07-10 14:00:58 (11 months ago)	SSH brute force	Brute-Force SSH
unsoft.dynu.net	2024-07-06 13:08:12 (1 year ago)		Brute-Force SSH
bigscoots.com	2024-07-05 18:29:06 (1 year ago)	208.109.38.20 (US/United States/20.38.109.208.host.secureserver.net), 5 distributed sshd attacks on ... show more208.109.38.20 (US/United States/20.38.109.208.host.secureserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 5 13:28:45 9178 sshd[23082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.22.150 user=root Jul 5 13:28:47 9178 sshd[23082]: Failed password for root from 125.164.22.150 port 25805 ssh2 Jul 5 13:27:53 9178 sshd[22988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.38.20 user=root Jul 5 13:27:55 9178 sshd[22988]: Failed password for root from 208.109.38.20 port 50750 ssh2 Jul 5 12:34:53 9178 sshd[17620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.171.89.209 user=root IP Addresses Blocked: 125.164.22.150 (ID/Indonesia/-) show less	Brute-Force SSH
bigscoots.com	2024-07-05 17:53:26 (1 year ago)	208.109.38.20 (US/United States/20.38.109.208.host.secureserver.net), 5 distributed sshd attacks on ... show more208.109.38.20 (US/United States/20.38.109.208.host.secureserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 5 12:50:46 16708 sshd[6915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.175.69 user=root Jul 5 12:50:48 16708 sshd[6915]: Failed password for root from 120.48.175.69 port 48134 ssh2 Jul 5 12:53:11 16708 sshd[7152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.65.22 user=root Jul 5 12:52:50 16708 sshd[7088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.38.20 user=root Jul 5 12:52:52 16708 sshd[7088]: Failed password for root from 208.109.38.20 port 45166 ssh2 IP Addresses Blocked: 120.48.175.69 (CN/China/-) 182.75.65.22 (IN/India/nsg-static-22.65.75.182-airtel.com) show less	Brute-Force SSH
z3rg	2024-07-05 17:15:41 (1 year ago)	2024-07-05T13:14:52.935654 z3rg sshd[682691]: pam_unix(sshd:auth): authentication failure; logname= ... show more2024-07-05T13:14:52.935654 z3rg sshd[682691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.38.20 user=root 2024-07-05T13:14:54.828897 z3rg sshd[682691]: Failed password for root from 208.109.38.20 port 32798 ssh2 2024-07-05T13:15:39.310753 z3rg sshd[682715]: Invalid user admin1 from 208.109.38.20 port 48124 2024-07-05T13:15:39.318505 z3rg sshd[682715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.38.20 2024-07-05T13:15:40.997322 z3rg sshd[682715]: Failed password for invalid user admin1 from 208.109.38.20 port 48124 ssh2 ... show less	Brute-Force SSH
bigscoots.com	2024-07-05 17:15:36 (1 year ago)	208.109.38.20 (US/United States/20.38.109.208.host.secureserver.net), 5 distributed sshd attacks on ... show more208.109.38.20 (US/United States/20.38.109.208.host.secureserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 5 12:13:49 16340 sshd[23598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.160.148.170 user=root Jul 5 12:13:51 16340 sshd[23598]: Failed password for root from 103.160.148.170 port 41044 ssh2 Jul 5 12:15:15 16340 sshd[23742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.38.20 user=root Jul 5 12:14:06 16340 sshd[23655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.128.232.31 user=root Jul 5 12:14:08 16340 sshd[23655]: Failed password for root from 45.128.232.31 port 47006 ssh2 IP Addresses Blocked: 103.160.148.170 (ID/Indonesia/-) show less	Brute-Force SSH
Filli Group	2024-07-05 16:44:54 (1 year ago)	2024-07-05T18:39:21.995553+02:00 server01.k3s.pve01.rma.ch.crazycraftland.net sshd[406841]: User roo ... show more2024-07-05T18:39:21.995553+02:00 server01.k3s.pve01.rma.ch.crazycraftland.net sshd[406841]: User root from 208.109.38.20 not allowed because not listed in AllowUsers 2024-07-05T18:44:07.820739+02:00 server01.k3s.pve01.rma.ch.crazycraftland.net sshd[408107]: User root from 208.109.38.20 not allowed because not listed in AllowUsers 2024-07-05T18:44:54.063553+02:00 server01.k3s.pve01.rma.ch.crazycraftland.net sshd[408312]: Invalid user guest from 208.109.38.20 port 42146 ... show less	Brute-Force SSH
bigscoots.com	2024-07-05 15:58:37 (1 year ago)	208.109.38.20 (US/United States/20.38.109.208.host.secureserver.net), 5 distributed sshd attacks on ... show more208.109.38.20 (US/United States/20.38.109.208.host.secureserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 5 10:58:19 16591 sshd[4612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.8.14.117 user=root Jul 5 10:58:21 16591 sshd[4612]: Failed password for root from 58.8.14.117 port 42536 ssh2 Jul 5 10:27:34 16591 sshd[2318]: Failed password for root from 140.207.36.148 port 56416 ssh2 Jul 5 10:53:53 16591 sshd[4254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.38.20 user=root Jul 5 10:53:56 16591 sshd[4254]: Failed password for root from 208.109.38.20 port 48216 ssh2 IP Addresses Blocked: 58.8.14.117 (TH/Thailand/ppp-58-8-14-117.revip2.asianet.co.th) 140.207.36.148 (CN/China/-) show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩