JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 67.20.231.38

67.20.231.38 was found in our database!

This IP was reported 216 times. Confidence of Abuse is 42%: ?

42%

ISP	Fidium
Usage Type	Fixed Line ISP
ASN	AS13333
Hostname(s)	dhcp-pa-67-20-231-38.consolidated.net
Domain Name	consolidated.com
Country	🇺🇸 United States of America
City	Gibsonia, Pennsylvania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 67.20.231.38

Whois 67.20.231.38

IP Abuse Reports for 67.20.231.38:

This IP address has been reported a total of 216 times from 100 distinct sources. 67.20.231.38 was first reported on March 10th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 Woodie	2026-04-17 00:02:29 (1 month ago)	2026-04-16T20:00:32.274094-04:00 debian sshd[1410265]: pam_unix(sshd:auth): authentication failure; ... show more 2026-04-16T20:00:32.274094-04:00 debian sshd[1410265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.20.231.38 2026-04-16T20:00:34.170991-04:00 debian sshd[1410265]: Failed password for invalid user config from 67.20.231.38 port 50276 ssh2 2026-04-16T20:02:27.061809-04:00 debian sshd[1411598]: Invalid user Admin from 67.20.231.38 port 33634 2026-04-16T20:02:27.065284-04:00 debian sshd[1411598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.20.231.38 2026-04-16T20:02:28.414308-04:00 debian sshd[1411598]: Failed password for invalid user Admin from 67.20.231.38 port 33634 ssh2 ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-04-16 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 kosada.com	2026-04-16 20:49:15 (1 month ago)	IMAP password guessing	Brute-Force
🇷🇴 StarTech Team	2026-04-16 16:58:37 (1 month ago)	Web App Atack	Web App Attack
🇳🇱 ipoac.nl	2026-04-16 13:22:10 (1 month ago)	2026-04-16T14:22:09.901610+01:00 ipoac.nl sshd-session-: Invalid user login from 67.20.231.38 port 5 ... show more 2026-04-16T14:22:09.901610+01:00 ipoac.nl sshd-session-: Invalid user login from 67.20.231.38 port 55303 show less	Brute-Force SSH
🇫🇮 Gergely Szabo	2026-04-16 06:41:53 (1 month ago)	2026-04-16T08:41:52.170890+02:00 [redacted] sshd[186376]: Invalid user administrator from 67.20.231. ... show more 2026-04-16T08:41:52.170890+02:00 [redacted] sshd[186376]: Invalid user administrator from 67.20.231.38 port 59422 ... show less	Brute-Force SSH
🇳🇱 rmvanderspek	2026-04-16 04:50:00 (1 month ago)	Telnet Brute-force (IoT Botnet scan) detected.	Brute-Force IoT Targeted
🇺🇸 bing	2026-04-16 01:22:15 (1 month ago)	2026-04-15T18:21:50.207185 unhappy-client sshd[2428582]: pam_unix(sshd:auth): authentication failure ... show more 2026-04-15T18:21:50.207185 unhappy-client sshd[2428582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.20.231.38 2026-04-15T18:21:52.220065 unhappy-client sshd[2428582]: Failed password for invalid user centos from 67.20.231.38 port 43213 ssh2 ... show less	Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-04-15 18:33:53 (1 month ago)	Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: test:p@ssword • ... show more Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: test:p@ssword • Number of login attempts: 1 • Client: SSH-2.0-OpenSSH_7.4 Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇮🇪 thecivvie	2026-04-15 15:15:02 (1 month ago)	foomuuri firewall banned tcp/23 2 attempts	Brute-Force
🇮🇩 sockominfo	2026-04-15 12:00:41 (1 month ago)	Zimbra: Login failures from malicious IP: 67.20.231.38. Threat Score: 6.1/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 67.20.231.38. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-15 11:01:10 (1 month ago)	Zimbra: Login failures from malicious IP: 67.20.231.38. Threat Score: 6.2/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 67.20.231.38. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-15 09:00:54 (1 month ago)	Zimbra: Login failures from malicious IP: 67.20.231.38. Threat Score: 6/10 (MEDIUM). Reported by Tan ... show more Zimbra: Login failures from malicious IP: 67.20.231.38. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-04-15 08:32:16 (1 month ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇰🇷 hanb.jp	2026-04-15 06:38:31 (1 month ago)	Apr 15 06:38:28 v4bgp sshd[4110]: Invalid user supervisor from 67.20.231.38 port 57434 Apr 15 06:38: ... show more Apr 15 06:38:28 v4bgp sshd[4110]: Invalid user supervisor from 67.20.231.38 port 57434 Apr 15 06:38:28 v4bgp sshd[4110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.20.231.38 Apr 15 06:38:30 v4bgp sshd[4110]: Failed password for invalid user supervisor from 67.20.231.38 port 57434 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 216 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.53

🇩🇪 213.209.159.56

🇨🇭 209.99.190.200

🇨🇳 180.76.202.69

🇧🇷 168.197.205.20

🇸🇬 138.2.98.41

🇭🇰 101.79.167.192

🇳🇱 195.178.110.30

🇮🇩 180.148.24.118

🇺🇸 172.217.107.156

🇨🇳 120.92.105.170

🇻🇳 103.176.179.183

🇭🇰 8.217.192.50

🇬🇧 193.176.29.16

🇸🇦 87.109.145.25

🇯🇵 54.248.17.61

🇺🇸 44.254.217.77

🇺🇸 32.199.170.134

🇭🇰 199.45.154.179

🇮🇳 182.95.232.18