Report for IP: 20.118.28.38

Threat LevelHIGH60/1001 rule type
3 incidents on record · active attack detected · persistent 9-day campaign · last seen 7d ago · known internet scanner
PTR azpdcg2lul5t.stretchoid.com
Org / ASN Microsoft Azure Cloud (centralus)
Country 🇺🇸 United States
City Des Moines, Iowa
Timezone America/Chicago
Internet ScannerStretchoid
Stretchoid — internet-wide scanning project. All unsolicited scanning probes are treated as hostile traffic on this network regardless of stated purpose.

Attack Analysis

Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (3)

Date Severity Description
23 Sep 2026 - 00:27 medium IDS: Suricata alert — SURICATA SSH invalid banner
14 Sep 2026 - 08:13 medium IDS: Suricata alert — SURICATA SSH invalid banner
14 Sep 2026 - 08:13 high IDS: Suricata alert