20.41.81.116
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇰🇷 Korea (the Republic of)
- City
- Seoul, Seoul
No reports in the last 60 days
20.41.81.116 has been reported 14 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
14 from
14 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇴 adalbertoreyes.org |
CategoryPortScan
|
Port Scan | |
| 🇬🇧 gurnip |
Vulnerability probe of page /wordpress, not found on server.
|
Brute-Force Web App Attack | |
| 🇸🇪 SkyDancer |
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
|
Hacking Brute-Force | |
| 🇫🇷 tr1n |
Triggered Cloudflare WAF (botFight) from KR.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (HEAD method)
Endpoint: /backup
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
|
Bad Web Bot | |
| 🇦🇺 advena |
20.41.81.116 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-09-09T19:44:52Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge.
|
Web Spam Hacking Brute-Force Web App Attack | |
| Anonymous |
|
Brute-Force | |
| 🇺🇸 rsa |
HEAD /backup HTTP/1.1
|
Hacking Brute-Force Exploited Host Web App Attack | |
| 🇳🇱 Roderic |
20.41.81.116 (KR/South Korea/Seoul/Seoul/-/[redacted]), more than 30 Apache 403 hits
|
Hacking | |
| 🇧🇪 cmbplf |
8.995 HEAD requests in 1 hour (6d8h44mfromnow)
|
Brute-Force Bad Web Bot | |
| 🇺🇸 kosada.com |
Web vulnerability probing
|
Web App Attack | |
| 🇺🇸 mnsf |
Too many Status 40X (16)
|
Brute-Force Web App Attack | |
| 🇫🇷 pm33 |
Excessive crawling HTTP 404
|
Web App Attack | |
| Anonymous |
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force SSH | |
| 🇦🇺 afleventoffice.com.au |
HEAD /wordpress HTTP/1.1
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown