20.41.81.226
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇰🇷 Korea (the Republic of)
- City
- Seoul, Seoul
No reports in the last 60 days
20.41.81.226 has been reported 31 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
31 from
26 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 IRISIO |
scans/SQL injection/spam posts : 136 queries
|
SQL Injection Web App Attack | |
| 🇺🇸 vestibtech |
|
Web App Attack | |
| 🇦🇺 advena |
20.41.81.226 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-08-30T02:40:38Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge.
|
Web Spam Hacking Brute-Force Web App Attack | |
| 🇩🇪 updown.io |
|
DDoS Attack Web App Attack | |
| Anonymous |
20.41.81.226 detected on srv01
|
Brute-Force | |
| 🇩🇪 LRob |
Repeated attacks detected by Fail2Ban in recidive jail
|
Hacking | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
|
Exploited Host Web App Attack | |
| 🇺🇦 URAN Publishing Service |
20.41.81.226 - - [30/Aug/2025:03:59:57 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 270 "-" "-"
...
|
Web App Attack | |
| 🇫🇷 Guardian |
Scanning for installed WordPress and vulnerabilities
20.41.81.226 [30/Aug/2025:00:57:19] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"
|
Port Scan Web App Attack | |
| 🇫🇮 Mr-Money |
|
Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack | |
| 🇫🇷 COMAITE |
Multiple web server 400 error codes from same source ip 20.41.81.226.
|
Web App Attack | |
| 🇳🇱 Site.eu |
Excessive multi-domain requests
|
Brute-Force | |
| 🇺🇦 URAN Publishing Service |
20.41.81.226 - - [30/Aug/2025:03:29:53 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 251 "-" "-"
20.41.81.226 - - [30/Aug/2025:03:31:08 +0300] "GET /wp-admin/network/nbr.php HTTP/1.1" 404 196 "-" "-"
...
|
Web App Attack | |
| 🇨🇭 zynex |
URL Probing: /wp-content/plugins/hellopress/wp_filemanager.php
|
Web App Attack | |
| 🇧🇪 cmbplf |
503 requests with url.path */wp-content/plugins/hellopress/wp_filemanager.php
|
Brute-Force Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown