JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.41.98.121

20.41.98.121

Neutral Activity

84 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇰🇷 Korea (the Republic of)

City

Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.41.98.121 has been reported 84 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.41.98.121:

This IP address has been reported a total of 84 times from 69 distinct sources. 20.41.98.121 was first reported on April 21st 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-06-29 10:48:52 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 ghostwarriors	2026-05-06 14:24:26 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-01 00:50:58 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-23 07:03:03 (4 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: KR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: KR, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-22 21:59:48 (4 months ago)	Auto-ban: >3000 req/min op 2026-04-22	Web App Attack SSH Hacking
🇦🇹 mindrider	2026-04-22 14:18:10 (4 months ago)	20.41.98.121 - - [22/Apr/2026:16:18:05 +0200] "GET /admin.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (W ... show more 20.41.98.121 - - [22/Apr/2026:16:18:05 +0200] "GET /admin.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 20.41.98.121 - - [22/Apr/2026:16:18:06 +0200] "GET /inputs.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 20.41.98.121 - - [22/Apr/2026:16:18:06 +0200] "GET /file.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 20.41.98.121 - - [22/Apr/2026:16:18:06 +0200] "GET /goods.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 20.41.98.121 - - [22/Apr/2026:16:18:06 +0200] "GET /ms-edit.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa ... show less	Bad Web Bot
🇵🇱 nfsec.pl	2026-04-22 14:01:26 (4 months ago)	20.41.98.121 - - [22/Apr/2026:14:01:25 +0000] "GET /admin.php HTTP/1.1" 404 3825 "-" "Mozilla/5.0 (W ... show more 20.41.98.121 - - [22/Apr/2026:14:01:25 +0000] "GET /admin.php HTTP/1.1" 404 3825 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.41.98.121 - - [22/Apr/2026:14:01:25 +0000] "GET /inputs.php HTTP/1.1" 404 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.41.98.121 - - [22/Apr/2026:14:01:26 +0000] "GET /file.php HTTP/1.1" 404 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.41.98.121 - - [22/Apr/2026:14:01:26 +0000] "GET /goods.php HTTP/1.1" 404 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.41.98.121 - - [22/Apr/2026:14:01:26 +0000] "GET /ms-edit.php HTTP/1.1" 404 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack Exploited Host
🇵🇱 Jacqb	2026-04-22 13:58:56 (4 months ago)	Adres potencjalnie niebezpieczny	Brute-Force Web App Attack Bad Web Bot
🇫🇷 ELYAZ	2026-04-22 13:32:31 (4 months ago)	(y3) Failed access -byebye- from 20.41.98.121 (KR/South Korea/-): (CF_ENABLE)	Hacking
🇺🇦 URAN Publishing Service	2026-04-22 11:46:48 (4 months ago)	20.41.98.121 - - [22/Apr/2026:14:46:47 +0300] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 40 ... show more 20.41.98.121 - - [22/Apr/2026:14:46:47 +0300] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 404 783 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 jcbriar	2026-04-22 11:38:23 (4 months ago)	Searching for vulnerable scripts	Hacking Web App Attack
Anonymous	2026-04-22 11:07:25 (4 months ago)	20.41.98.121 - - [22/Apr/2026:13:06:02 +0200] "GET /wp-content/plugins/twenty/login.php HTTP/1.0" 40 ... show more 20.41.98.121 - - [22/Apr/2026:13:06:02 +0200] "GET /wp-content/plugins/twenty/login.php HTTP/1.0" 404 139199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.41.98.121 - - [22/Apr/2026:13:06:03 +0200] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 404 21701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.41.98.121 - - [22/Apr/2026:13:06:51 +0200] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.0" 404 139199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.41.98.121 - - [22/Apr/2026:13:06:52 +0200] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 404 21701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.41.98.121 - - [22/Apr/2026:13:07:23 +0200] "GET /wp-content/plugins/admin.php HTTP/1.0" 4 ... show less	Brute-Force Web App Attack
🇩🇪 Bedios GmbH	2026-04-22 10:22:57 (4 months ago)	Web App hacking attempt	Web App Attack
Anonymous	2026-04-22 10:15:05 (4 months ago)	Automatic report from firewall log	Port Scan Hacking Web App Attack
🇸🇪 nekopavel	2026-04-22 09:53:12 (4 months ago)	20.41.98.121 - - [22/Apr/2026:11:53:04 +0200]"GET /wp-content/plugins/twenty/login.php HTTP/1.1" 404 ... show more 20.41.98.121 - - [22/Apr/2026:11:53:04 +0200]"GET /wp-content/plugins/twenty/login.php HTTP/1.1" 404 704"-" futomomo.art "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36""0.002" "0.000""Seoul" "KR" 20.41.98.121 - - [22/Apr/2026:11:53:05 +0200]"GET /wp-mail.php HTTP/1.1" 404 704"-" futomomo.art "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36""0.001" "0.001""Seoul" "KR" 20.41.98.121 - - [22/Apr/2026:11:53:09 +0200]"GET /wp-mail.php HTTP/1.1" 404 704"-" futomomo.art "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36""0.001" "0.000""Seoul" "KR" ... show less	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.148.4.118

🇺🇸 179.61.137.164

🇯🇵 172.253.236.144

🇹🇼 116.59.11.115

🇧🇬 78.128.114.46

🇻🇳 27.118.23.21

🇧🇬 109.160.32.37

🇷🇴 92.118.39.77

🇨🇳 58.46.224.19

🇺🇸 45.92.229.63

🇮🇳 203.192.211.180

🇩🇪 172.217.33.152

🇮🇩 165.99.186.45

🇧🇩 123.200.9.4

🇹🇼 111.70.38.53

🇩🇪 89.117.104.13

🇺🇸 45.92.229.68

🇩🇪 43.157.95.239

🇮🇪 34.245.69.41

🇺🇸 20.127.185.37