JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.41.99.165

20.41.99.165 was found in our database!

This IP was reported 255 times. Confidence of Abuse is 83%: ?

83%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.41.99.165

Whois 20.41.99.165

IP Abuse Reports for 20.41.99.165:

This IP address has been reported a total of 255 times from 163 distinct sources. 20.41.99.165 was first reported on April 13th 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-04-14 13:52:26 (1 month ago)	20.41.99.165 - - [14/Apr/2026:16:52:18 +0300] "GET /cgi-bin/index.php HTTP/1.1" 404 267 "-" "Mozilla ... show more 20.41.99.165 - - [14/Apr/2026:16:52:18 +0300] "GET /cgi-bin/index.php HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.41.99.165 - - [14/Apr/2026:16:52:25 +0300] "GET /cgi-bin/ HTTP/1.1" 404 558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 Ba-Yu	2026-04-14 13:02:29 (1 month ago)	WordPress bruteforce	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 MarkGGN	2026-04-14 11:10:44 (1 month ago)	Webexploits. 20.41.99.165 - - [14/Apr/2026:13:10:43 +0200] "GET /1.php HTTP/1.1" 404 0 "-" "Mozilla/ ... show more Webexploits. 20.41.99.165 - - [14/Apr/2026:13:10:43 +0200] "GET /1.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.41.99.165 - - [14/Apr/2026:13:10:43 +0200] "GET /about.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-04-14 10:50:31 (1 month ago)	bermanfamily.com.au:443 20.41.99.165 - - [14/Apr/2026:20:50:27 +1000] "GET /bolt.php HTTP/1.1" 404 3 ... show more bermanfamily.com.au:443 20.41.99.165 - - [14/Apr/2026:20:50:27 +1000] "GET /bolt.php HTTP/1.1" 404 3559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.41.99.165 - - [14/Apr/2026:20:50:27 +1000] "GET /1.php HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.41.99.165 - - [14/Apr/2026:20:50:27 +1000] "GET /aa.php HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.41.99.165 - - [14/Apr/2026:20:50:27 +1000] "GET /abcd.php HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.41.99.165 - - [14/Apr/2026:20:50:27 +1000] "GET /about.php HTTP/1.1" 404 561 "-" "Mozilla/5.0 ... show less	Web App Attack
🇺🇸 myagent.site	2026-04-14 09:59:49 (1 month ago)	Blocking for trying to access an exploit file: /file.php	Hacking
Anonymous	2026-04-14 08:59:59 (1 month ago)	Aggressive web scan	Web App Attack
🇱🇻 garmtech.com	2026-04-14 08:56:48 (1 month ago)	Attempted access to sensitive endpoint (/wp-admin/css/colors/blue/index.php) detected. Automated sca ... show more Attempted access to sensitive endpoint (/wp-admin/css/colors/blue/index.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-04-14 08:27:25 (1 month ago)	20.41.99.165 - - [14/Apr/2026:11:27:22 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 ... show more 20.41.99.165 - - [14/Apr/2026:11:27:22 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 273 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇪🇸 masterguru	2026-04-14 07:21:27 (1 month ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (44020-123)	Hacking
🇧🇪 cmbplf	2026-04-14 07:06:46 (1 month ago)	48.657 requests from abuseipdb.com blacklisted IP (10mos3w3d)	Brute-Force Bad Web Bot
🇻🇳 hirosume2	2026-04-14 05:59:33 (1 month ago)	DDoS composite score 43.8 (challenge tier) - 65 reqs/5min - high_traffic	DDoS Attack
🇱🇻 garmtech.com	2026-04-14 05:26:50 (1 month ago)	Attempted access to sensitive endpoint (/cgi-bin/index.php) detected. Automated scan or unauthorized ... show more Attempted access to sensitive endpoint (/cgi-bin/index.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇬🇧 openstrike.co.uk	2026-04-14 05:17:56 (1 month ago)	279 attacks on PHP URLs, ACME URLs: GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1 GET /.we ... show more 279 attacks on PHP URLs, ACME URLs: GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1 GET /.well-known/acme-challenge/wp-login.php HTTP/1.1 show less	Web App Attack
🇩🇪 expandmade.com	2026-04-14 05:17:53 (1 month ago)	trolling for installation vulnerabilities [14/Apr/2026:05:17:53 "GET /ioxi-o.php"]	Web App Attack
🇫🇷 solution.it	2026-04-14 04:30:54 (1 month ago)	[Tue Apr 14 06:30:53.575687 2026] [php7:error] [pid 3501949:tid 3501949] [client 20.41.99.165:16940] ... show more [Tue Apr 14 06:30:53.575687 2026] [php7:error] [pid 3501949:tid 3501949] [client 20.41.99.165:16940] script '/var/www/html/blog.solution.it/inputs.php' not found or unable to stat show less	Web App Attack

Showing 151 to 165 of 255 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.249.177.79

🇬🇧 213.166.84.51

🇰🇷 211.216.58.204

🇦🇷 186.57.14.137

🇬🇪 185.228.135.197

🇩🇪 154.195.132.229

🇰🇷 140.245.69.89

🇸🇬 101.47.29.104

🇸🇾 89.43.133.183

🇺🇸 65.181.127.40

🇺🇸 64.62.197.193

🇨🇳 58.240.17.66

🇬🇧 31.14.254.18

🇨🇳 27.223.98.117

🇳🇱 192.178.118.151

🇬🇧 185.195.13.179

🇨🇳 171.8.42.112

🇵🇭 150.228.189.132

🇩🇪 144.31.80.14

🇨🇳 124.236.76.72