JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.98.154.122

Recent Activity

Abuse confidence score ?

100% Critical

81 reports

54 reporters · latest 59 minutes ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.98.154.122

Export CSV

This IP address has been reported a total of 81 times from 54 distinct sources. 20.98.154.122 was first reported on October 12th 2026, and the most recent report was 59 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 21 reports; Germany with 14 reports; France with 7 reports. The most common categories in these recent reports were: Port Scan 64 times; Hacking 16 times; Web App Attack 12 times; Brute-Force 10 times; Email Spam 3 times; Other 6 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-10-15 23:05:45 (59 minutes ago)	Blocked by UFW (TCP on 4567) Source port: 52340 TTL: 52 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 4567) Source port: 52340 TTL: 52 Packet length: 52 TOS: 0x00 This report (for 20.98.154.122) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 DasDuo	2026-10-15 20:51:35 (3 hours ago)	Attempt on port 15672 - potential unauthorized service/management API access attempt. Blocked by fir ... show more Attempt on port 15672 - potential unauthorized service/management API access attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection). show less	Port Scan
🇺🇸 RAP	2026-10-15 19:09:54 (4 hours ago)	2026-10-15 19:09:54 UTC Unauthorized activity to TCP port 1434. SQL	Port Scan
🇩🇪 Tsumugi Kotobuki	2026-10-15 16:31:12 (7 hours ago)	Port Scan on Honeypot \| Ports: 1433/MSSQL \| Proto: TCP(1) \| Flags: all SYN \| TTL: 45 \| Len: 52B \| Wi ... show more Port Scan on Honeypot \| Ports: 1433/MSSQL \| Proto: TCP(1) \| Flags: all SYN \| TTL: 45 \| Len: 52B \| Win: 65535(1) \| F2B/ufw-honeypot@2026-10-15T16:31:11Z show less	Port Scan Hacking
🇩🇪 IVski.com	2026-10-15 14:52:42 (9 hours ago)	IVski WAF \| XXE (XML External Entity) attack detected - DOCTYPE or ENTITY injection	Hacking Brute-Force Web App Attack
🇺🇸 freehosts.eu	2026-10-15 14:52:02 (9 hours ago)	Blocked by UFW [8181/tcp] \| SPT: 50859 \| TTL: 45 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sef ... show more Blocked by UFW [8181/tcp] \| SPT: 50859 \| TTL: 45 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-10-15 13:30:10 (10 hours ago)	Blocked by UFW (TCP on 8000) Source port: 40432 TTL: 51 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8000) Source port: 40432 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 20.98.154.122) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-10-15 12:48:33 (11 hours ago)	Blocked by UFW (TCP on 9030) Source port: 52286 TTL: 51 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 9030) Source port: 52286 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 20.98.154.122) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-10-15 10:46:28 (13 hours ago)	Blocked by UFW (TCP on 20) Source port: 58317 TTL: 51 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 20) Source port: 58317 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 20.98.154.122) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 polycoda	2026-10-15 09:47:27 (14 hours ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇷🇴 sTicKs23	2026-10-15 08:16:11 (15 hours ago)	Rejected activity against our mail infrastructure (1 hits, first seen 2026-10-15 UTC). Log evidence: ... show more Rejected activity against our mail infrastructure (1 hits, first seen 2026-10-15 UTC). Log evidence: 2026-10-15 11:16:05.740 [855633] rejected EHLO from [20.98.154.122]:51842 I=[89.36.26.153]:587 Ci=855633: syntactically invalid argument(s): (no argument given) show less	Hacking
🇦🇹 Pingger Shikkoken	2026-10-15 07:15:46 (16 hours ago)	2026-10-15T07:15:46+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-10-15T07:15:46+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=20.98.154.122 DST=152.53.50.28 LEN=52 TOS=0x00 PREC=0x00 TTL=41 ID=19904 PROTO=TCP SPT=49824 DPT=5222 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Hacking
🇩🇪 iNetWorker	2026-10-15 07:00:57 (17 hours ago)	firewall-block, port(s): 8291/tcp	Port Scan
🇭🇰 sandra361	2026-10-15 06:00:18 (18 hours ago)	Port scan detected: 9 attempts across 1 port (21). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=20.98.154. ... show more Port scan detected: 9 attempts across 1 port (21). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=20.98.154.122 LEN=40 TOS=0x14 PREC=0x00 TTL=44 ID=26516 DF PROTO=TCP SPT=59274 DPT=21 WINDOW=64240 RES=0x00 ACK URGP=0 show less	Port Scan
🇺🇸 xmission.com	2026-10-15 05:16:35 (18 hours ago)	Blocked by UFW (TCP on 70) Source port: 58934 TTL: 52 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 70) Source port: 58934 TTL: 52 Packet length: 52 TOS: 0x00 This report (for 20.98.154.122) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.124.20.250

🇬🇧 2a06:4880:6000::70

🇳🇱 192.144.91.74

🇮🇷 185.231.180.140

🇺🇸 174.48.20.72

🇺🇸 173.254.30.214

🇺🇸 162.216.149.180

🇨🇳 123.56.11.51

🇨🇳 115.190.185.243

🇨🇳 106.13.95.77

🇬🇧 35.203.211.38

🇺🇸 35.196.0.54

🇭🇰 34.96.200.118

🇺🇸 20.80.92.151

🇨🇳 8.137.126.20

🇩🇪 217.154.163.54

🇺🇸 202.81.219.27

🇷🇺 194.85.235.99

🇳🇱 172.94.9.194

🇺🇸 159.148.54.27