JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.189.99.177

20.189.99.177

Neutral Activity

97 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇭🇰 Hong Kong

City

Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.189.99.177 has been reported 97 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.189.99.177:

This IP address has been reported a total of 97 times from 85 distinct sources. 20.189.99.177 was first reported on December 18th 2025, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2025-12-29 18:41:23 (8 months ago)	Unauthorized web scan.	Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-19 22:59:33 (8 months ago)	Auto-ban: 256 malicious requests on 2025-12-18 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 256 malicious requests on 2025-12-18 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH
🇬🇧 openstrike.co.uk	2025-12-19 06:14:08 (8 months ago)	77 attacks on PHP URLs: GET /admin.phphttps:/ronstaxidermy.biz/admin.php HTTP/1.1	Web App Attack
🇺🇸 octageeks.com	2025-12-19 05:06:08 (8 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇭🇺 DumaNet	2025-12-19 01:11:00 (8 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 18. 10:36:00 Source IP: 20.189 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 18. 10:36:00 Source IP: 20.189.99.177 Portion of the log(s): 20.189.99.177 - [18/Dec/2025:10:36:00 +0100] "GET /about.php?p= HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:10:36:00 +0100] "GET /wp-good.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:10:35:59 +0100] "GET /abc.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:10:35:59 +0100] "GET /ioxi-o.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:10:35:59 +0100] "GET /test1.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:10:35:58 +0100] "GET /clss.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:10:35:58 +0100] "GET /file30.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:10:35:58 +0100] "GET /sid3.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:10:35:58 +0100] "GET /bolt.php?p= HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:10:35:58 +0100] "GET /zc-729.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇬🇧 [email protected]	2025-12-19 00:51:55 (8 months ago)	...	Brute-Force SSH
🇭🇺 DumaNet	2025-12-19 00:49:00 (8 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 18. 09:00:47 Source IP: 20.189 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 18. 09:00:47 Source IP: 20.189.99.177 Portion of the log(s): 20.189.99.177 - [18/Dec/2025:09:00:47 +0100] "GET /w3llstore.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:09:00:47 +0100] "GET /rh1.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:09:00:47 +0100] "GET /dng.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:09:00:46 +0100] "GET /dout.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:09:00:46 +0100] "GET /xenium4x.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:09:00:46 +0100] "GET /doelr.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:09:00:46 +0100] "GET /dparm.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:09:00:46 +0100] "GET /hbyra.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:09:00:45 +0100] "GET /tqloh.php HTTP/1.1" 404 153 "-" "-" 20.189.99.177 - [18/Dec/2025:09:00:45 +0100] "GET /ssxsl.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-18 22:59:33 (8 months ago)	Auto-ban: >3000 req/min op 2025-12-18	Hacking Web App Attack SSH
🇩🇪 Vegascosmetics	2025-12-18 22:50:52 (8 months ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
🇵🇹 rncbc	2025-12-18 12:01:18 (8 months ago)	[Thu Dec 18 12:01:16.823260 2025] [authz_core:error] [pid 310931:tid 310931] [client 20.189.99.177:3 ... show more [Thu Dec 18 12:01:16.823260 2025] [authz_core:error] [pid 310931:tid 310931] [client 20.189.99.177:33902] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/wp-content [Thu Dec 18 12:01:17.227299 2025] [authz_core:error] [pid 310931:tid 310931] [client 20.189.99.177:33902] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/goods.php [Thu Dec 18 12:01:17.445835 2025] [authz_core:error] [pid 310931:tid 310931] [client 20.189.99.177:33902] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/yu.php ... show less	Brute-Force Bad Web Bot Web App Attack SSH
🇩🇪 Lino Project	2025-12-18 11:54:42 (8 months ago)	20.189.99.177 - - [18/Dec/2025:12:54:30 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.189.99.177 - - [18/Dec/2025:12:54:30 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 82773 "-" "-" 20.189.99.177 - - [18/Dec/2025:12:54:38 +0100] "GET /dejavu.php HTTP/1.1" 404 79394 "-" "-" 20.189.99.177 - - [18/Dec/2025:12:54:39 +0100] "GET /yu.php HTTP/1.1" 404 79390 "-" "-" 20.189.99.177 - - [18/Dec/2025:12:54:40 +0100] "GET /bbn.php HTTP/1.1" 404 79391 "-" "-" 20.189.99.177 - - [18/Dec/2025:12:54:41 +0100] "GET /ssxsl.php HTTP/1.1" 404 79388 "-" "-" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2025-12-18 11:54:41 (8 months ago)	Unauthorized access attempts: From: 20.189.99.177 Method: HTTP GET URI Path: /size.php UA: " ... show more Unauthorized access attempts: From: 20.189.99.177 Method: HTTP GET URI Path: /size.php UA: "" show less	Web App Attack
🇩🇪 fleckenbase	2025-12-18 11:53:12 (8 months ago)	apache-noscript ...	Brute-Force Web App Attack
🇸🇪 Lemmy	2025-12-18 11:46:43 (8 months ago)		Web App Attack
🇪🇸 masterguru	2025-12-18 11:34:12 (8 months ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (44020-123)	Hacking

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 111.40.181.23

🇩🇪 213.209.159.25

🇺🇸 195.184.76.232

🇧🇷 179.157.6.32

🇺🇦 176.121.1.227

🇨🇳 150.139.246.166

🇺🇸 134.199.224.106

🇩🇪 45.139.104.153

🇨🇦 23.236.224.182

🇮🇳 20.235.109.206

🇭🇰 20.205.45.36

🇺🇸 216.24.219.158

🇲🇿 197.219.228.246

🇺🇸 184.57.35.28

🇺🇸 172.98.33.22

🇨🇳 152.136.17.35

🇹🇼 111.70.28.243

🇰🇪 102.210.148.92

🇨🇳 101.126.53.14

🇷🇺 85.12.248.68