JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.198.89.82

20.198.89.82 was found in our database!

This IP was reported 440 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.198.89.82

Whois 20.198.89.82

IP Abuse Reports for 20.198.89.82:

This IP address has been reported a total of 440 times from 305 distinct sources. 20.198.89.82 was first reported on October 16th 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 viki53	2026-10-17 12:35:24 (7 minutes ago)	Website hacking attempt (path: /wp-content/plugins/hellopress/wp_filemanager.php)	Hacking Web App Attack
🇯🇵 ZEROVOX	2026-10-17 12:30:22 (12 minutes ago)	CrowdSec: crowdsecurity/http-crawl-non_statics detected	Web App Attack
🇺🇸 nasset	2026-10-17 12:23:58 (18 minutes ago)	20.198.89.82 - - [17/Oct/2026:05:23:55 -0700] "GET /adminfuns.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 ... show more 20.198.89.82 - - [17/Oct/2026:05:23:55 -0700] "GET /adminfuns.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384 20.198.89.82 - - [17/Oct/2026:05:23:56 -0700] "GET /222.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384 20.198.89.82 - - [17/Oct/2026:05:23:56 -0700] "GET /BDKR28WP.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384 20.198.89.82 - - [17/Oct/2026:05:23:57 -0700] "GET /wp.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384 20.198.89.82 - - [17/Oct/2026:05:23:58 -0700] "GET /simple.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384 ... show less	Bad Web Bot Web App Attack
🇩🇪 AetherFox	2026-10-17 12:05:55 (36 minutes ago)	AetherFox VoidGuard detected: [Sat Oct 17 12:05:52.738803 2026] [security2:error] [pid 3316442:tid 3 ... show more AetherFox VoidGuard detected: [Sat Oct 17 12:05:52.738803 2026] [security2:error] [pid 3316442:tid 3316466] [client 20.198.89.82:55200] [client 20.198.89.82] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 23.88.112.221" against "REMOTE_ADDR" required. [file "/etc/modsecurity/AetherFox.conf"] [line "28"] [id "100051"] [msg "wp-content access blocked by AetherFox VoidGuard"] [hostname "draconigen.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "atNkoKE6uwD2njkvOYYqWQAAABU"] [Sat Oct 17 12:05:53.365641 2026] [security2:error] [pid 3316442:tid 3316454] [client 20.198.89.82:55181] [client 20.198.89.82] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/AetherFox.conf"] [line "235"] [id "100082"] [msg "missing User-Agent blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [tag "bot-block"] [hostname "draconigen.net"] [uri "/this_is_a_new_hello_world.p ... show less	Hacking Bad Web Bot
🇩🇪 Nixwig	2026-10-17 11:53:14 (49 minutes ago)	20.198.89.82 - - [17/Oct/2026:11:53:14 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.198.89.82 - - [17/Oct/2026:11:53:14 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1400 "-" "-" 20.198.89.82 - - [17/Oct/2026:11:53:14 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 1372 "-" "-" 20.198.89.82 - - [17/Oct/2026:11:53:14 +0000] "GET /init-notica.php HTTP/1.1" 404 1372 "-" "-" ... show less	Web App Attack
🇩🇪 Jarda_H	2026-10-17 11:48:42 (53 minutes ago)	php-url-scan Attack Detected	Hacking Web App Attack
🇺🇸 mibbsdevs	2026-10-17 11:43:32 (59 minutes ago)	CoffeePot Web: Automated bad bot directory fuzzing and high-rate 404 probing.	Port Scan Bad Web Bot
🇫🇷 largo-it.net	2026-10-17 11:43:16 (59 minutes ago)	[17/Oct/2026:13:43:13.974] HTTP 404 - GET /wp-content/plugins/hellopress/wp_filemanager.php [17/Oct/ ... show more [17/Oct/2026:13:43:13.974] HTTP 404 - GET /wp-content/plugins/hellopress/wp_filemanager.php [17/Oct/2026:13:43:14.393] HTTP 404 - GET /this_is_a_new_hello_world.php [17/Oct/2026:13:43:14.636] HTTP 404 - GET /init-notica.php [17/Oct/2026:13:43:14.887] HTTP 404 - GET /index/function.php [17/Oct/2026:13:43:15.176] HTTP 404 - GET /wp-trbacks.php [17/Oct/2026:13:43:15.479] HTTP 404 - GET /543f.php [17/Oct/2026:13:43:15.850] HTTP 404 - GET /go.php [17/Oct/2026:13:43:16.288] HTTP 404 - GET /1ac.php show less	Hacking Bad Web Bot Web App Attack
🇩🇪 hchristo	2026-10-17 11:10:15 (1 hour ago)	[Sat Oct 17 13:10:14.208402 2026] [proxy_fcgi:error] [pid 8373:tid 8425] [client 20.198.89.82:55181] ... show more [Sat Oct 17 13:10:14.208402 2026] [proxy_fcgi:error] [pid 8373:tid 8425] [client 20.198.89.82:55181] AH01071: Got error 'Primary script unknown' [Sat Oct 17 13:10:14.460493 2026] [proxy_fcgi:error] [pid 8373:tid 8448] [client 20.198.89.82:55181] AH01071: Got error 'Primary script unknown' [Sat Oct 17 13:10:14.983956 2026] [proxy_fcgi:error] [pid 8373:tid 8426] [client 20.198.89.82:55181] AH01071: Got error 'Primary script unknown' [Sat Oct 17 13:10:15.281139 2026] [proxy_fcgi:error] [pid 8373:tid 8473] [client 20.198.89.82:55181] AH01071: Got error 'Primary script unknown' [Sat Oct 17 13:10:15.537696 2026] [proxy_fcgi:error] [pid 8373:tid 8466] [client 20.198.89.82:55181] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇩🇪 TheDjRider	2026-10-17 11:07:32 (1 hour ago)	CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ba ... show more CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ban triggered. Detection time (UTC): 2026-10-17T11:07:28.004791994Z. Context: http_status=404 show less	Web App Attack
🇧🇾 lns.bz	2026-10-17 11:06:43 (1 hour ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-10-17 10:59:45 (1 hour ago)	wp admin page access attempt ...	Hacking Web App Attack
🇩🇪 wpadm3	2026-10-17 10:55:32 (1 hour ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 0x44	2026-10-17 10:47:46 (1 hour ago)	Web probing - backdoors/webshells with missing User-Agent	Bad Web Bot Web App Attack
🇩🇪 macrob	2026-10-17 10:45:48 (1 hour ago)	2026/10/17 10:45:37 [error] 1186586#1186586: 7715963 access forbidden by rule, client: 20.198.89.82 ... show more 2026/10/17 10:45:37 [error] 1186586#1186586: 7715963 access forbidden by rule, client: 20.198.89.82, server: infinsa.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", host: "infinsa.com" 2026/10/17 10:45:47 [error] 1186587#1186587: 7716016 access forbidden by rule, client: 20.198.89.82, server: infinsa.com, request: "GET /wp-content/index.php HTTP/2.0", host: "infinsa.com" 2026/10/17 10:45:47 [error] 1186585#1186585: 7716160 access forbidden by rule, client: 20.198.89.82, server: infinsa.com, request: "GET /wp-includes/ID3/about.php HTTP/2.0", host: "infinsa.com" ... show less	Web App Attack

Showing 1 to 15 of 440 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 145.255.10.59

🇵🇰 223.123.42.238

192.168.4.80

🇺🇸 147.185.132.208

🇺🇸 103.143.239.201

🇺🇸 66.132.186.141

🇯🇵 34.146.49.239

🇺🇸 172.236.112.131

🇩🇪 148.153.50.179

🇷🇺 109.173.107.163

🇬🇧 77.67.26.136

🇸🇬 47.128.49.1

🇹🇼 35.185.140.246

🇭🇰 8.210.28.151

🇸🇬 138.2.92.229

🇲🇴 125.31.2.160

🇰🇷 121.142.87.218

🇷🇺 94.243.10.202

🇺🇸 94.228.20.19

🇨🇦 85.217.149.43