JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.212.211.89

20.212.211.89 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.212.211.89

Whois 20.212.211.89

IP Abuse Reports for 20.212.211.89:

This IP address has been reported a total of 122 times from 101 distinct sources. 20.212.211.89 was first reported on July 7th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-07-09 05:16:38 (2 days ago)	64 attacks on PHP URLs: GET /wp-links-opml.php HTTP/1.1	Web App Attack
🇩🇪 SiyCah	2026-07-09 03:00:01 (2 days ago)	IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-09 01:10:09 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 SpaceHost-Server	2026-07-08 22:28:51 (3 days ago)		Brute-Force Web App Attack
🇪🇸 alferez	2026-07-08 18:01:18 (3 days ago)	Searching hacked php files	Hacking Exploited Host Web App Attack
🇺🇸 deskpass.com	2026-07-08 17:58:10 (3 days ago)	GET /about.php	Web App Attack
🇫🇷 sthoyer.de	2026-07-08 17:56:47 (3 days ago)	20.212.211.89 - - [08/Jul/2026:19:56:45 +0200] "GET /.dj/index.php HTTP/1.1" 302 495 "-" "Mozilla/5. ... show more 20.212.211.89 - - [08/Jul/2026:19:56:45 +0200] "GET /.dj/index.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.212.211.89 - - [08/Jul/2026:19:56:45 +0200] "GET /.tmb/ HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.212.211.89 - - [08/Jul/2026:19:56:45 +0200] "GET /.vscode/class-wp-http-client.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 thesimonmanuel	2026-07-08 17:50:09 (3 days ago)	20.212.211.89 - - [08/Jul/2026:23:20:08 +0530] "GET /.dj/index.php HTTP/1.1" 403 141 "-" "Mozilla/5. ... show more 20.212.211.89 - - [08/Jul/2026:23:20:08 +0530] "GET /.dj/index.php HTTP/1.1" 403 141 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 20.212.211.89 - - [08/Jul/2026:23:20:08 +0530] "GET /.tmb/ HTTP/1.1" 404 143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 20.212.211.89 - - [08/Jul/2026:23:20:08 +0530] "GET /.vscode/class-wp-http-client.php HTTP/1.1" 403 141 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 20.212.211.89 - - [08/Jul/2026:23:20:08 +0530] "GET /.well-known/ HTTP/1.1" 404 143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" show less	Hacking Web App Attack
🇩🇪 maxpower	2026-07-08 16:55:06 (3 days ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.212.211.89 (SG/Singapore/-): 1 in the last ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.212.211.89 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.212.211.89 - - [08/Jul/2026:18:55:02 +0200] "GET /ff1.php HTTP/2.0" 404 14561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.212.211.89" host=ilgiardinodeiciliegi.villapardi.it show less	Port Scan
🇩🇪 MBombeck	2026-07-08 16:54:35 (3 days ago)	Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures	Web App Attack
🇩🇪 AetherFox	2026-07-08 16:48:52 (3 days ago)	AetherFox VoidGuard detected: [Wed Jul 08 16:48:50.768967 2026] [authz_core:error] [pid 4155083:tid ... show more AetherFox VoidGuard detected: [Wed Jul 08 16:48:50.768967 2026] [authz_core:error] [pid 4155083:tid 4155135] [client 20.212.211.89:7219] AH01630: client denied by server configuration: proxy:https://[MASKED]/.trash7206/index.php [Wed Jul 08 16:48:51.086454 2026] [authz_core:error] [pid 4155083:tid 4155130] [client 20.212.211.89:7219] AH01630: client denied by server configuration: proxy:https://[MASKED]/.well-known/logs233/index.php [Wed Jul 08 16:48:51.246101 2026] [authz_core:error] [pid 4155083:tid 4155123] [client 20.212.211.89:7219] AH01630: client denied by server configuration: proxy:https://[MASKED]/wp-content/themes/haha.php [Wed Jul 08 16:48:51.411485 2026] [authz_core:error] [pid 4155083:tid 4155120] [client 20.212.211.89:7219] AH01630: client denied by server configuration: proxy:https://[MASKED]/wp-content/themes/theme/about.php [Wed Jul 08 16:48:51.571064 2026] [authz_core:error] [pid 4155083:tid 4155111] [client 20.212.211.89:7219] AH01630 ... show less	Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-07-08 16:32:23 (3 days ago)	Unauthorized access attempts: [GET] /wp-admin/maint/ [GET] /wp-admin/ [GET] /wp-content/themes/admi ... show more Unauthorized access attempts: [GET] /wp-admin/maint/ [GET] /wp-admin/ [GET] /wp-content/themes/admin.php [GET] /wp-content/uploads/ [GET] /fff.php [GET] /bolt.php [GET] /ff1.php [GET] /wp-content/plugins/plugin/index.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-07-08 16:15:25 (3 days ago)	20.212.211.89 - - [08/Jul/2026:17:15:24 +0100] "GET /cgi-bin/ HTTP/1.1" 404 1006 "-" "Mozilla/5.0 (W ... show more 20.212.211.89 - - [08/Jul/2026:17:15:24 +0100] "GET /cgi-bin/ HTTP/1.1" 404 1006 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot
🇩🇪 macrob	2026-07-08 15:56:18 (3 days ago)	2026/07/08 15:56:17 [error] 2206987#2206987: 360595784 access forbidden by rule, client: 20.212.211 ... show more 2026/07/08 15:56:17 [error] 2206987#2206987: 360595784 access forbidden by rule, client: 20.212.211.89, server: fastcredit.net.ua, request: "GET /.trash7206/index.php HTTP/2.0", host: "fastcredit.net.ua" 2026/07/08 15:56:17 [error] 2206987#2206987: 360595791 access forbidden by rule, client: 20.212.211.89, server: fastcredit.net.ua, request: "GET /wp-content/themes/haha.php HTTP/2.0", host: "fastcredit.net.ua" 2026/07/08 15:56:17 [error] 2206987#2206987: 360595784 access forbidden by rule, client: 20.212.211.89, server: fastcredit.net.ua, request: "GET /wp-content/themes/theme/about.php HTTP/2.0", host: "fastcredit.net.ua" ... show less	Web App Attack
🇮🇩 soc-yk	2026-07-08 15:54:14 (3 days ago)	Type: web_scanning Risk: 100 Events: 606 Evidence: - Automated hostile web probing detected - Repea ... show more Type: web_scanning Risk: 100 Events: 606 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Web App Attack

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 203.177.0.27

🇨🇴 200.118.81.23

🇻🇪 190.6.7.12

🇺🇸 152.32.234.184

🇺🇸 64.62.197.220

🇺🇸 63.135.161.35

🇭🇰 43.242.203.160

🇮🇩 202.10.43.162

🇺🇸 195.184.76.123

🇨🇴 190.248.124.39

🇦🇷 190.55.215.10

🇮🇩 182.9.193.60

🇭🇰 152.32.134.166

🇺🇸 147.185.132.149

🇧🇩 103.4.145.50

🇨🇳 101.245.68.130

🇺🇸 52.186.170.27

🇯🇵 43.167.245.18

🇮🇷 37.202.236.238

🇩🇪 213.209.159.238