JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.240.90.92

Neutral Activity

Abuse Confidence Score

0% Low Risk

83 reports

71 reporters · latest 1 year ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇸🇪 Sweden
City: Gavle, Gavleborg

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.240.90.92 has been reported 83 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

83 from 71 distinct reporters

First reported

September 4th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 NyaljBe	2025-09-08 08:53:00 UTC · (1 year ago)	20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /backup.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /cgi-bin/file.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /cgi-bin/xmrlpc.php ... show more 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /backup.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /cgi-bin/file.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /autoload_classmap/function.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:39:39 +0200] "GET /atomlib.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /assets/atomlib.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /wp-signup.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /browse.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /about.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:18:35:39 +0200] "GET /cong.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇭🇺 DumaNet	2025-09-07 02:37:00 UTC · (1 year ago)	WordPress plugin attack attempts. Date: 2025 Sep 05. 15:44:42 Source IP: 20.240.90.92 Portion of the log(s): 20.240.90.92 - [05/Sep/2025:15:44:41 +0200] "GET /wp-content/themes/index.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15 ... show more WordPress plugin attack attempts. Date: 2025 Sep 05. 15:44:42 Source IP: 20.240.90.92 Portion of the log(s): 20.240.90.92 - [05/Sep/2025:15:44:41 +0200] "GET /wp-content/themes/index.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:44:41 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:44:41 +0200] "GET /wp-content/themes/about.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:44:41 +0200] "GET /wp-content/index.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:44:41 +0200] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:44:41 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:44:41 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:44:41 +0200] "GET /wp-content/plugins/WordPressCore/cong.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:44:41 +0200] "GET /wp-admin/ show less	Hacking Web App Attack
🇭🇺 DumaNet	2025-09-07 02:11:00 UTC · (1 year ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Sep 05. 15:35:45 Source IP: 20.240.90.92 Portion of the log(s): 20.240.90.92 - [05/Sep/2025:15:35:39 +0200] "GET /backup.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025: ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Sep 05. 15:35:45 Source IP: 20.240.90.92 Portion of the log(s): 20.240.90.92 - [05/Sep/2025:15:35:39 +0200] "GET /backup.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:35:39 +0200] "GET /cgi-bin/file.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:35:39 +0200] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:35:39 +0200] "GET /autoload_classmap/function.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:35:39 +0200] "GET /autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:35:39 +0200] "GET /atomlib.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:35:39 +0200] "GET /assets/atomlib.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:35:39 +0200] "GET /wp-signup.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:35:39 +0200] "GET /browse.php HTTP/1.1" 404 153 "-" "-" 20.240.90.92 - [05/Sep/2025:15:35:39 show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-09-06 20:08:39 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2025-09-06 05:14:07 UTC · (1 year ago)	106 attacks on PHP URLs: GET /.well-known/acme-challenge/muse.php HTTP/1.1	Web App Attack
🇺🇸 octageeks.com	2025-09-06 04:06:59 UTC · (1 year ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇺🇸 deskpass.com	2025-09-06 00:51:40 UTC · (1 year ago)	GET /wp-includes/IXR/admin.php	Web App Attack
Anonymous	2025-09-06 00:00:39 UTC · (1 year ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Brute-Force Bad Web Bot Web App Attack
🇺🇸 snappic	2025-09-05 23:34:36 UTC · (1 year ago)	Malicious URI path & NULL user agent [GET /file.php] [NULL user agent]	Bad Web Bot Web App Attack
Anonymous	2025-09-05 22:58:28 UTC · (1 year ago)	[Fri Sep 05 22:58:28.222175 2025] [proxy_fcgi:error] [pid 1480977:tid 1480977] [client 20.240.90.92:3793] AH01071: Got error 'Primary script unknown' [Fri Sep 05 22:58:28.266106 2025] [proxy_fcgi:error] [pid 1480977:tid 1480977] [client 20.240.90.92: ... show more [Fri Sep 05 22:58:28.222175 2025] [proxy_fcgi:error] [pid 1480977:tid 1480977] [client 20.240.90.92:3793] AH01071: Got error 'Primary script unknown' [Fri Sep 05 22:58:28.266106 2025] [proxy_fcgi:error] [pid 1480977:tid 1480977] [client 20.240.90.92:3793] AH01071: Got error 'Primary script unknown' [Fri Sep 05 22:58:28.310852 2025] [proxy_fcgi:error] [pid 1480977:tid 1480977] [client 20.240.90.92:3793] AH01071: Got error 'Primary script unknown' [Fri Sep 05 22:58:28.358247 2025] [proxy_fcgi:error] [pid 1480977:tid 1480977] [client 20.240.90.92:3793] AH01071: Got error 'Primary script unknown' [Fri Sep 05 22:58:28.406158 2025] [proxy_fcgi:error] [pid 1480977:tid 1480977] [client 20.240.90.92:3793] AH01071: Got error 'Primary script unknown' ... show less	Hacking
🇩🇪 SpaceHost-Server	2025-09-05 22:56:47 UTC · (1 year ago)		Brute-Force Web App Attack
🇩🇪 Skyrider	2025-09-05 21:08:54 UTC · (1 year ago)	20.240.90.92 - - [05/Sep/2025:23:08:53 +0200] "GET /gmo.php HTTP/2.0" 404 8506 "-" "-" 20.240.90.92 - - [05/Sep/2025:23:08:53 +0200] "GET /elp.php HTTP/2.0" 404 8506 "-" "-" 20.240.90.92 - - [05/Sep/2025:23:08:53 +0200] "GET /aa.php HTTP/2.0" 404 850 ... show more 20.240.90.92 - - [05/Sep/2025:23:08:53 +0200] "GET /gmo.php HTTP/2.0" 404 8506 "-" "-" 20.240.90.92 - - [05/Sep/2025:23:08:53 +0200] "GET /elp.php HTTP/2.0" 404 8506 "-" "-" 20.240.90.92 - - [05/Sep/2025:23:08:53 +0200] "GET /aa.php HTTP/2.0" 404 8505 "-" "-" 20.240.90.92 - - [05/Sep/2025:23:08:54 +0200] "GET /file.php HTTP/2.0" 404 8504 "-" "-" 20.240.90.92 - - [05/Sep/2025:23:08:54 +0200] "GET /wp-file.php HTTP/2.0" 404 8507 "-" "-" show less	Bad Web Bot Web App Attack
🇩🇪 Blexyel	2025-09-05 20:49:25 UTC · (1 year ago)	20.240.90.92 - - [05/Sep/2025:20:49:23 +0000] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 162 "-" "-" ...	Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-09-05 20:08:37 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 Ba-Yu	2025-09-05 19:04:46 UTC · (1 year ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 207.175.202.245

🇮🇳 182.156.80.11

🇸🇬 159.65.1.19

🇩🇪 45.135.193.194

🇨🇦 207.194.98.248

🇧🇬 185.253.159.94

🇸🇾 185.174.237.217

🇺🇸 184.32.86.108

🇵🇱 172.64.200.10

🇨🇦 142.114.87.131

🇺🇸 104.23.245.16

🇺🇸 104.23.160.120

🇫🇷 85.217.140.52

🇫🇷 81.65.151.84

🇹🇷 78.163.161.65

🇸🇪 31.208.14.62

🇺🇸 205.210.31.108

🇳🇱 204.76.203.213

🇲🇦 197.146.244.130

🇨🇴 179.12.180.53