JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.89.217.165

Neutral Activity

Abuse confidence score ?

0% Low Risk

149 reports

120 reporters · latest 9 months ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Osaka, Osaka

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.89.217.165 has been reported 149 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.89.217.165

Export CSV

This IP address has been reported a total of 149 times from 120 distinct sources. 20.89.217.165 was first reported on December 5th 2025, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 laietania.net	2025-12-24 16:46:00 (9 months ago)	Web-App Strong Attack	Web App Attack
Anonymous	2025-12-15 08:06:44 (9 months ago)	Blocked: Reason='Auto-block via DW'; Requests=0	Hacking
🇺🇸 bazter.pro	2025-12-08 07:14:00 (9 months ago)	CRITICAL: Sensitive files (21) [Paths: 257]	Web App Attack
🇳🇱 Site.eu	2025-12-08 04:25:07 (9 months ago)	Excessive 404/403 errors	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-07 20:10:19 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇭🇺 DumaNet	2025-12-07 03:49:00 (9 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 06. 00:35:10 Source IP: 20.89. ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 06. 00:35:10 Source IP: 20.89.217.165 Portion of the log(s): 20.89.217.165 - [06/Dec/2025:00:35:01 +0100] "GET /chosen.php HTTP/1.1" 404 555 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 20.89.217.165 - [06/Dec/2025:00:35:01 +0100] "GET /cc.php HTTP/1.1" 404 555 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.89.217.165 - [06/Dec/2025:00:35:00 +0100] "GET /buy.php HTTP/1.1" 404 555 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.89.217.165 - [06/Dec/2025:00:35:00 +0100] "GET /bless.php HTTP/1.1" 404 555 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari show less	Web App Attack
🇭🇺 DumaNet	2025-12-07 03:15:00 (9 months ago)	WordPress plugin attack attempts. Date: 2025 Dec 05. 16:43:00 Source IP: 20.89.217.165 Portion ... show more WordPress plugin attack attempts. Date: 2025 Dec 05. 16:43:00 Source IP: 20.89.217.165 Portion of the log(s): 20.89.217.165 - [05/Dec/2025:16:42:52 +0100] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 555 "https://duckduckgo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 20.89.217.165 - [05/Dec/2025:16:42:51 +0100] "GET /wp-content/languages/index.php HTTP/1.1" 404 153 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 20.89.217.165 - [05/Dec/2025:16:42:51 +0100] "GET /wp-content/index.php HTTP/1.1" 404 555 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 20.89.217.165 - [05/Dec/2025:16:42:51 +0100] "GET /wp-content/edit.php HTTP/1.1" 404 153 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7 show less	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-06 23:01:26 (9 months ago)	Auto-ban: 11 malicious requests on 2025-12-05 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 11 malicious requests on 2025-12-05 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2025-12-06 20:10:19 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2025-12-06 06:15:06 (9 months ago)	173 attacks on PHP URLs, FCKeditor URLs: GET /moon.php HTTP/1.1 GET /admin/fckeditor/editor/filemana ... show more 173 attacks on PHP URLs, FCKeditor URLs: GET /moon.php HTTP/1.1 GET /admin/fckeditor/editor/filemanager/ HTTP/1.1 show less	Web App Attack
🇧🇪 taivas.nl	2025-12-06 05:32:56 (9 months ago)	Many_bad_calls	Web App Attack
🇺🇸 octageeks.com	2025-12-06 05:06:49 (9 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 [email protected]	2025-12-06 04:00:17 (9 months ago)	Fail2Ban jail apache-json-scanners detected activity on 2025-12-06T04:00:17Z	Brute-Force
🇬🇧 findlab	2025-12-06 03:45:02 (9 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇬🇧 SecondEdge	2025-12-06 03:17:31 (9 months ago)	A web attack was detected from 20.89.217.165 (Japan / Ōsaka / Osaka) against lifeofstu.co.uk (Admin, ... show more A web attack was detected from 20.89.217.165 (Japan / Ōsaka / Osaka) against lifeofstu.co.uk (Admin,CGI-BIN,PHPUnit,Wordpress,Wordpress Admin,XMLRPC) over 5m7s. show less	Web App Attack

Showing 1 to 15 of 149 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 139.216.6.17

🇺🇸 70.183.235.22

🇺🇸 46.18.90.10

🇺🇸 20.55.22.35

🇬🇧 18.134.208.43

🇬🇧 3.8.102.231

🇺🇸 108.218.219.106

🇻🇳 103.189.208.13

🇺🇿 89.126.214.24

🇳🇱 77.239.124.150

🇺🇸 52.249.217.160

🇭🇰 45.120.216.232

🇧🇷 205.210.31.158

🇮🇳 118.214.188.53

🇿🇦 102.23.147.135

🇺🇦 91.224.179.30

🇺🇸 47.77.215.90

🇸🇬 43.159.34.167

🇿🇦 41.181.173.252

🇮🇱 37.142.148.99