JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.89.218.249

20.89.218.249

Neutral Activity

88 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇯🇵 Japan

City

Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.89.218.249 has been reported 88 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.89.218.249:

This IP address has been reported a total of 88 times from 75 distinct sources. 20.89.218.249 was first reported on December 20th 2025, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2025-12-31 07:18:43 (8 months ago)	Unauthorized web scan.	Web App Attack
Anonymous	2025-12-25 15:03:17 (8 months ago)	20.89.218.249 - - [20/Dec/2025:14:25:51 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.89.218.249 - - [20/Dec/2025:14:25:51 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 465 "-" "-" 20.89.218.249 - - [20/Dec/2025:14:25:53 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 500 4057 "-" "-" 20.89.218.249 - - [20/Dec/2025:14:26:14 +0100] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 302 417 "-" "-" ... show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2025-12-21 22:59:34 (8 months ago)	Auto-ban: 211 malicious requests on 2025-12-20 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 211 malicious requests on 2025-12-20 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH
🇺🇸 octageeks.com	2025-12-21 05:06:35 (8 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇭🇺 DumaNet	2025-12-21 00:49:00 (8 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 20. 15:20:28 Source IP: 20.89. ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 20. 15:20:28 Source IP: 20.89.218.249 Portion of the log(s): 20.89.218.249 - [20/Dec/2025:15:20:28 +0100] "GET /lib.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:15:20:27 +0100] "GET /atomlib.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:15:20:27 +0100] "GET /build.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:15:20:27 +0100] "GET /mans.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:15:20:27 +0100] "GET /wp-includes/IXR/about.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:15:20:26 +0100] "GET /asas.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:15:20:26 +0100] "GET /mah.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:15:20:26 +0100] "GET /wp-links-opml.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:15:20:26 +0100] "GET /wp-admin/maint/index.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:15:20:25 +0100] "GET /test2.php show less	Web App Attack
🇬🇧 [email protected]	2025-12-21 00:48:48 (8 months ago)	...	Brute-Force SSH
🇭🇺 DumaNet	2025-12-21 00:16:00 (8 months ago)	WordPress plugin attack attempts. Date: 2025 Dec 20. 14:48:22 Source IP: 20.89.218.249 Portion ... show more WordPress plugin attack attempts. Date: 2025 Dec 20. 14:48:22 Source IP: 20.89.218.249 Portion of the log(s): 20.89.218.249 - [20/Dec/2025:14:48:22 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:14:48:21 +0100] "GET /wp-admin/admin-post.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:14:48:21 +0100] "GET /moon.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:14:48:21 +0100] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:14:48:20 +0100] "GET /admir.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:14:48:20 +0100] "GET /bless5.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:14:48:20 +0100] "GET /mds.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:14:48:20 +0100] "GET /ahax.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:14:48:19 +0100] "GET /n.php HTTP/1.1" 404 153 "-" "-" 20.89.218.249 - [20/Dec/2025:14:48:19 +0100] "GET /333.php HTTP/1.1" 404 show less	Hacking Web App Attack
🇳🇱 Site.eu	2025-12-21 00:06:01 (8 months ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 homeshowdomain.nl	2025-12-20 22:59:04 (8 months ago)	Auto-ban: >3000 req/min op 2025-12-20	Hacking Web App Attack SSH
🇩🇪 LRob	2025-12-20 18:48:22 (8 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇦 URAN Publishing Service	2025-12-20 18:45:34 (8 months ago)	20.89.218.249 - - [20/Dec/2025:20:45:33 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.89.218.249 - - [20/Dec/2025:20:45:33 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 279 "-" "-" ... show less	Web App Attack
🇫🇮 Christopher Hughes	2025-12-20 18:45:12 (8 months ago)	[Sat Dec 20 18:45:10.784497 2025] [proxy_fcgi:error] [pid 2574151:tid 140346017171008] [client 20.89 ... show more [Sat Dec 20 18:45:10.784497 2025] [proxy_fcgi:error] [pid 2574151:tid 140346017171008] [client 20.89.218.249:58201] AH01071: Got error 'Primary script unknown' [Sat Dec 20 18:45:11.270951 2025] [proxy_fcgi:error] [pid 2574151:tid 140346126210624] [client 20.89.218.249:58201] AH01071: Got error 'Primary script unknown' [Sat Dec 20 18:45:11.765472 2025] [proxy_fcgi:error] [pid 2574151:tid 140345060861504] [client 20.89.218.249:58201] AH01071: Got error 'Primary script unknown' [Sat Dec 20 18:45:12.101551 2025] [proxy_fcgi:error] [pid 2574151:tid 140345102825024] [client 20.89.218.249:58201] AH01071: Got error 'Primary script unknown' [Sat Dec 20 18:45:12.519638 2025] [proxy_fcgi:error] [pid 2574151:tid 140346168174144] [client 20.89.218.249:58201] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2025-12-20 18:44:39 (8 months ago)	(mod_security) mod_security triggered on hostname [redacted] 20.89.218.249 (-)	SQL Injection
🇳🇱 wolfemium	2025-12-20 18:43:20 (8 months ago)	20.89.218.249 - - [20/Dec/2025:20:43:19 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.89.218.249 - - [20/Dec/2025:20:43:19 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 20.89.218.249 - - [20/Dec/2025:20:43:19 +0200] "GET /shoha.php HTTP/1.1" 404 146 "-" "-" 20.89.218.249 - - [20/Dec/2025:20:43:20 +0200] "GET /raw.php HTTP/1.1" 404 146 "-" "-" 20.89.218.249 - - [20/Dec/2025:20:43:20 +0200] "GET /an7.php HTTP/1.1" 404 146 "-" "-" 20.89.218.249 - - [20/Dec/2025:20:43:20 +0200] "GET /333.php HTTP/1.1" 404 146 "-" "-" 20.89.218.249 - - [20/Dec/2025:20:43:20 +0200] "GET /n.php HTTP/1.1" 404 146 "-" "-" ... show less	DDoS Attack
🇫🇮 Christopher Hughes	2025-12-20 18:24:55 (8 months ago)	[Sat Dec 20 18:24:52.988572 2025] [proxy_fcgi:error] [pid 2574151:tid 140346159781440] [client 20.89 ... show more [Sat Dec 20 18:24:52.988572 2025] [proxy_fcgi:error] [pid 2574151:tid 140346159781440] [client 20.89.218.249:46729] AH01071: Got error 'Primary script unknown' [Sat Dec 20 18:24:53.267492 2025] [proxy_fcgi:error] [pid 2574151:tid 140346134603328] [client 20.89.218.249:46729] AH01071: Got error 'Primary script unknown' [Sat Dec 20 18:24:53.598865 2025] [proxy_fcgi:error] [pid 2574151:tid 140345052468800] [client 20.89.218.249:46729] AH01071: Got error 'Primary script unknown' [Sat Dec 20 18:24:53.856764 2025] [proxy_fcgi:error] [pid 2574151:tid 140344557561408] [client 20.89.218.249:46729] AH01071: Got error 'Primary script unknown' [Sat Dec 20 18:24:54.382866 2025] [proxy_fcgi:error] [pid 2574151:tid 140345991992896] [client 20.89.218.249:46729] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.55

🇰🇪 154.70.39.208

🇳🇱 91.92.42.39

🇺🇸 66.132.186.240

🇺🇸 64.62.197.228

🇺🇸 64.62.197.202

🇺🇸 64.62.156.187

🇻🇳 14.191.33.74

🇭🇷 213.147.113.186

🇧🇷 205.210.31.211

🇺🇦 188.124.228.197

🇧🇷 187.28.1.110

🇮🇳 182.18.161.165

🇯🇵 159.28.70.186

🇹🇳 102.156.74.13

🇳🇱 91.92.42.180

🇧🇬 79.124.58.90

🇮🇹 79.52.12.40

🇺🇸 65.49.20.75

🇰🇷 61.72.145.38