This IP address has been reported a total of
95
times from
81 distinct
sources.
20.89.253.114 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.89.253.114 (JP/Japan/-): 1 in the last 360 ...
show more(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.89.253.114 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.89.253.114 - - [25/Jun/2026:21:57:03 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 323 "-" "-" "-" host=comprendoschool.it
show less
(upload_shell) srv103 Shell upload 20.89.253.114 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Di ...
show more(upload_shell) srv103 Shell upload 20.89.253.114 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 20.89.253.114 (JP/Japan/-)
[AUTORAVALT][[25/06/2026 - 16:28:29 -03:00 UTC]
Attack from [Microsoft Corporation]
[20.89.253.114] ...
show more[AUTORAVALT][[25/06/2026 - 16:28:29 -03:00 UTC]
Attack from [Microsoft Corporation]
[20.89.253.114] Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software ]
...
show less
(mod_security) mod_security (id:20000010) triggered by 20.89.253.114 (JP/Japan/-): 5 in the last 300 ...
show more(mod_security) mod_security (id:20000010) triggered by 20.89.253.114 (JP/Japan/-): 5 in the last 300 secs (CF_ENABLE)
show less