JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.89.51.225

20.89.51.225 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.89.51.225

Whois 20.89.51.225

IP Abuse Reports for 20.89.51.225:

This IP address has been reported a total of 132 times from 118 distinct sources. 20.89.51.225 was first reported on July 3rd 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 sms.ru	2026-07-03 20:51:59 (7 minutes ago)	//wp-admin/user/index.php	Web App Attack
🇳🇿 Tripwire	2026-07-03 20:50:24 (9 minutes ago)	Scanning for exploits - /wp-content/plugins/hellopress/wp_filemanager.php	Hacking Web App Attack
🇫🇮 6kilowatti	2026-07-03 20:28:22 (31 minutes ago)	2026/07/03 23:28:21 [error] 1184#1184: 23603 FastCGI sent in stderr: "Primary script unknown" while ... show more 2026/07/03 23:28:21 [error] 1184#1184: 23603 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.89.51.225, server: wp.6kw.fi, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/wp.6kw.fi.sock:", host: "wp.6kw.fi" 2026/07/03 23:28:22 [error] 1184#1184: *23603 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.89.51.225, server: wp.6kw.fi, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/wp.6kw.fi.sock:", host: "wp.6kw.fi" ... show less	Web App Attack
🇩🇪 langenkamp-media	2026-07-03 20:15:58 (43 minutes ago)	Fail2Ban: Banned from jail nginx-nohome on 3dausdu.de	Web App Attack
🇺🇸 nasset	2026-07-03 20:08:37 (51 minutes ago)	20.89.51.225 - - [03/Jul/2026:13:08:35 -0700] "GET /spurwing.php HTTP/1.1" 403 584 "-" "-" 20.89.51. ... show more 20.89.51.225 - - [03/Jul/2026:13:08:35 -0700] "GET /spurwing.php HTTP/1.1" 403 584 "-" "-" 20.89.51.225 - - [03/Jul/2026:13:08:36 -0700] "GET /root.php HTTP/1.1" 403 584 "-" "-" 20.89.51.225 - - [03/Jul/2026:13:08:36 -0700] "GET /auu.php HTTP/1.1" 403 584 "-" "-" 20.89.51.225 - - [03/Jul/2026:13:08:36 -0700] "GET /miru1.php HTTP/1.1" 403 584 "-" "-" 20.89.51.225 - - [03/Jul/2026:13:08:36 -0700] "GET /wp-monkonas.php HTTP/1.1" 403 584 "-" "-" ... show less	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-07-03 20:07:08 (52 minutes ago)	20.89.51.225 - - [03/Jul/2026:14:07:02 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.89.51.225 - - [03/Jul/2026:14:07:02 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" 20.89.51.225 - - [03/Jul/2026:14:07:02 -0600] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 27 "-" "-" 20.89.51.225 - - [03/Jul/2026:14:07:03 -0600] "GET /zoko.php HTTP/1.1" 404 27 "-" "-" 20.89.51.225 - - [03/Jul/2026:14:07:03 -0600] "GET /w.php HTTP/1.1" 404 27 "-" "-" 20.89.51.225 - - [03/Jul/2026:14:07:03 -0600] "GET /133.php HTTP/1.1" 404 27 "-" "-" 20.89.51.225 - - [03/Jul/2026:14:07:03 -0600] "GET /7.php HTTP/1.1" 404 27 "-" "-" 20.89.51.225 - - [03/Jul/2026:14:07:04 -0600] "GET /wp3.php HTTP/1.1" 404 27 "-" "-" 20.89.51.225 - - [03/Jul/2026:14:07:04 -0600] "GET //7.php? HTTP/1.1" 404 27 "-" "-" 20.89.51.225 - - [03/Jul/2026:14:07:04 -0600] "GET /faze.php HTTP/1.1" 404 27 "-" "-" 20.89.51.225 - - [03/Jul/2026:14:07:04 -0600] "GET /axds.php HTTP/1.1" 404 27 "-" "-" 20.89.51.225 - - [03/Jul/2026:14:07:05 -0600] "GET /nz.php HTTP/1.1" 404 27 "-" "-" 20.8 ... show less	Web App Attack
Anonymous	2026-07-03 20:05:09 (54 minutes ago)	PHP file probing detected by Fail2Ban	Web App Attack
🇺🇸 mccsoft.io	2026-07-03 20:01:21 (58 minutes ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇫🇷 Entalpi.net	2026-07-03 19:58:03 (1 hour ago)	Repeated requests against sensitive web endpoints	Web App Attack
🇩🇪 BiancaNL	2026-07-03 19:46:38 (1 hour ago)	Fail2Ban: jail=nginx-exploit-probes on <fqdn> (port=<port>)	Hacking
🇩🇪 Dominik Lysiak	2026-07-03 19:44:39 (1 hour ago)	20.89.51.225 - - [03/Jul/2026:21:44:08 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.89.51.225 - - [03/Jul/2026:21:44:08 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 20.89.51.225 - - [03/Jul/2026:21:44:08 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146 "-" "-" 20.89.51.225 - - [03/Jul/2026:21:44:08 +0200] "GET /zoko.php HTTP/1.1" 404 146 "-" "-" 20.89.51.225 - - [03/Jul/2026:21:44:09 +0200] "GET /w.php HTTP/1.1" 404 146 "-" "-" 20.89.51.225 - - [03/Jul/2026:21:44:09 +0200] "GET /133.php HTTP/1.1" 404 146 "-" "-" 20.89.51.225 - - [03/Jul/2026:21:44:10 +0200] "GET /7.php HTTP/1.1" 404 146 "-" "-" 20.89.51.225 - - [03/Jul/2026:21:44:10 +0200] "GET /wp3.php HTTP/1.1" 404 146 "-" "-" 20.89.51.225 - - [03/Jul/2026:21:44:11 +0200] "GET //7.php? HTTP/1.1" 404 146 "-" "-" 20.89.51.225 - - [03/Jul/2026:21:44:11 +0200] "GET /faze.php HTTP/1.1" 404 146 "-" "-" 20.89.51.225 - - [03/Jul/2026:21:44:12 +0200] "GET /axds.php HTTP/1.1" 404 146 "-" "-" 20.89.51.225 - - [03/Jul/2026:21:44:13 +0200] "GET /nz.php HTTP/1.1" 404 146 " ... show less	Web App Attack
🇺🇸 jkcunningham	2026-07-03 19:33:08 (1 hour ago)	Vulnerability scanner. Scans for wordpress filesystem, targets web-application filesystem, scans for ... show more Vulnerability scanner. Scans for wordpress filesystem, targets web-application filesystem, scans for system vulnerabilities and misconfigurations. show less	Web App Attack Bad Web Bot Port Scan
Anonymous	2026-07-03 19:29:05 (1 hour ago)	20.89.51.225 - - [03/Jul/2026:15:27:21 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.89.51.225 - - [03/Jul/2026:15:27:21 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 93668 "-" "-" 20.89.51.225 - - [03/Jul/2026:15:27:23 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.0" 404 93630 "-" "-" 20.89.51.225 - - [03/Jul/2026:15:27:25 -0400] "GET /zoko.php HTTP/1.0" 404 93588 "-" "-" 20.89.51.225 - - [03/Jul/2026:15:27:27 -0400] "GET /w.php HTTP/1.0" 404 93582 "-" "-" 20.89.51.225 - - [03/Jul/2026:15:27:30 -0400] "GET /133.php HTTP/1.0" 404 93586 "-" "-" 20.89.51.225 - - [03/Jul/2026:15:27:32 -0400] "GET /7.php HTTP/1.0" 404 93582 "-" "-" 20.89.51.225 - - [03/Jul/2026:15:27:34 -0400] "GET /wp3.php HTTP/1.0" 404 93586 "-" "-" 20.89.51.225 - - [03/Jul/2026:15:27:37 -0400] "GET /7.php HTTP/1.0" 404 93582 "-" "-" 20.89.51.225 - - [03/Jul/2026:15:27:39 -0400] "GET /faze.php HTTP/1.0" 404 93588 "-" "-" 20.89.51.225 - - [03/Jul/2026:15:27:42 -0400] "GET /axds.php HTTP/1.0" 404 93588 "-" "-" 20.89.51.225 - - [03/Jul/2026:15:27:44 -0400] "GET /nz.php H ... show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 Erpelstolz	2026-07-03 19:19:21 (1 hour ago)	VM 131: 20.89.51.225 - - [03/Jul/2026:21:19:20 +0200] "GET /wp-content/plugins/hellopress/wp_fileman ... show more VM 131: 20.89.51.225 - - [03/Jul/2026:21:19:20 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 768 show less	Web App Attack
Anonymous	2026-07-03 19:18:55 (1 hour ago)	XSS Attempt	Hacking

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.210.157

🇲🇾 1.9.183.50

🇨🇳 218.202.112.10

🇧🇷 205.210.31.236

🇨🇳 120.82.84.143

🇨🇳 120.48.17.184

🇺🇦 91.234.6.135

🇺🇸 66.132.195.85

🇨🇦 45.3.40.243

🇯🇵 43.165.185.177

🇲🇾 1.9.164.197

🇧🇷 177.10.203.106

🇩🇪 151.123.178.213

🇰🇼 37.37.193.187

🇨🇳 218.0.63.25

🇭🇰 199.45.155.88

🇮🇳 185.100.212.141

🇵🇱 176.53.159.197

🇺🇸 172.203.134.70

🇺🇸 165.154.182.204