JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.89.98.229

20.89.98.229 was found in our database!

This IP was reported 374 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.89.98.229

Whois 20.89.98.229

IP Abuse Reports for 20.89.98.229:

This IP address has been reported a total of 374 times from 158 distinct sources. 20.89.98.229 was first reported on March 12th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 conure.sh	2026-07-17 12:10:41 (1 month ago)	csagent: score 18.8: php 404 x5, 404 noise floor x5, php in uploads x1; 1 domain(s) in 0s	Web App Attack
🇮🇳 evicky2002	2026-04-30 13:04:29 (3 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-01 01:02:18 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2026-03-19 20:12:09 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇭 Origon	2026-03-19 14:19:52 (5 months ago)	recidive - IP: 20.89.98.229 - 2026-03-14 10:50:11,762 fail2ban.actions [3615306]: NOTICE [plesk-apa ... show more recidive - IP: 20.89.98.229 - 2026-03-14 10:50:11,762 fail2ban.actions [3615306]: NOTICE [plesk-apache] Ban 20.89.98.229 2026-03-14 13:10:32,816 fail2ban.actions [3615306]: NOTICE [plesk-apache] Ban 20.89.98.229 2026-03-14 13:59:52,252 fail2ban.actions [3615306]: NOTICE [plesk-apache] Ban 20.89.98.229 show less	Web App Attack
🇳🇱 Site.eu	2026-03-18 07:10:48 (5 months ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-18 01:20:44 (5 months ago)		Brute-Force Web App Attack
🇩🇪 ketovoila.pl	2026-03-17 23:25:09 (5 months ago)	ketovoila.pl HONEYPOT traffic: count=23, paths=23; sample_path=ketovoila.pl/wp-includes/Requests/src ... show more ketovoila.pl HONEYPOT traffic: count=23, paths=23; sample_path=ketovoila.pl/wp-includes/Requests/src/Response/about.php; UA=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36; window=2026-03-17T10:16:51Z..2026-03-17T10:16:51Z show less	Port Scan Hacking Brute-Force
🇹🇷 rtbh.com.tr	2026-03-17 20:12:07 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-03-17 19:01:08 (5 months ago)	20.89.98.229 - - [17/Mar/2026:21:00:03 +0200] "GET /wp-content/themes/haha.php HTTP/1.0" 404 116351 ... show more 20.89.98.229 - - [17/Mar/2026:21:00:03 +0200] "GET /wp-content/themes/haha.php HTTP/1.0" 404 116351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.98.229 - - [17/Mar/2026:21:00:04 +0200] "GET /wp-content/themes/haha.php HTTP/1.1" 404 20103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.98.229 - - [17/Mar/2026:21:00:04 +0200] "GET /wp-content/themes/theme/about.php HTTP/1.0" 404 116415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.98.229 - - [17/Mar/2026:21:00:06 +0200] "GET /wp-content/themes/theme/about.php HTTP/1.1" 404 20108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.98.229 - - [17/Mar/2026:21:01:06 +0200] "GET /wp-content/themes/admin.php HTTP/1.0" 404 116359 "-" "Mozilla/5. ... show less	Brute-Force Web App Attack
🇺🇸 myagent.site	2026-03-17 18:26:37 (5 months ago)	Blocking for trying to access an exploit file: /bolt.php	Hacking
🇩🇪 macrob	2026-03-17 18:21:56 (5 months ago)	2026/03/17 18:21:45 [error] 467277#467277: 82192352 access forbidden by rule, client: 20.89.98.229, ... show more 2026/03/17 18:21:45 [error] 467277#467277: 82192352 access forbidden by rule, client: 20.89.98.229, server: antzfund.com, request: "GET /admin.php HTTP/1.1", host: "antzfund.com" 2026/03/17 18:21:46 [error] 467277#467277: 82192389 access forbidden by rule, client: 20.89.98.229, server: antzfund.com, request: "GET /.trash7206/index.php HTTP/1.1", host: "antzfund.com" 2026/03/17 18:21:53 [error] 467277#467277: 82192352 access forbidden by rule, client: 20.89.98.229, server: antzfund.com, request: "GET /adminfuns.php HTTP/1.1", host: "antzfund.com" ... show less	Web App Attack
Anonymous	2026-03-17 17:54:20 (5 months ago)	[Tue Mar 17 18:54:18.896528 2026] [authz_core:error] [pid 6630] [client 20.89.98.229:5023] AH01630: ... show more [Tue Mar 17 18:54:18.896528 2026] [authz_core:error] [pid 6630] [client 20.89.98.229:5023] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Mar 17 18:54:19.125077 2026] [authz_core:error] [pid 6630] [client 20.89.98.229:5023] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Mar 17 18:54:19.353016 2026] [authz_core:error] [pid 6630] [client 20.89.98.229:5023] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-03-17 17:30:06 (5 months ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇦🇺 paulshipley.com.au	2026-03-17 17:18:56 (5 months ago)	bermanfamily.com.au:443 20.89.98.229 - - [18/Mar/2026:04:18:51 +1100] "GET /bolt.php HTTP/1.1" 404 3 ... show more bermanfamily.com.au:443 20.89.98.229 - - [18/Mar/2026:04:18:51 +1100] "GET /bolt.php HTTP/1.1" 404 3559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.89.98.229 - - [18/Mar/2026:04:18:52 +1100] "GET /ff1.php HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.89.98.229 - - [18/Mar/2026:04:18:52 +1100] "GET /about.php HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.89.98.229 - - [18/Mar/2026:04:18:52 +1100] "GET /admin.php HTTP/1.1" 404 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" bermanfamily.com.au:443 20.89.98.229 - - [18/Mar/2026:04:18:52 +1100] "GET /new.php HTTP/1.1" 404 561 "-" "Mozilla ... show less	Web App Attack

Showing 1 to 15 of 374 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.105

🇮🇳 172.217.38.27

🇺🇸 100.29.34.97

🇫🇷 92.222.104.202

🇳🇱 5.188.86.234

🇧🇷 200.237.93.36

🇺🇸 159.203.120.106

🇧🇷 143.137.39.139

🇮🇳 117.222.119.47

🇺🇸 104.209.144.33

🇵🇰 103.48.0.102

🇸🇬 101.47.161.49

🇫🇷 95.111.251.70

🇫🇷 92.222.108.126

🇦🇿 91.135.244.68

🇺🇸 66.132.195.72

🇱🇹 213.176.26.123

🇨🇳 124.70.97.100

🇨🇳 122.6.148.254

🇵🇱 109.205.211.91