JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

13.89.203.200

Neutral Activity

Abuse Confidence Score

0% Low Risk

193 reports

116 reporters · latest 1 year ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Des Moines, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

13.89.203.200 has been reported 193 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

193 from 116 distinct reporters

First reported

September 6th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-12 20:08:45 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇹 mgarofano80	2025-09-12 02:16:24 UTC · (1 year ago)		Brute-Force Web App Attack
🇩🇪 SpaceHost-Server	2025-09-11 22:26:14 UTC · (1 year ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-09-11 20:08:44 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇭🇺 DumaNet	2025-09-11 09:20:00 UTC · (1 year ago)	WordPress plugin attack attempts. Date: 2025 Sep 10. 03:34:38 Source IP: 13.89.203.200 Portion of the log(s): 13.89.203.200 - [10/Sep/2025:03:34:33 +0200] "GET /bak.php HTTP/1.1" 404 153 "-" "-" 13.89.203.200 - [10/Sep/2025:03:34:33 +0200] "GE ... show more WordPress plugin attack attempts. Date: 2025 Sep 10. 03:34:38 Source IP: 13.89.203.200 Portion of the log(s): 13.89.203.200 - [10/Sep/2025:03:34:33 +0200] "GET /bak.php HTTP/1.1" 404 153 "-" "-" 13.89.203.200 - [10/Sep/2025:03:34:33 +0200] "GET /wp-setup.php HTTP/1.1" 404 153 "-" "-" 13.89.203.200 - [10/Sep/2025:03:34:33 +0200] "GET /wp-content/index.php HTTP/1.1" 404 153 "-" "-" 13.89.203.200 - [10/Sep/2025:03:34:32 +0200] "GET /wp-api.php HTTP/1.1" 404 153 "-" "-" 13.89.203.200 - [10/Sep/2025:03:34:32 +0200] "GET /wp-admin/setup-config.php HTTP/1.1" 404 153 "-" "-" 13.89.203.200 - [10/Sep/2025:03:34:32 +0200] "GET /wp-admin/js/index.php HTTP/1.1" 404 153 "-" "-" 13.89.203.200 - [10/Sep/2025:03:34:32 +0200] "GET /wp-admin/images/moon.php HTTP/1.1" 404 153 "-" "-" 13.89.203.200 - [10/Sep/2025:03:34:32 +0200] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 153 "-" "-" 13.89.203.200 - [10/Sep/2025:03:34:32 +0200] "GET /users.php HTTP/1.1" 404 153 "-" "-" 13.89.203.200 - [10/Sep/2025:03:34 show less	Hacking Web App Attack
🇮🇹 mauri64	2025-09-10 23:30:22 UTC · (1 year ago)	Troppi errori Apache (51)	Hacking
🇫🇮 Christopher Hughes	2025-09-10 21:11:52 UTC · (1 year ago)	[Wed Sep 10 22:11:51.567559 2025] [proxy_fcgi:error] [pid 3610184:tid 140346126210624] [client 13.89.203.200:9634] AH01071: Got error 'Primary script unknown' [Wed Sep 10 22:11:51.706181 2025] [proxy_fcgi:error] [pid 3610184:tid 140345622910528] [cli ... show more [Wed Sep 10 22:11:51.567559 2025] [proxy_fcgi:error] [pid 3610184:tid 140346126210624] [client 13.89.203.200:9634] AH01071: Got error 'Primary script unknown' [Wed Sep 10 22:11:51.706181 2025] [proxy_fcgi:error] [pid 3610184:tid 140345622910528] [client 13.89.203.200:9634] AH01071: Got error 'Primary script unknown' [Wed Sep 10 22:11:51.899788 2025] [proxy_fcgi:error] [pid 3610184:tid 140345631303232] [client 13.89.203.200:9634] AH01071: Got error 'Primary script unknown' [Wed Sep 10 22:11:52.038223 2025] [proxy_fcgi:error] [pid 3610184:tid 140345052468800] [client 13.89.203.200:9634] AH01071: Got error 'Primary script unknown' [Wed Sep 10 22:11:52.176517 2025] [proxy_fcgi:error] [pid 3610184:tid 140345060861504] [client 13.89.203.200:9634] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 Jochen Pretli	2025-09-10 20:16:08 UTC · (1 year ago)	connection to honeypot	Email Spam Port Scan
🇩🇪 macrob	2025-09-10 20:09:02 UTC · (1 year ago)	2025/09/10 20:09:00 [error] 177241#177241: 43497250 access forbidden by rule, client: 13.89.203.200, server: binixo.ph, request: "GET /wp-admin/ HTTP/2.0", host: "binixo.ph" 2025/09/10 20:09:01 [error] 177241#177241: 43497250 access forbidden by ru ... show more 2025/09/10 20:09:00 [error] 177241#177241: 43497250 access forbidden by rule, client: 13.89.203.200, server: binixo.ph, request: "GET /wp-admin/ HTTP/2.0", host: "binixo.ph" 2025/09/10 20:09:01 [error] 177241#177241: 43497250 access forbidden by rule, client: 13.89.203.200, server: binixo.ph, request: "GET /wp-content/wp-conflg.php HTTP/2.0", host: "binixo.ph" 2025/09/10 20:09:01 [error] 177246#177246: *43522702 access forbidden by rule, client: 13.89.203.200, server: binixo.ph, request: "GET /wp-includes/IXR/autoload_classmap.php HTTP/2.0", host: "binixo.ph" ... show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-09-10 20:08:43 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 Nightreaver	2025-09-10 17:06:13 UTC · (1 year ago)	13.89.203.200 - - [10/Sep/2025:19:06:12 0200] "GET /cong.php HTTP/1.1" 404 431 "-" "-" 13.89.203.200 - - [10/Sep/2025:19:06:12 0200] "GET /file.php HTTP/1.1" 404 431 "-" "-" 13.89.203.200 - - [10/Sep/2025:19:06:12 0200] "GET /file2.php HTTP/1.1" 4 ... show more 13.89.203.200 - - [10/Sep/2025:19:06:12 0200] "GET /cong.php HTTP/1.1" 404 431 "-" "-" 13.89.203.200 - - [10/Sep/2025:19:06:12 0200] "GET /file.php HTTP/1.1" 404 431 "-" "-" 13.89.203.200 - - [10/Sep/2025:19:06:12 0200] "GET /file2.php HTTP/1.1" 404 431 "-" "-" 13.89.203.200 - - [10/Sep/2025:19:06:12 0200] "GET /ioxi-o.php HTTP/1.1" 404 431 "-" "-" 13.89.203.200 - - [10/Sep/2025:19:06:12 0200] "GET /wp.php HTTP/1.1" 404 431 "-" "-" 13.89.203.200 - - [10/Sep/2025:19:06:12 0200] "GET /wsa.php HTTP/1.1" 404 431 "-" "-" 13.89.203.200 - - [10/Sep/2025:19:06:12 0200] "GET /w.php HTTP/1.1" 404 431 "-" "-" 13.89.203.200 - - [10/Sep/2025:19:06:13 0200] "GET /wp-admin/ HTTP/1.1" 404 431 "-" "-"[...] show less	Bad Web Bot Web App Attack
🇫🇷 danirod	2025-09-10 16:53:00 UTC · (1 year ago)	13.89.203.200 - - [10/Sep/2025:16:52:59 +0000] "GET https://www.makigas.es/cong.php HTTP/1.1" 404 10467 "-" "-" 0.058 13.89.203.200 - - [10/Sep/2025:16:52:59 +0000] "GET https://www.makigas.es/file.php HTTP/1.1" 404 10467 "-" "-" 0.020 13.89.203.200 ... show more 13.89.203.200 - - [10/Sep/2025:16:52:59 +0000] "GET https://www.makigas.es/cong.php HTTP/1.1" 404 10467 "-" "-" 0.058 13.89.203.200 - - [10/Sep/2025:16:52:59 +0000] "GET https://www.makigas.es/file.php HTTP/1.1" 404 10467 "-" "-" 0.020 13.89.203.200 - - [10/Sep/2025:16:52:59 +0000] "GET https://www.makigas.es/file2.php HTTP/1.1" 404 10467 "-" "-" 0.017 ... show less	Brute-Force
Anonymous	2025-09-10 16:52:40 UTC · (1 year ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/images/moon.php	Web App Attack
🇩🇪 leryon	2025-09-10 15:50:28 UTC · (1 year ago)	IP: 13.89.203.200 sends in the last 24 hours 10 invalid requests over 80	Web Spam Hacking
🇩🇪 macrob	2025-09-10 14:59:46 UTC · (1 year ago)	2025/09/10 14:59:44 [error] 177244#177244: 42918638 access forbidden by rule, client: 13.89.203.200, server: 100fs.org, request: "GET /wp-admin/ HTTP/1.1", host: "100fs.org" 2025/09/10 14:59:44 [error] 177244#177244: 42918622 access forbidden by ru ... show more 2025/09/10 14:59:44 [error] 177244#177244: 42918638 access forbidden by rule, client: 13.89.203.200, server: 100fs.org, request: "GET /wp-admin/ HTTP/1.1", host: "100fs.org" 2025/09/10 14:59:44 [error] 177244#177244: 42918622 access forbidden by rule, client: 13.89.203.200, server: 100fs.org, request: "GET /wp-content/wp-conflg.php HTTP/1.1", host: "100fs.org" 2025/09/10 14:59:45 [error] 177244#177244: *42918653 access forbidden by rule, client: 13.89.203.200, server: 100fs.org, request: "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1", host: "100fs.org" ... show less	Web App Attack

Showing 1 to 15 of 193 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 183.241.55.105

🇺🇸 162.83.244.34

🇮🇳 49.207.186.21

🇫🇮 13.140.91.101

🇨🇳 183.224.97.83

🇵🇪 181.65.101.150

🇻🇪 181.35.66.26

🇵🇱 162.158.103.108

🇵🇰 153.117.48.58

🇨🇴 77.247.121.30

🇺🇸 34.209.212.159

🇧🇪 34.76.33.44

🇭🇰 223.197.145.33

🇩🇪 195.182.16.23

🇻🇪 190.206.23.210

🇮🇩 114.7.0.150

🇧🇩 103.199.109.14

🇨🇿 95.85.244.87

🇦🇿 62.217.129.71

🇦🇷 38.3.244.211