JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.187.89.166

20.187.89.166 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.187.89.166

Whois 20.187.89.166

IP Abuse Reports for 20.187.89.166:

This IP address has been reported a total of 84 times from 69 distinct sources. 20.187.89.166 was first reported on June 4th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 [email protected]	2026-06-04 14:18:10 (1 hour ago)	20.187.89.166 - - [04/Jun/2026:12:49:39 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 812 ... show more 20.187.89.166 - - [04/Jun/2026:12:49:39 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 812 "-" "-" show less	Web App Attack
🇧🇬 Stoyko Stoykov	2026-06-04 13:25:26 (2 hours ago)	20.187.89.166 - - [04/Jun/2026:16:25:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.187.89.166 - - [04/Jun/2026:16:25:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-06-04 13:14:56 (2 hours ago)	Web vulnerability probing: /wp-Blogs.php	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-04 13:07:02 (2 hours ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 todix	2026-06-04 12:52:47 (2 hours ago)	WebAttack or semilar from 20.187.89.166	Web App Attack
🇺🇸 antlac1	2026-06-04 12:51:18 (2 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇦🇹 penguin-solutions.at	2026-06-04 12:48:40 (2 hours ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇵🇱 wHosts	2026-06-04 12:36:02 (2 hours ago)	Blocked by Fail2Ban	Web App Attack
🇩🇪 macrob	2026-06-04 12:22:42 (3 hours ago)	2026/06/04 12:22:11 [error] 944314#944314: 280600720 access forbidden by rule, client: 20.187.89.16 ... show more 2026/06/04 12:22:11 [error] 944314#944314: 280600720 access forbidden by rule, client: 20.187.89.166, server: bin.partners, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", host: "bin.partners" 2026/06/04 12:22:30 [error] 944316#944316: 280601377 access forbidden by rule, client: 20.187.89.166, server: bin.partners, request: "GET /wp-upload.php HTTP/2.0", host: "bin.partners" 2026/06/04 12:22:41 [error] 944312#944312: 280600761 access forbidden by rule, client: 20.187.89.166, server: bin.partners, request: "GET /wp-class.php HTTP/2.0", host: "bin.partners" ... show less	Web App Attack
🇺🇸 rdpguard.com	2026-06-04 12:18:49 (3 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
Anonymous	2026-06-04 11:58:13 (3 hours ago)	[Thu Jun 04 13:58:11.664195 2026] [php:error] [pid 3203369] [client 20.187.89.166:8213] script '/var ... show more [Thu Jun 04 13:58:11.664195 2026] [php:error] [pid 3203369] [client 20.187.89.166:8213] script '/var/www/ns1/kma.php' not found or unable to stat [Thu Jun 04 13:58:12.155995 2026] [php:error] [pid 3203369] [client 20.187.89.166:8213] script '/var/www/ns1/wpls.php' not found or unable to stat [Thu Jun 04 13:58:12.155995 2026] [php:error] [pid 3203369] [client 20.187.89.166:8213] script '/var/www/ns1/wpls.php' not found or unable to stat ... show less	Bad Web Bot
🇫🇷 guillaume illien	2026-06-04 11:58:01 (3 hours ago)	20.187.89.166 - - [04/Jun/2026:11:57:52 +0000] "GET /wp-ssfc.php HTTP/1.1" 301 178 "-" "-" 20.187.89 ... show more 20.187.89.166 - - [04/Jun/2026:11:57:52 +0000] "GET /wp-ssfc.php HTTP/1.1" 301 178 "-" "-" 20.187.89.166 - - [04/Jun/2026:11:57:56 +0000] "GET /alr.php HTTP/1.1" 301 178 "-" "-" 20.187.89.166 - - [04/Jun/2026:11:57:56 +0000] "GET /tires.php HTTP/1.1" 301 178 "-" "-" 20.187.89.166 - - [04/Jun/2026:11:57:57 +0000] "GET /dex.php HTTP/1.1" 301 178 "-" "-" 20.187.89.166 - - [04/Jun/2026:11:57:58 +0000] "GET /da.php HTTP/1.1" 301 178 "-" "-" 20.187.89.166 - - [04/Jun/2026:11:57:59 +0000] "GET /sm.php HTTP/1.1" 301 178 "-" "-" 20.187.89.166 - - [04/Jun/2026:11:58:00 +0000] "GET /nic.php HTTP/1.1" 301 178 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
🇺🇦 URAN Publishing Service	2026-06-04 11:47:40 (3 hours ago)	20.187.89.166 - - [04/Jun/2026:14:47:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.187.89.166 - - [04/Jun/2026:14:47:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 709 "-" "-" ... show less	Web App Attack
Anonymous	2026-06-04 11:44:34 (3 hours ago)	[Thu Jun 04 07:44:33.755050 2026] [php7:error] [pid 7630] [client 20.187.89.166:20638] script '/var/ ... show more [Thu Jun 04 07:44:33.755050 2026] [php7:error] [pid 7630] [client 20.187.89.166:20638] script '/var/www/llamadareal.us/this_is_a_new_hello_world.php' not found or unable to stat [Thu Jun 04 07:44:34.202226 2026] [php7:error] [pid 7630] [client 20.187.89.166:20638] script '/var/www/llamadareal.us/x.php' not found or unable to stat ... show less	Brute-Force Web App Attack SSH
🇩🇪 BlueWire Hosting	2026-06-04 11:43:46 (3 hours ago)	Suspicious HTTP(s) activity without a user agent provided	Bad Web Bot

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.103.193.163

🇲🇽 187.250.126.152

🇨🇳 183.218.59.20

🇵🇸 178.214.77.71

🇩🇪 139.19.117.197

🇸🇬 104.248.157.201

🇨🇬 102.141.48.196

🇺🇸 66.132.195.113

🇺🇸 64.62.197.237

🇳🇱 45.148.10.152

🇵🇰 202.77.139.249

🇩🇴 200.35.154.11

🇺🇸 173.254.28.219

🇩🇪 165.245.246.63

🇮🇳 125.17.233.246

🇸🇬 118.139.164.171

🇹🇼 111.254.152.121

🇪🇸 34.175.118.185

🇨🇳 14.103.218.183

🇺🇸 2607:f8b0:4001:c5c::126