JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.189.200.150

20.189.200.150 was found in our database!

This IP was reported 259 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.189.200.150

Whois 20.189.200.150

IP Abuse Reports for 20.189.200.150:

This IP address has been reported a total of 259 times from 213 distinct sources. 20.189.200.150 was first reported on July 8th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-07-11 07:32:40 (3 hours ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇩🇪 Holger	2026-07-10 18:25:38 (16 hours ago)	WordPress WebAttack	Brute-Force Web App Attack
🇧🇷 Peregrine	2026-07-10 03:15:49 (1 day ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.189.200.150 172.70.233.219 - - [08/Jul/2026:15:24:34 - ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.189.200.150 172.70.233.219 - - [08/Jul/2026:15:24:34 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 414 20.189.200.150 172.70.233.219 - - [08/Jul/2026:15:24:34 -0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 414 20.189.200.150 172.70.233.219 - - [08/Jul/2026:15:24:35 -0300] "GET /bpsoe.php HTTP/1.1" 404 414 show less	Bad Web Bot
Anonymous	2026-07-09 20:02:09 (1 day ago)	Bulk report from WAF Auto-Blocker Dashboard	Brute-Force SSH
Anonymous	2026-07-09 13:04:04 (1 day ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-07-09 05:16:17 (2 days ago)	851 attacks on PHP URLs: GET /R57.php HTTP/1.1	Web App Attack
🇺🇸 Charlesiv	2026-07-09 00:18:30 (2 days ago)	Triggered Cloudflare WAF (botFight) from JP. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from JP. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /asax.php Timestamp: 2026-07-08T22:14:41Z Ray ID: a182717b9c6afc9b UA: Empty string show less	Bad Web Bot
🇺🇸 mw	2026-07-09 00:01:27 (2 days ago)	GET /wp-admin/css/bolt.php HTTP/1.1	Web App Attack
🇮🇩 sockominfo	2026-07-09 00:00:29 (2 days ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇫🇮 6kilowatti	2026-07-08 23:58:58 (2 days ago)	20.189.200.150 - - [09/Jul/2026:02:58:58 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.189.200.150 - - [09/Jul/2026:02:58:58 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" ... show less	Web App Attack
Anonymous	2026-07-08 23:54:59 (2 days ago)	[Thu Jul 09 01:54:56.701797 2026] [authz_core:error] [pid 401727] [client 20.189.200.150:60275] AH01 ... show more [Thu Jul 09 01:54:56.701797 2026] [authz_core:error] [pid 401727] [client 20.189.200.150:60275] AH01630: client denied by server configuration: /var/www/html/default/shlo.php [Thu Jul 09 01:54:57.148602 2026] [authz_core:error] [pid 401727] [client 20.189.200.150:60275] AH01630: client denied by server configuration: /var/www/html/default/gdn.php [Thu Jul 09 01:54:57.595997 2026] [authz_core:error] [pid 401727] [client 20.189.200.150:60275] AH01630: client denied by server configuration: /var/www/html/default/6bcwiqwj.php [Thu Jul 09 01:54:58.043207 2026] [authz_core:error] [pid 401727] [client 20.189.200.150:60275] AH01630: client denied by server configuration: /var/www/html/default/mar.php [Thu Jul 09 01:54:58.490277 2026] [authz_core:error] [pid 401727] [client 20.189.200.150:60275] AH01630: client denied by server configuration: /var/www/html/default/ws69.php ... show less	Web App Attack
🇳🇱 i-turnradio.nl	2026-07-08 23:52:37 (2 days ago)	2026-07-09 @ 01:52:37 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-09 @ 01:52:37 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇫🇮 000rosiu	2026-07-08 23:47:02 (2 days ago)	Triggered Cloudflare WAF (botFight) from JP. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| ... show more Triggered Cloudflare WAF (botFight) from JP. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /global.php \| UA: Empty string • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 webehostin.com	2026-07-08 23:45:25 (2 days ago)	Too Many Connections Or General Abuse	Brute-Force DDoS Attack
🇬🇧 Apache	2026-07-08 23:44:57 (2 days ago)	(PERMBLOCK) 20.189.200.150 (JP/Japan/-) has had more than 4 temp blocks in the last 86400 secs	Brute-Force

Showing 1 to 15 of 259 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.148.250.171

🇩🇪 185.39.64.51

🇧🇷 177.52.30.171

🇺🇸 64.23.225.204

🇭🇰 47.239.206.23

🇺🇸 44.28.70.109

🇩🇪 213.209.159.235

🇩🇪 213.209.159.225

🇧🇩 210.4.68.72

🇺🇸 167.71.17.237

🇺🇸 85.208.96.204

🇺🇸 68.183.31.162

🇯🇵 203.25.124.180

🇨🇦 137.175.205.63

🇷🇺 93.191.60.155

🇩🇪 81.169.225.251

🇺🇸 44.207.252.58

🇫🇮 31.76.77.218

🇨🇳 14.22.11.168

🇷🇺 2a09:bac5:51ae:369::57:22d