JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.210.88.82

Neutral Activity

Abuse Confidence Score

0% Low Risk

69 reports

61 reporters · latest 9 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇯🇵 Japan
City: Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.210.88.82 has been reported 69 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

69 from 61 distinct reporters

First reported

January 21st 2026

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-02-01 18:33:27 UTC · (9 months ago)	📄 Probes for tons of inexistent files and PHP scripts	Hacking Web App Attack
🇹🇷 rtbh.com.tr	2026-01-31 16:11:19 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 Holger	2026-01-28 13:54:33 UTC · (9 months ago)	WordPress WebAttack	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-01-23 23:40:53 UTC · (9 months ago)		Brute-Force Web App Attack
🇯🇵 beon	2026-01-23 02:28:00 UTC · (9 months ago)	This IP was observed 6 times via a honeypot and also performed automated reconnaissance and vulnerability scanning against my server between 2026-01-21T20:39:51Z and 2026-01-21T20:39:59Z UTC. The honeypot files: /wp-content/plugins/hellopress/wp_f ... show more This IP was observed 6 times via a honeypot and also performed automated reconnaissance and vulnerability scanning against my server between 2026-01-21T20:39:51Z and 2026-01-21T20:39:59Z UTC. The honeypot files: /wp-content/plugins/hellopress/wp_filemanager.php, /wp.php, /wp-goods.php, /wp-ac.php, /wp-64wscx6shd.php and /edit.php. It issued 72 HTTP requests targeting 66 distinct suspicious paths within about 8 seconds. The targeted paths included examples such as: /ol.php, /sikma.php, /rh1.php, /sid3.php, /okxh.php, /krypton.php and others. Multiple requests used filenames that resemble PHP web shells or exploitation payloads. This behavior is characteristic of an extensive, fully automated web application attack or exploit framework, not legitimate traffic. Given the volume, speed, and nature of the requests, this IP is clearly malicious and should be blocked. show less	Hacking Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-01-23 01:18:28 UTC · (9 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/20.210.88.82 2026-01-22 08:05:21 /okxh.php 2026-01-22 08:05:21 /sid3.php 2026-01-22 08:05:21 /system/logs/scorpiol.php 2026-01-22 08:05:20 /wp-content/plugins/hellopress/wp ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/20.210.88.82 2026-01-22 08:05:21 /okxh.php 2026-01-22 08:05:21 /sid3.php 2026-01-22 08:05:21 /system/logs/scorpiol.php 2026-01-22 08:05:20 /wp-content/plugins/hellopress/wp_filemanager.php 2026-01-22 08:05:21 /maul.php 2026-01-22 08:05:21 /zoo.php 2026-01-22 08:05:21 /rh1.php 2026-01-22 08:05:21 /sikma.php 2026-01-22 08:05:21 /krypton.php 2026-01-22 08:05:21 /ol.php show less	Web App Attack
🇯🇵 ottoto	2026-01-23 00:43:00 UTC · (9 months ago)	GET requests, containing URI path /.well-known/acme-challenge/, which is used temporarily by Let’s Encrypt during re-issue a cert, are frequently made by various IP Addresses with hacking purpose.	Hacking
🇫🇷 SpaceHost-Server	2026-01-22 23:38:01 UTC · (9 months ago)		Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-01-22 23:02:11 UTC · (9 months ago)	Auto-ban: 219 malicious requests on 2026-01-21 (e.g., env/backup probes, brute-force, or error bursts).	Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2026-01-22 20:11:11 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 conseilgouz	2026-01-22 03:33:42 UTC · (9 months ago)	upe-7 : Trying access unauthorized files/dir=>/wp-content/plugins/hellopress/wp_filemanager.php	Hacking
🇦🇺 artful	2026-01-22 03:16:00 UTC · (9 months ago)	Excessive errors in recent hours	Web App Attack
Anonymous	2026-01-22 03:10:22 UTC · (9 months ago)	20.210.88.82 (JP/Japan/-), more than 10 Apache 403 hits	Hacking
🇺🇸 iwle	2026-01-22 03:07:15 UTC · (9 months ago)	[Wed Jan 21 22:07:12.465214 2026] [proxy_fcgi:error] [pid 827866:tid 827907] [client 20.210.88.82:5460] AH01071: Got error 'Primary script unknown' [Wed Jan 21 22:07:12.943728 2026] [proxy_fcgi:error] [pid 827866:tid 827919] [client 20.210.88.82:5460 ... show more [Wed Jan 21 22:07:12.465214 2026] [proxy_fcgi:error] [pid 827866:tid 827907] [client 20.210.88.82:5460] AH01071: Got error 'Primary script unknown' [Wed Jan 21 22:07:12.943728 2026] [proxy_fcgi:error] [pid 827866:tid 827919] [client 20.210.88.82:5460] AH01071: Got error 'Primary script unknown' [Wed Jan 21 22:07:13.256794 2026] [proxy_fcgi:error] [pid 827866:tid 827911] [client 20.210.88.82:5460] AH01071: Got error 'Primary script unknown' [Wed Jan 21 22:07:13.588264 2026] [proxy_fcgi:error] [pid 827866:tid 827908] [client 20.210.88.82:5460] AH01071: Got error 'Primary script unknown' [Wed Jan 21 22:07:13.906867 2026] [proxy_fcgi:error] [pid 827866:tid 827917] [client 20.210.88.82:5460] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇨🇭 Mario Bretscher	2026-01-22 02:49:09 UTC · (9 months ago)	[Thu Jan 22 03:49:06.766116 2026] [php:error] [pid 194494] [client 20.210.88.82:5382] script '/var/www/html/ol.php' not found or unable to stat [Thu Jan 22 03:49:06.999080 2026] [php:error] [pid 194494] [client 20.210.88.82:5382] script '/var/www/htm ... show more [Thu Jan 22 03:49:06.766116 2026] [php:error] [pid 194494] [client 20.210.88.82:5382] script '/var/www/html/ol.php' not found or unable to stat [Thu Jan 22 03:49:06.999080 2026] [php:error] [pid 194494] [client 20.210.88.82:5382] script '/var/www/html/sikma.php' not found or unable to stat [Thu Jan 22 03:49:07.281457 2026] [php:error] [pid 194494] [client 20.210.88.82:5382] script '/var/www/html/rh1.php' not found or unable to stat ... show less	Web App Attack

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 195.62.36.4

🇸🇪 185.246.130.20

🇺🇸 165.154.182.223

🇺🇸 104.152.52.139

🇺🇸 104.152.52.127

🇺🇸 104.152.52.65

🇫🇮 89.47.55.31

🇨🇳 49.115.219.90

🇮🇳 49.37.219.2

🇳🇱 45.148.10.157

🇫🇮 45.133.115.98

🇨🇱 34.176.153.204

🇵🇱 2400:cb00:1055:1000:d63:6212:e6ac:9d52

🇵🇱 2400:cb00:906:1000:2455:f14b:6c03:551c

🇵🇱 2400:cb00:906:1000:582:303e:822f:6d11

🇹🇼 198.235.24.59

🇨🇳 182.244.5.153

🇫🇮 147.185.133.173

🇱🇹 141.98.10.162

🇺🇸 138.68.44.1