JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.89.107.74

20.89.107.74 was found in our database!

This IP was reported 230 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.89.107.74

Whois 20.89.107.74

IP Abuse Reports for 20.89.107.74:

This IP address has been reported a total of 230 times from 197 distinct sources. 20.89.107.74 was first reported on June 28th 2026, and the most recent report was 56 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 jalim	2026-06-28 19:26:33 (56 seconds ago)	Fail2Ban (11cc81a08e1b): 10 attempts from 20.89.107.74 triggered caddy-404 jail. Ban time: 3600s. At ... show more Fail2Ban (11cc81a08e1b): 10 attempts from 20.89.107.74 triggered caddy-404 jail. Ban time: 3600s. Attack patterns detected in mail server logs. show less	Web App Attack
Anonymous	2026-06-28 19:25:40 (1 minute ago)	20.89.107.74 - - [28/Jun/2026:21:25:34 +0200] "GET /wp-test.php HTTP/1.1" 301 162 "-" "-" ...	Web App Attack
🇩🇪 bryth	2026-06-28 19:24:41 (2 minutes ago)	Wordpress login/xmlrpc abuse (Sun Jun 28 07:07:25 PM UTC 2026)	Hacking Web App Attack
🇩🇪 maxpower	2026-06-28 19:21:16 (6 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.89.107.74 (JP/Japan/-): 1 in the last 3600 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.89.107.74 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.89.107.74 - - [28/Jun/2026:21:21:13 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 0 "-" "-" "-" host=oremcorazzati.it show less	Port Scan
🇧🇷 vfAcceloReporter	2026-06-28 19:18:56 (8 minutes ago)	20.89.107.74 - - [28/Jun/2026:16:18:55 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.89.107.74 - - [28/Jun/2026:16:18:55 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 153 "-" "-" 20.89.107.74 - - [28/Jun/2026:16:18:55 -0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 153 "-" "-" 20.89.107.74 - - [28/Jun/2026:16:18:55 -0300] "GET /7.php HTTP/1.1" 404 153 "-" "-" 20.89.107.74 - - [28/Jun/2026:16:18:55 -0300] "GET /faze.php HTTP/1.1" 404 153 "-" "-" 20.89.107.74 - - [28/Jun/2026:16:18:56 -0300] "GET /011i.php HTTP/1.1" 404 153 "-" "-" ... show less	Brute-Force Web App Attack Exploited Host
🇩🇪 Viveronese	2026-06-28 19:16:40 (10 minutes ago)	HTTP vulnerability scanning	Web App Attack
🇩🇪 netclix.gr	2026-06-28 19:10:48 (16 minutes ago)	(aggressive_scan) Aggressive Web Exploit Scan 20.89.107.74 (JP/Japan/-): 5 in the last 4600 secs; Po ... show more (aggressive_scan) Aggressive Web Exploit Scan 20.89.107.74 (JP/Japan/-): 5 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.89.107.74 - - [28/Jun/2026:22:09:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 808 "-" "-" 20.89.107.74 - - [28/Jun/2026:22:09:44 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 808 "-" "-" 20.89.107.74 - - [28/Jun/2026:22:09:45 +0300] "GET /water.php HTTP/1.1" 404 808 "-" "-" 20.89.107.74 - - [28/Jun/2026:22:09:45 +0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 808 "-" "-" 20.89.107.74 - - [28/Jun/2026:22:09:46 +0300] "GET /sid4.php HTTP/1.1" 404 808 "-" "-" show less	Port Scan
🇩🇪 hbrks	2026-06-28 19:10:23 (17 minutes ago)	85 attack(s) detected, such as these: {"event":"web_block","ip":"20.89.107.74","host":"api.marche-be ... show more 85 attack(s) detected, such as these: {"event":"web_block","ip":"20.89.107.74","host":"api.marche-be.com","request":"GET /odf7udtspqtpxzyxmw2rcCdefault.php HTTP/1.1","user_agent":"","reason":"Status-301","timestamp":"2026-06-28T19:10:23 00:00","logentry":"api.marche-be.com 20.89.107.74 - - [28/Jun/2026:19:10:23 0000] \"GET /odf7udtspqtpxzyxmw2rcCdefault.php HTTP/1.1\" 301 169 \"-\" \"-\" \"-\""} * Report Details : https://p4u.xyz/MMDGJ7VSKUH/1 IP Details *: https://p4u.xyz/MMDGJ7VSKUH/2 show less	Web Spam Hacking Bad Web Bot
🇨🇭 🇨🇭 Hosting	2026-06-28 19:10:02 (17 minutes ago)	Automated security scanning detected: PHP Web Shell Access. Systematic reconnaissance using automate ... show more Automated security scanning detected: PHP Web Shell Access. Systematic reconnaissance using automated tools. show less	Hacking Web App Attack
🇩🇪 strxmpp	2026-06-28 19:09:36 (17 minutes ago)	20.89.107.74 - - [28/Jun/2026:21:09:35 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.89.107.74 - - [28/Jun/2026:21:09:35 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4765 "-" "-" ... show less	Bad Web Bot
🇩🇪 maxpower	2026-06-28 19:05:12 (22 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.89.107.74 (JP/Japan/-): 1 in the last 3600 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.89.107.74 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.89.107.74 - - [28/Jun/2026:21:05:04 +0200] "GET /xxa.php HTTP/1.1" 301 287 "-" "-" "-" host=mail.mediaqualitylab.it show less	Port Scan
🇫🇮 mnazibo	2026-06-28 19:00:09 (27 minutes ago)	Date: Jun 28 21:45:05 2026 EAT \| Reported IP: 20.89.107.74 mod_security \| id: 953100 959100 \| JP/use ... show more Date: Jun 28 21:45:05 2026 EAT \| Reported IP: 20.89.107.74 mod_security \| id: 953100 959100 \| JP/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4) show less	SQL Injection Brute-Force Bad Web Bot
🇫🇷 ACE-INFORMATIQUE.NC	2026-06-28 19:00:07 (27 minutes ago)	Bad Web Bot + Web App Attack blocked by Fail2ban	Bad Web Bot Web App Attack
🇺🇸 infra-monitor	2026-06-28 19:00:06 (27 minutes ago)	Automated ban via infra-monitor: webshell-high-confidence, crowdsecurity/http-probing	Port Scan Hacking Web App Attack
🇫🇷 Campus France	2026-06-28 18:59:03 (28 minutes ago)	[Sun Jun 28 20:59:02.747409 2026] [php:error] [pid 3845481] [client 20.89.107.74:63061] script '/var ... show more [Sun Jun 28 20:59:02.747409 2026] [php:error] [pid 3845481] [client 20.89.107.74:63061] script '/var/www/html/desk.radio-campus.org/desk/www/this_is_a_new_hello_world.php' not found or unable to stat [Sun Jun 28 20:59:03.187977 2026] [php:error] [pid 3845481] [client 20.89.107.74:63061] script '/var/www/html/desk.radio-campus.org/desk/www/water.php' not found or unable to stat [Sun Jun 28 20:59:03.187977 2026] [php:error] [pid 3845481] [client 20.89.107.74:63061] script '/var/www/html/desk.radio-campus.org/desk/www/water.php' not found or unable to stat [Sun Jun 28 20:59:03.626676 2026] [php:error] [pid 3845481] [client 20.89.107.74:63061] script '/var/www/html/desk.radio-campus.org/desk/www/3PJcpMFsD8B.php' not found or unable to stat ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 230 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 4.17.226.146

🇭🇰 199.45.154.183

🇸🇦 176.44.80.139

🇩🇪 116.202.222.114

🇺🇸 66.132.186.231

🇸🇬 47.128.116.9

🇳🇱 45.148.10.141

🇺🇸 34.162.64.205

🇫🇮 31.56.204.231

🇧🇷 200.189.22.1

🇭🇰 199.45.155.91

🇧🇪 198.235.24.216

🇬🇧 89.37.172.150

🇳🇱 45.148.10.121

🇲🇽 200.68.173.245

🇹🇼 198.235.24.13

🇳🇱 185.93.89.36

🇨🇳 183.184.53.9

🇨🇳 183.66.166.30

🇮🇳 182.95.119.30