JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.89.234.204

20.89.234.204 was found in our database!

This IP was reported 408 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.89.234.204

Whois 20.89.234.204

IP Abuse Reports for 20.89.234.204:

This IP address has been reported a total of 408 times from 233 distinct sources. 20.89.234.204 was first reported on April 13th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-29 06:52:29 (3 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-05-13 23:34:50 (3 months ago)	IP banned by Fail2Ban	Brute-Force SSH
Anonymous	2026-05-09 13:03:10 (3 months ago)	Captured: 2026-04-14 22:56:41 on /wp-admin/user/12.php (Attributed to: Angara Technologies Group / m ... show more Captured: 2026-04-14 22:56:41 on /wp-admin/user/12.php (Attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-05 19:10:34 (3 months ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [mx03]	Bad Web Bot Web App Attack
🇫🇷 cydit.eu	2026-04-22 01:00:33 (4 months ago)	Repeat offender detected by fail2ban on thor.cydit.eu	Exploited Host
🇫🇷 cydit.eu	2026-04-19 01:11:28 (4 months ago)	Repeat offender detected by fail2ban on thor.cydit.eu	Exploited Host
🇬🇧 andypiper	2026-04-18 01:02:27 (4 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 raymarron.com	2026-04-18 00:11:50 (4 months ago)	87x probes for various vulnerabilities.	Web App Attack
🇩🇪 www.Examensfragen.de	2026-04-16 16:33:02 (4 months ago)		Web Spam Bad Web Bot
🇧🇪 Ivo Vynckier	2026-04-16 15:44:00 (4 months ago)	20.89.234.204 - - [16/Apr/2026:01:55:56 +0200] "GET /term.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Win ... show more 20.89.234.204 - - [16/Apr/2026:01:55:56 +0200] "GET /term.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [16/Apr/2026:01:55:57 +0200] "GET /ms-edit.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [16/Apr/2026:01:55:57 +0200] "GET /admin.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
Anonymous	2026-04-16 09:22:37 (4 months ago)	FortiWeb WAF: 40 attacks detected. Threat Score: 11000. Types: Client Management(20), Block IP List( ... show more FortiWeb WAF: 40 attacks detected. Threat Score: 11000. Types: Client Management(20), Block IP List(20). Origin: Japan. show less	Web App Attack
🇧🇪 boxed-it	2026-04-16 05:22:51 (4 months ago)	GET /wp-admin/css/colors/blue/index.php (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇺🇸 mc4bbs	2026-04-16 04:40:16 (4 months ago)	Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ... show more Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-includes/Requests/about.php -> 404 UA=""; GET /wp-access.php -> 404 UA=""; GET /wp-content/about.php -> 404 UA=""; GET /wp-admin/images/ -> 404 UA=""; GET /wp-links-opml.php -> 404 UA="" show less	Web App Attack Hacking
🇺🇸 lavnet.net	2026-04-16 04:24:45 (4 months ago)	20.89.234.204 - - [16/Apr/2026:04:24:44 +0000] "GET /term.php HTTP/1.1" 404 4729 "-" "Mozilla/5.0 (W ... show more 20.89.234.204 - - [16/Apr/2026:04:24:44 +0000] "GET /term.php HTTP/1.1" 404 4729 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [16/Apr/2026:04:24:44 +0000] "GET /ms-edit.php HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [16/Apr/2026:04:24:44 +0000] "GET /admin.php HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [16/Apr/2026:04:24:44 +0000] "GET /index.php HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [16/Apr/2026:04:24:45 +0000] "GET /about.php HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force
🇺🇸 rdpguard.com	2026-04-16 04:11:35 (4 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force

Showing 1 to 15 of 408 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.93.89.23

🇺🇸 172.58.244.138

🇺🇸 147.185.132.42

🇺🇸 144.24.20.130

🇧🇷 118.26.105.116

🇨🇳 49.235.162.108

🇨🇳 36.111.146.165

🇺🇸 205.210.31.53

🇺🇸 195.184.76.185

🇳🇱 195.178.110.228

🇺🇸 162.216.150.194

🇺🇸 144.24.2.216

🇺🇸 143.110.157.77

🇧🇷 137.131.232.50

🇺🇸 132.148.22.172

🇨🇳 120.55.45.107

🇨🇳 116.23.162.243

🇨🇳 115.191.11.182

🇭🇰 109.206.247.77

🇭🇰 101.36.118.148