JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.89.237.196

20.89.237.196 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.89.237.196

Whois 20.89.237.196

IP Abuse Reports for 20.89.237.196:

This IP address has been reported a total of 74 times from 65 distinct sources. 20.89.237.196 was first reported on July 2nd 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 2000cn.com.au	2026-07-02 19:38:33 (8 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇫🇷 francoisunix	2026-07-02 19:34:34 (12 minutes ago)	20.89.237.196 - - [02/Jul/2026:19:34:27 +0000] "GET /wp-admin/css/colors/ocean/ HTTP/1.0" 403 548 "- ... show more 20.89.237.196 - - [02/Jul/2026:19:34:27 +0000] "GET /wp-admin/css/colors/ocean/ HTTP/1.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.237.196 - - [02/Jul/2026:19:34:28 +0000] "GET /wp-includes/block-bindings/ HTTP/1.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.237.196 - - [02/Jul/2026:19:34:31 +0000] "GET /wp-admin/js/ HTTP/1.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.237.196 - - [02/Jul/2026:19:34:32 +0000] "GET /wp-content/uploads/ HTTP/1.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.237.196 - - [02/Jul/2026:19:34:32 +0000] "GET /wp-includes/block-supports/ HTTP/1.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi ... show less	Web App Attack
🇦🇺 QT	2026-07-02 19:24:05 (23 minutes ago)	Website hack attempted at 2026-07-03 05:23:56 +1000	Web App Attack
🇫🇮 Christopher Hughes	2026-07-02 19:23:45 (23 minutes ago)	[Thu Jul 02 20:23:42.891077 2026] [proxy_fcgi:error] [pid 1406891:tid 139822767470144] [client 20.89 ... show more [Thu Jul 02 20:23:42.891077 2026] [proxy_fcgi:error] [pid 1406891:tid 139822767470144] [client 20.89.237.196:11469] AH01071: Got error 'Primary script unknown' [Thu Jul 02 20:23:43.148326 2026] [proxy_fcgi:error] [pid 1406891:tid 139822257665600] [client 20.89.237.196:11469] AH01071: Got error 'Primary script unknown' [Thu Jul 02 20:23:43.405559 2026] [proxy_fcgi:error] [pid 1406891:tid 139822240880192] [client 20.89.237.196:11469] AH01071: Got error 'Primary script unknown' [Thu Jul 02 20:23:44.437567 2026] [proxy_fcgi:error] [pid 1406891:tid 139822775862848] [client 20.89.237.196:11469] AH01071: Got error 'Primary script unknown' [Thu Jul 02 20:23:44.950164 2026] [proxy_fcgi:error] [pid 1406891:tid 139822257665600] [client 20.89.237.196:11469] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 Interceptor_HQ	2026-07-02 19:21:42 (25 minutes ago)	request_uri: /adminfuns.php -- automatic report --	Brute-Force Hacking
🇧🇾 lns.bz	2026-07-02 19:20:18 (27 minutes ago)	Too many 404 requests [BY]	Web App Attack
🇹🇷 ycoskun41	2026-07-02 19:12:43 (34 minutes ago)	fail2ban: plesk-modsecurity jail on genckocaeli.com	Web App Attack
🇩🇪 maxpower	2026-07-02 19:11:49 (35 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.89.237.196 (JP/Japan/-): 1 in the last 360 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.89.237.196 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.89.237.196 - - [02/Jul/2026:21:11:42 +0200] "GET /1.php HTTP/1.1" 404 840 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" host=neiataviaggi.it show less	Port Scan
Anonymous	2026-07-02 19:07:18 (40 minutes ago)	20.89.237.196 - - [02/Jul/2026:21:07:11 +0200] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1 ... show more 20.89.237.196 - - [02/Jul/2026:21:07:11 +0200] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.237.196 - - [02/Jul/2026:21:07:15 +0200] "GET /wp-includes/Text/about.php HTTP/1.1" 429 55 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.237.196 - - [02/Jul/2026:21:07:15 +0200] "GET /wp-includes/blocks/block/ HTTP/1.1" 429 55 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.237.196 - - [02/Jul/2026:21:07:15 +0200] "GET /num.php HTTP/1.1" 429 55 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.237.196 - - [02/Jul/2026:21:07:15 +0200] "GET /themes.php HTTP/1.1" 429 55 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ... show less	Bad Web Bot Web App Attack
🇺🇸 antlac1	2026-07-02 19:02:47 (44 minutes ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇦🇺 QT	2026-07-02 19:02:39 (44 minutes ago)	Website hack attempted at 2026-07-03 05:02:38 +1000	Web App Attack
🇺🇸 rsa	2026-07-02 18:57:00 (50 minutes ago)	GET /gifclass.php HTTP/1.1	DDoS Attack Brute-Force Exploited Host Web App Attack Hacking
🇺🇸 H24	2026-07-02 18:51:33 (55 minutes ago)	/adminfuns.php /wk/index.php /wp-content/plugins/index.php /wp-includes/js/index.php /wp-content/the ... show more /adminfuns.php /wk/index.php /wp-content/plugins/index.php /wp-includes/js/index.php /wp-content/themes/admin.php /wp-content/uploads/ /wp-content/languages/index.php /wp-content/index.php show less	Web App Attack
🇫🇷 bazter.pro	2026-07-02 18:50:40 (56 minutes ago)	Fail2Ban: plesk-scanner - 10 failures	Port Scan Hacking Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-07-02 18:49:13 (58 minutes ago)	[Thu Jul 02 19:49:10.909995 2026] [proxy_fcgi:error] [pid 1406891:tid 139821175531072] [client 20.89 ... show more [Thu Jul 02 19:49:10.909995 2026] [proxy_fcgi:error] [pid 1406891:tid 139821175531072] [client 20.89.237.196:16111] AH01071: Got error 'Primary script unknown' [Thu Jul 02 19:49:11.165464 2026] [proxy_fcgi:error] [pid 1406891:tid 139822249272896] [client 20.89.237.196:16111] AH01071: Got error 'Primary script unknown' [Thu Jul 02 19:49:11.421908 2026] [proxy_fcgi:error] [pid 1406891:tid 139821678831168] [client 20.89.237.196:16111] AH01071: Got error 'Primary script unknown' [Thu Jul 02 19:49:12.506489 2026] [proxy_fcgi:error] [pid 1406891:tid 139821704009280] [client 20.89.237.196:16111] AH01071: Got error 'Primary script unknown' [Thu Jul 02 19:49:13.017564 2026] [proxy_fcgi:error] [pid 1406891:tid 139821712401984] [client 20.89.237.196:16111] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.128

🇺🇸 147.185.132.52

🇨🇳 115.190.173.91

🇨🇳 113.218.65.139

🇦🇷 45.162.21.202

🇩🇪 167.94.145.18

🇳🇬 102.90.124.102

🇳🇱 45.148.10.151

🇮🇩 114.141.59.195

🇺🇸 66.175.212.119

🇧🇿 45.227.254.152

🇯🇵 40.81.194.185

🇲🇽 187.190.35.163

🇷🇺 178.178.222.49

🇮🇳 156.67.104.178

🇰🇷 125.138.175.113

🇺🇸 172.110.223.72

🇻🇳 171.231.195.112

🇨🇴 152.200.205.179

🇪🇸 85.50.194.51