JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.89.242.68

20.89.242.68 was found in our database!

This IP was reported 221 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.89.242.68

Whois 20.89.242.68

IP Abuse Reports for 20.89.242.68:

This IP address has been reported a total of 221 times from 187 distinct sources. 20.89.242.68 was first reported on July 7th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-07 20:06:13 (1 minute ago)	20.89.242.68 - - [07/Jul/2026:20:06:12 +0000] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1 ... show more 20.89.242.68 - - [07/Jul/2026:20:06:12 +0000] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" 404 153 "-" "-" "-" "opt-out.schmittel-it.de" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-07-07 20:04:10 (3 minutes ago)	Triggered Cloudflare WAF (botFight) from JP. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from JP. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /xamp.php Timestamp: 2026-07-07T18:45:56Z Ray ID: a1790251ab7e8d24 UA: Empty string show less	Bad Web Bot
🇵🇹 rncbc	2026-07-07 20:02:02 (5 minutes ago)	[Tue Jul 07 21:02:01.275258 2026] [authz_core:error] [pid 120113:tid 120113] [client 20.89.242.68:19 ... show more [Tue Jul 07 21:02:01.275258 2026] [authz_core:error] [pid 120113:tid 120113] [client 20.89.242.68:19834] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/wp-content [Tue Jul 07 21:02:01.520712 2026] [authz_core:error] [pid 120113:tid 120113] [client 20.89.242.68:19834] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/this_is_a_new_hello_world.php [Tue Jul 07 21:02:01.756657 2026] [authz_core:error] [pid 120113:tid 120113] [client 20.89.242.68:19834] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/x.php ... show less	Brute-Force Bad Web Bot Web App Attack SSH
🇺🇸 Lezetho	2026-07-07 20:00:19 (7 minutes ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
🇩🇪 Nightreaver	2026-07-07 19:59:59 (7 minutes ago)	20.89.242.68 - - [07/Jul/2026:21:59:58 0200] "GET /RioX.php HTTP/1.1" 404 438 "-" "-" 20.89.242.68 ... show more 20.89.242.68 - - [07/Jul/2026:21:59:58 0200] "GET /RioX.php HTTP/1.1" 404 438 "-" "-" 20.89.242.68 - - [07/Jul/2026:21:59:58 0200] "GET /waso.php HTTP/1.1" 404 438 "-" "-" 20.89.242.68 - - [07/Jul/2026:21:59:58 0200] "GET /d62.php HTTP/1.1" 404 438 "-" "-" 20.89.242.68 - - [07/Jul/2026:21:59:58 0200] "GET /sixxis.php HTTP/1.1" 404 438 "-" "-" 20.89.242.68 - - [07/Jul/2026:21:59:59 0200] "GET /yj09.php HTTP/1.1" 404 438 "-" "-"[...] show less	Bad Web Bot Web App Attack
🇫🇷 solution.it	2026-07-07 19:56:29 (11 minutes ago)	[Tue Jul 07 21:56:28.553221 2026] [php7:error] [pid 1798639:tid 1798639] [client 20.89.242.68:11148] ... show more [Tue Jul 07 21:56:28.553221 2026] [php7:error] [pid 1798639:tid 1798639] [client 20.89.242.68:11148] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat show less	Web App Attack
🇬🇧 Andrew	2026-07-07 19:53:07 (14 minutes ago)	20.89.242.68 - - [07/Jul/2026:20:53:04 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.89.242.68 - - [07/Jul/2026:20:53:04 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 20314 "-" "-" 20.89.242.68 - - [07/Jul/2026:20:53:05 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 20295 "-" "-" 20.89.242.68 - - [07/Jul/2026:20:53:05 +0100] "GET /x.php HTTP/1.1" 404 18355 "-" "-" 20.89.242.68 - - [07/Jul/2026:20:53:06 +0100] "GET /RioX.php HTTP/1.1" 404 18358 "-" "-" 20.89.242.68 - - [07/Jul/2026:20:53:06 +0100] "GET /waso.php HTTP/1.1" 404 18358 "-" "-" 20.89.242.68 - - [07/Jul/2026:20:53:06 +0100] "GET /d62.php HTTP/1.1" 404 18357 "-" "-" ... show less	Hacking Web App Attack
🇨🇿 Prcek	2026-07-07 19:44:29 (23 minutes ago)	PortScan:HOST=20.89.242.68,DPORTS=80,443	Port Scan
🇺🇸 factor1	2026-07-07 19:43:41 (24 minutes ago)	Fail2ban at atlas Reports Abuse.	Bad Web Bot
🇮🇩 Burayot	2026-07-07 19:43:21 (24 minutes ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.89.242.68 (JP/Japan/-): 2 in the ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 20.89.242.68 (JP/Japan/-): 2 in the last 3600 secs show less	Web App Attack
🇬🇧 Smish	2026-07-07 19:38:47 (29 minutes ago)	HONEYPOT HIT --> Fail2ban time=1783453125 log=2026-07-07T20:38:45+01:00 ip=20.89.242.68 host=grafana ... show more HONEYPOT HIT --> Fail2ban time=1783453125 log=2026-07-07T20:38:45+01:00 ip=20.89.242.68 host=grafana.as210667.net method=GET uri="/wp-admin/css/colors/coffee/wp-adochan.php" status=404 ua="-" ref="-" rid=771248ee698446278f55d92a8571636b show less	Web App Attack
🇫🇷 AGEPCom	2026-07-07 19:38:19 (29 minutes ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
🇺🇸 antlac1	2026-07-07 19:20:07 (47 minutes ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇺🇸 lavnet.net	2026-07-07 19:18:20 (49 minutes ago)	20.89.242.68 - - [07/Jul/2026:19:18:19 +0000] "GET /gtd7.php HTTP/1.1" 404 4699 "-" "-" 20.89.242.68 ... show more 20.89.242.68 - - [07/Jul/2026:19:18:19 +0000] "GET /gtd7.php HTTP/1.1" 404 4699 "-" "-" 20.89.242.68 - - [07/Jul/2026:19:18:19 +0000] "GET /11.php?p= HTTP/1.1" 404 2050 "-" "-" 20.89.242.68 - - [07/Jul/2026:19:18:19 +0000] "GET /11.php?p= HTTP/1.1" 404 2050 "-" "-" 20.89.242.68 - - [07/Jul/2026:19:18:20 +0000] "GET /v2.php HTTP/1.1" 404 2050 "-" "-" 20.89.242.68 - - [07/Jul/2026:19:18:20 +0000] "GET /v2.php HTTP/1.1" 404 2050 "-" "-" ... show less	Brute-Force
Anonymous	2026-07-07 19:15:19 (52 minutes ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack

Showing 1 to 15 of 221 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.96.139.156

🇳🇱 159.223.9.223

🇫🇮 147.185.133.130

🇹🇭 49.231.192.36

🇺🇸 44.140.236.11

🇮🇪 2a05:d018:1231:b002:bd7b:ea1:de60:4a95

🇬🇧 185.216.145.164

🇮🇩 103.56.232.39

🇭🇰 20.24.211.29

🇧🇷 4.228.96.99

🇺🇸 216.180.246.247

🇮🇩 163.7.9.55

🇺🇸 77.73.14.87

🇺🇸 66.132.195.101

🇺🇸 44.189.44.8

🇱🇷 41.57.91.20

🇰🇷 211.216.58.204

🇺🇸 198.98.54.35

🇺🇸 165.227.209.27

🇧🇬 89.215.171.207