JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.89.250.108

20.89.250.108 was found in our database!

This IP was reported 1,026 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.89.250.108

Whois 20.89.250.108

IP Abuse Reports for 20.89.250.108:

This IP address has been reported a total of 1,026 times from 526 distinct sources. 20.89.250.108 was first reported on June 29th 2026, and the most recent report was 14 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-07 03:36:43 (14 minutes ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇺🇸 Mundo Bueno	2026-07-07 03:35:15 (16 minutes ago)	[ISILIA Protection v2.1] Tentative d'accès: /alfa-rex1.php \| Pays: JP \| UA:	Hacking Web App Attack
Anonymous	2026-07-07 03:18:04 (33 minutes ago)	20.89.250.108 - - [07/Jul/2026:05:16:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.89.250.108 - - [07/Jul/2026:05:16:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 6339 "-" "-" 20.89.250.108 - - [07/Jul/2026:05:16:53 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 359 "-" "-" 20.89.250.108 - - [07/Jul/2026:05:16:53 +0200] "GET /wp-check.php HTTP/1.1" 404 359 "-" "-" 20.89.250.108 - - [07/Jul/2026:05:16:54 +0200] "GET /wp-logins.php HTTP/1.1" 404 359 "-" "-" 20.89.250.108 - - [07/Jul/2026:05:16:54 +0200] "GET /wp-logs.php HTTP/1.1" 404 359 "-" "-" 20.89.250.108 - - [07/Jul/2026:05:16:55 +0200] "GET /ww.php HTTP/1.1" 404 359 "-" "-" 20.89.250.108 - - [07/Jul/2026:05:16:55 +0200] "GET /meta.php HTTP/1.1" 404 359 "-" "-" 20.89.250.108 - - [07/Jul/2026:05:16:56 +0200] "GET /yindu.php HTTP/1.1" 404 359 "-" "-" 20.89.250.108 - - [07/Jul/2026:05:16:57 +0200] "GET /functions.php HTTP/1.1" 404 359 "-" "-" 20.89.250.108 - - [07/Jul/2026:05:16:57 +0200] "GET /cron.php HTTP/1.1" 404 359 "-" "-" 20.89.250.108 - - [07/Jul/2026:05:16:58 +0 ... show less	DDoS Attack
🇫🇮 Christopher Hughes	2026-07-07 03:01:19 (50 minutes ago)	[Tue Jul 07 04:01:18.041761 2026] [proxy_fcgi:error] [pid 1562740:tid 139821427181120] [client 20.89 ... show more [Tue Jul 07 04:01:18.041761 2026] [proxy_fcgi:error] [pid 1562740:tid 139821427181120] [client 20.89.250.108:19742] AH01071: Got error 'Primary script unknown' [Tue Jul 07 04:01:18.292860 2026] [proxy_fcgi:error] [pid 1562740:tid 139821670438464] [client 20.89.250.108:19742] AH01071: Got error 'Primary script unknown' [Tue Jul 07 04:01:18.608320 2026] [proxy_fcgi:error] [pid 1562740:tid 139822759077440] [client 20.89.250.108:19742] AH01071: Got error 'Primary script unknown' [Tue Jul 07 04:01:18.938912 2026] [proxy_fcgi:error] [pid 1562740:tid 139822750684736] [client 20.89.250.108:19742] AH01071: Got error 'Primary script unknown' [Tue Jul 07 04:01:19.190578 2026] [proxy_fcgi:error] [pid 1562740:tid 139822282810944] [client 20.89.250.108:19742] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 SiyCah	2026-07-07 03:00:01 (51 minutes ago)	IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-07-07 02:41:10 (1 hour ago)	[Tue Jul 07 03:41:08.093822 2026] [proxy_fcgi:error] [pid 1563590:tid 139821242639936] [client 20.89 ... show more [Tue Jul 07 03:41:08.093822 2026] [proxy_fcgi:error] [pid 1563590:tid 139821242639936] [client 20.89.250.108:18311] AH01071: Got error 'Primary script unknown' [Tue Jul 07 03:41:08.340232 2026] [proxy_fcgi:error] [pid 1563590:tid 139822784255552] [client 20.89.250.108:18311] AH01071: Got error 'Primary script unknown' [Tue Jul 07 03:41:08.813086 2026] [proxy_fcgi:error] [pid 1563590:tid 139822775862848] [client 20.89.250.108:18311] AH01071: Got error 'Primary script unknown' [Tue Jul 07 03:41:09.063687 2026] [proxy_fcgi:error] [pid 1563590:tid 139822249272896] [client 20.89.250.108:18311] AH01071: Got error 'Primary script unknown' [Tue Jul 07 03:41:09.625603 2026] [proxy_fcgi:error] [pid 1563590:tid 139822081484352] [client 20.89.250.108:18311] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-07-07 02:30:02 (1 hour ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=80	Port Scan Hacking
🇭🇳 unph	2026-07-07 01:59:51 (1 hour ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
Anonymous	2026-07-07 01:58:25 (1 hour ago)	B: f2b 404 5x	Web App Attack
🇩🇪 Philister11	2026-07-07 01:53:03 (1 hour ago)	CrowdSec: crowdsecurity/http-crawl-non_statics (JP/AS8075)	Bad Web Bot Web App Attack
🇬🇧 andypiper	2026-07-07 01:00:26 (2 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
Anonymous	2026-07-07 00:55:23 (2 hours ago)	Automatically blocked after 22 security events. Observed repeated web application attack probes. Sou ... show more Automatically blocked after 22 security events. Observed repeated web application attack probes. Source: Cloudflare security controls. show less	Hacking Web App Attack
🇸🇪 nekopavel	2026-07-07 00:50:50 (3 hours ago)	20.89.250.108 - - [07/Jul/2026:02:50:44 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.89.250.108 - - [07/Jul/2026:02:50:44 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162"-" stats.neko.chat "-""0.000" "-""Osaka" "JP" 20.89.250.108 - - [07/Jul/2026:02:50:46 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 19"-" stats.neko.chat "-""0.005" "0.004""Osaka" "JP" 20.89.250.108 - - [07/Jul/2026:02:50:47 +0200]"GET /wp-check.php HTTP/1.1" 301 162"-" stats.neko.chat "-""0.000" "-""Osaka" "JP" ... show less	Hacking Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-07 00:35:04 (3 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 John Doe	2026-07-07 00:16:29 (3 hours ago)	$f2bV_matches	DDoS Attack Web Spam Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 1026 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 194.233.86.223

🇦🇷 181.23.75.102

🇧🇷 177.11.196.79

🇺🇸 156.67.71.203

🇺🇸 104.167.25.39

🇮🇩 103.142.89.76

🇮🇳 103.123.78.30

🇧🇩 103.109.215.8

🇮🇳 103.91.95.212

🇫🇷 91.231.89.116

🇺🇸 66.132.224.18

🇳🇱 45.148.10.157

🇳🇱 45.14.134.197

🇮🇩 36.79.227.80

🇬🇧 31.113.211.100

🇧🇦 217.197.141.163

🇩🇪 212.227.7.185

🇺🇸 195.184.76.62

🇺🇸 195.184.76.60

🇧🇼 168.167.228.123