JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.89.57.196

20.89.57.196 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.89.57.196

Whois 20.89.57.196

IP Abuse Reports for 20.89.57.196:

This IP address has been reported a total of 147 times from 113 distinct sources. 20.89.57.196 was first reported on July 5th 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-07-09 03:10:17 (23 hours ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:05 -0 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:05 -0300] "GET /wk/index.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.83 - - [05/Jul/2026:12:00:05 -0300] "GET /inputs.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.83 - - [05/Jul/2026:12:00:06 -0300] "GET /ioxi-o.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:06 -0300] "GET /function/function.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:06 -0300] "GET /rip.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:06 -0300] "GET /admin.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:07 -0300] "GET /wp-content/uploads/index.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:07 -0300] "GET /cache.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:07 -0300] "GET /themes.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-07-08 03:09:52 (1 day ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:05 -0 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:05 -0300] "GET /wk/index.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.83 - - [05/Jul/2026:12:00:05 -0300] "GET /inputs.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.83 - - [05/Jul/2026:12:00:06 -0300] "GET /ioxi-o.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:06 -0300] "GET /function/function.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:06 -0300] "GET /rip.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:06 -0300] "GET /admin.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:07 -0300] "GET /wp-content/uploads/index.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:07 -0300] "GET /cache.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:07 -0300] "GET /themes.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-07-07 03:09:43 (2 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:05 -0 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:05 -0300] "GET /wk/index.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.83 - - [05/Jul/2026:12:00:05 -0300] "GET /inputs.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.83 - - [05/Jul/2026:12:00:06 -0300] "GET /ioxi-o.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:06 -0300] "GET /function/function.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:06 -0300] "GET /rip.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:06 -0300] "GET /admin.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:07 -0300] "GET /wp-content/uploads/index.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:07 -0300] "GET /cache.php HTTP/1.1" 404 414 20.89.57.196 162.159.108.147 - - [05/Jul/2026:12:00:07 -0300] "GET /themes.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇫🇷 Catalin Negru	2026-07-06 19:03:48 (3 days ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇳🇱 Site.eu	2026-07-06 16:14:31 (3 days ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-07-06 14:07:37 (3 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2026-07-06 07:55:17 (3 days ago)	[Mon Jul 06 08:55:15.758468 2026] [proxy_fcgi:error] [pid 1538450:tid 139822750684736] [client 20.89 ... show more [Mon Jul 06 08:55:15.758468 2026] [proxy_fcgi:error] [pid 1538450:tid 139822750684736] [client 20.89.57.196:2348] AH01071: Got error 'Primary script unknown' [Mon Jul 06 08:55:16.032555 2026] [proxy_fcgi:error] [pid 1538450:tid 139822123447872] [client 20.89.57.196:2348] AH01071: Got error 'Primary script unknown' [Mon Jul 06 08:55:16.307786 2026] [proxy_fcgi:error] [pid 1538450:tid 139822089877056] [client 20.89.57.196:2348] AH01071: Got error 'Primary script unknown' [Mon Jul 06 08:55:16.583164 2026] [proxy_fcgi:error] [pid 1538450:tid 139822115055168] [client 20.89.57.196:2348] AH01071: Got error 'Primary script unknown' [Mon Jul 06 08:55:16.858578 2026] [proxy_fcgi:error] [pid 1538450:tid 139822759077440] [client 20.89.57.196:2348] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇮 Christopher Hughes	2026-07-06 07:35:52 (3 days ago)	[Mon Jul 06 08:35:50.950396 2026] [proxy_fcgi:error] [pid 1538450:tid 139822792648256] [client 20.89 ... show more [Mon Jul 06 08:35:50.950396 2026] [proxy_fcgi:error] [pid 1538450:tid 139822792648256] [client 20.89.57.196:11048] AH01071: Got error 'Primary script unknown' [Mon Jul 06 08:35:51.216784 2026] [proxy_fcgi:error] [pid 1538450:tid 139822784255552] [client 20.89.57.196:11048] AH01071: Got error 'Primary script unknown' [Mon Jul 06 08:35:51.482101 2026] [proxy_fcgi:error] [pid 1538450:tid 139822115055168] [client 20.89.57.196:11048] AH01071: Got error 'Primary script unknown' [Mon Jul 06 08:35:51.748528 2026] [proxy_fcgi:error] [pid 1538450:tid 139822215702080] [client 20.89.57.196:11048] AH01071: Got error 'Primary script unknown' [Mon Jul 06 08:35:52.013723 2026] [proxy_fcgi:error] [pid 1538450:tid 139822098269760] [client 20.89.57.196:11048] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-07-06 07:28:59 (3 days ago)	20.89.57.196 - - [06/Jul/2026:04:28:56 -0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 162 ... show more 20.89.57.196 - - [06/Jul/2026:04:28:56 -0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.89.57.196 - - [06/Jul/2026:04:28:57 -0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.89.57.196 - - [06/Jul/2026:04:28:58 -0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" ... show less	Port Scan
🇺🇸 chronos	2026-07-06 06:52:17 (3 days ago)	[AUTORAVALT][[06/07/2026 - 03:52:17 -03:00 UTC] Attack from [Microsoft Corporation] [20.89.57.196] A ... show more [AUTORAVALT][[06/07/2026 - 03:52:17 -03:00 UTC] Attack from [Microsoft Corporation] [20.89.57.196] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software p] ... show less	Hacking Web App Attack
🇮🇩 zam	2026-07-06 06:38:32 (3 days ago)	20.89.57.196 - - [06/Jul/2026:06:38:27 +0000] "GET /wp-admin/alfa.php HTTP/1.1" 302 278	Web App Attack
🇺🇸 Mundo Bueno	2026-07-06 06:35:18 (3 days ago)	[ISILIA Protection v2.1] Tentative d'accès: /info.php \| Pays: JP \| UA: Mozilla/5.0 (Windows NT 10.0; ... show more [ISILIA Protection v2.1] Tentative d'accès: /info.php \| Pays: JP \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa show less	Hacking Web App Attack
🇺🇸 chronos	2026-07-06 06:17:09 (3 days ago)	[AUTORAVALT][[06/07/2026 - 03:17:09 -03:00 UTC] Attack from [Microsoft Corporation] [20.89.57.196] A ... show more [AUTORAVALT][[06/07/2026 - 03:17:09 -03:00 UTC] Attack from [Microsoft Corporation] [20.89.57.196] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software p] ... show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-07-06 06:16:23 (3 days ago)	Attempted access to sensitive endpoint (/wp-content/admin.php) detected. Automated scan or unauthori ... show more Attempted access to sensitive endpoint (/wp-content/admin.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇦🇺 2000cn.com.au	2026-07-06 05:50:57 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.175.22.56

🇨🇳 202.99.211.194

🇧🇷 201.0.35.53

🇭🇰 199.45.154.179

🇺🇸 185.226.196.14

🇺🇸 172.238.188.122

🇩🇪 167.94.146.32

🇺🇸 162.216.149.229

🇺🇸 162.216.149.215

🇫🇮 147.185.133.226

🇺🇸 147.185.132.94

🇨🇳 124.226.216.189

🇨🇳 106.117.107.81

🇳🇱 93.123.109.125

🇳🇱 91.92.40.36

🇳🇱 85.11.167.7

🇨🇳 58.213.107.138

🇨🇳 47.106.120.22

🇸🇬 47.84.129.251

🇮🇩 43.157.227.19