JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.89.80.94

20.89.80.94 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 97%: ?

97%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.89.80.94

Whois 20.89.80.94

IP Abuse Reports for 20.89.80.94:

This IP address has been reported a total of 18 times from 17 distinct sources. 20.89.80.94 was first reported on July 19th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-21 14:38:21 (9 hours ago)	(mod_security) mod_security (id:225170) triggered by 20.89.80.94 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 20.89.80.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 10:38:17.486072 2026] [security2:error] [pid 31397:tid 31397] [client 20.89.80.94:33882] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|havenlaneministries.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "havenlaneministries.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "al-EWUKqeI98afneaHxLBAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-21 06:31:03 (17 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-21 06:29:16 (17 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TAY	2026-07-20 16:35:09 (1 day ago)	20.89.80.94 - - [21/Jul/2026:00:32:16 +0800] "POST /wp-login.php HTTP/1.1" 200 2677 "https://littlep ... show more 20.89.80.94 - - [21/Jul/2026:00:32:16 +0800] "POST /wp-login.php HTTP/1.1" 200 2677 "https://littleprairie.com.my/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 20.89.80.94 - - [21/Jul/2026:00:32:40 +0800] "POST /wp-login.php HTTP/1.1" 200 8551 "https://mail.littleprairie.com.my/wp-login.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/147.0.7871.34 Mobile/15E148 Safari/604.1" 20.89.80.94 - - [21/Jul/2026:00:35:08 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... show less	Brute-Force
🇩🇪 ger-stg-sifi1	2026-07-20 16:11:04 (1 day ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 ipoac.nl	2026-07-20 15:58:58 (1 day ago)	2026-07-20T17:58:57.077816+02:00 ipoac.nl wordpress(-)-: Authentication failure for-from 20.89.80.94	Web App Attack
Anonymous	2026-07-20 15:20:00 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇬🇧 gigatech	2026-07-20 15:10:03 (1 day ago)	Webserver Probing	Web App Attack
🇩🇪 london2038.com	2026-07-20 13:41:09 (1 day ago)	Probing for exploits 20.89.80.94 - - [20/Jul/2026:15:41:02 +0200] "GET /wp-login.php HTTP/2.0" 301 0 ... show more Probing for exploits 20.89.80.94 - - [20/Jul/2026:15:41:02 +0200] "GET /wp-login.php HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" 20.89.80.94 - - [20/Jul/2026:15:41:05 +0200] "POST /wp-login.php HTTP/2.0" 301 0 "https://v97746.<REDACTED>/wp-login.php" "Mozilla/5.0 (Linux; Android 12; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" show less	Hacking Web App Attack
🇺🇸 nationaleventpros.com	2026-07-20 07:43:46 (1 day ago)	WordPress login attempt	Brute-Force
🇩🇪 nyt	2026-07-20 07:20:43 (1 day ago)	Repeated WordPress login POSTs blocked by WAF (3 in 6h)	Brute-Force Web App Attack
🇵🇱 bmino.pl	2026-07-20 05:37:20 (1 day ago)	Autoban IP(2): 20.89.80.94 - Hostname: Microsoft Corporation - City: Tokyo - Region: Tokyo - Country ... show more Autoban IP(2): 20.89.80.94 - Hostname: Microsoft Corporation - City: Tokyo - Region: Tokyo - Country: Japan - Location: 35.68,139.77 - Organization: Microsoft Azure Cloud (japaneast) - failed attempts. show less	Web App Attack
🇲🇹 Malta	2026-07-19 17:54:46 (2 days ago)	20.89.80.94 - - [19/Jul/2026:19:54:46 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Linux; Andr ... show more 20.89.80.94 - - [19/Jul/2026:19:54:46 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Linux; Android 10; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 Hazzard	2026-07-19 17:23:22 (2 days ago)	(wordpress) Failed wordpress login from 20.89.80.94 (JP/Japan/Tokyo/Tokyo/-/[redacted]): (CF_ENABLE ... show more (wordpress) Failed wordpress login from 20.89.80.94 (JP/Japan/Tokyo/Tokyo/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇬🇧 spamverify.com	2026-07-19 17:15:59 (2 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.144.21.28

🇲🇾 183.171.61.211

🇧🇷 179.63.12.190

🇺🇸 162.216.150.214

🇵🇰 110.38.250.135

🇰🇷 222.104.206.236

🇬🇧 193.176.29.11

🇨🇴 179.32.222.55

🇺🇸 169.150.203.24

🇺🇸 135.237.125.183

🇨🇳 116.147.40.93

🇮🇩 103.112.5.7

🇮🇩 103.99.27.187

🇹🇭 103.4.217.13

🇸🇬 94.231.206.37

🇺🇸 92.204.138.198

🇩🇪 85.90.246.159

🇸🇪 81.231.7.162

🇩🇪 62.60.217.227

🇫🇷 51.77.158.34