JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.89.80.94

20.89.80.94 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.89.80.94

Whois 20.89.80.94

IP Abuse Reports for 20.89.80.94:

This IP address has been reported a total of 19 times from 18 distinct sources. 20.89.80.94 was first reported on July 19th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-22 04:10:08 (2 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 14:38:21 (15 hours ago)	(mod_security) mod_security (id:225170) triggered by 20.89.80.94 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 20.89.80.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 10:38:17.486072 2026] [security2:error] [pid 31397:tid 31397] [client 20.89.80.94:33882] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|havenlaneministries.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "havenlaneministries.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "al-EWUKqeI98afneaHxLBAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-21 06:31:03 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-21 06:29:16 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TAY	2026-07-20 16:35:09 (1 day ago)	20.89.80.94 - - [21/Jul/2026:00:32:16 +0800] "POST /wp-login.php HTTP/1.1" 200 2677 "https://littlep ... show more 20.89.80.94 - - [21/Jul/2026:00:32:16 +0800] "POST /wp-login.php HTTP/1.1" 200 2677 "https://littleprairie.com.my/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 20.89.80.94 - - [21/Jul/2026:00:32:40 +0800] "POST /wp-login.php HTTP/1.1" 200 8551 "https://mail.littleprairie.com.my/wp-login.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/147.0.7871.34 Mobile/15E148 Safari/604.1" 20.89.80.94 - - [21/Jul/2026:00:35:08 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... show less	Brute-Force
🇩🇪 ger-stg-sifi1	2026-07-20 16:11:04 (1 day ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 ipoac.nl	2026-07-20 15:58:58 (1 day ago)	2026-07-20T17:58:57.077816+02:00 ipoac.nl wordpress(-)-: Authentication failure for-from 20.89.80.94	Web App Attack
Anonymous	2026-07-20 15:20:00 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇬🇧 gigatech	2026-07-20 15:10:03 (1 day ago)	Webserver Probing	Web App Attack
🇩🇪 london2038.com	2026-07-20 13:41:09 (1 day ago)	Probing for exploits 20.89.80.94 - - [20/Jul/2026:15:41:02 +0200] "GET /wp-login.php HTTP/2.0" 301 0 ... show more Probing for exploits 20.89.80.94 - - [20/Jul/2026:15:41:02 +0200] "GET /wp-login.php HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" 20.89.80.94 - - [20/Jul/2026:15:41:05 +0200] "POST /wp-login.php HTTP/2.0" 301 0 "https://v97746.<REDACTED>/wp-login.php" "Mozilla/5.0 (Linux; Android 12; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" show less	Hacking Web App Attack
🇺🇸 nationaleventpros.com	2026-07-20 07:43:46 (1 day ago)	WordPress login attempt	Brute-Force
🇩🇪 nyt	2026-07-20 07:20:43 (1 day ago)	Repeated WordPress login POSTs blocked by WAF (3 in 6h)	Brute-Force Web App Attack
🇵🇱 bmino.pl	2026-07-20 05:37:20 (2 days ago)	Autoban IP(2): 20.89.80.94 - Hostname: Microsoft Corporation - City: Tokyo - Region: Tokyo - Country ... show more Autoban IP(2): 20.89.80.94 - Hostname: Microsoft Corporation - City: Tokyo - Region: Tokyo - Country: Japan - Location: 35.68,139.77 - Organization: Microsoft Azure Cloud (japaneast) - failed attempts. show less	Web App Attack
🇲🇹 Malta	2026-07-19 17:54:46 (2 days ago)	20.89.80.94 - - [19/Jul/2026:19:54:46 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Linux; Andr ... show more 20.89.80.94 - - [19/Jul/2026:19:54:46 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Linux; Android 10; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 Hazzard	2026-07-19 17:23:22 (2 days ago)	(wordpress) Failed wordpress login from 20.89.80.94 (JP/Japan/Tokyo/Tokyo/-/[redacted]): (CF_ENABLE ... show more (wordpress) Failed wordpress login from 20.89.80.94 (JP/Japan/Tokyo/Tokyo/-/[redacted]): (CF_ENABLE) show less	Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.88.253.109

🇱🇻 62.60.234.140

🇫🇮 147.185.133.78

🇵🇰 144.79.57.247

🇰🇷 112.216.108.62

🇨🇳 111.9.22.102

🇧🇬 79.124.62.230

🇩🇪 62.133.60.87

🇰🇷 59.24.133.197

🇻🇳 45.119.81.245

🇸🇬 43.173.179.110

🇲🇽 186.96.145.241

🇺🇸 162.216.150.221

🇺🇸 162.216.150.185

🇮🇳 159.65.148.158

🇺🇸 157.55.39.10

🇺🇸 107.174.4.146

🇭🇰 101.36.108.175

🇳🇱 195.178.110.227

🇳🇱 185.223.235.35