JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.91.138.88

20.91.138.88 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇪 Sweden
City	Gavle, Gavleborg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.91.138.88

Whois 20.91.138.88

IP Abuse Reports for 20.91.138.88:

This IP address has been reported a total of 138 times from 119 distinct sources. 20.91.138.88 was first reported on June 29th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 JCB	2026-06-29 16:29:00 (2 hours ago)	20.91.138.88 - - [29/Jun/2026:13:41:01 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 456 ... show more 20.91.138.88 - - [29/Jun/2026:13:41:01 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 456 "-" "-" 20.91.138.88 - - [29/Jun/2026:13:41:02 +0300] "GET /min.php HTTP/1.1" 404 456 "-" "-" ... show less	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-29 16:05:03 (2 hours ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 wpadm4	2026-06-29 15:37:08 (3 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-06-29 15:28:52 (3 hours ago)	PAD: Scan_Well_Known!,No_Ref,Bad_Web_Bot_D detected	Bad Web Bot
🇮🇹 mediarama.com	2026-06-29 15:18:35 (3 hours ago)	Banned by Fail2Ban	Web App Attack
🇵🇱 dzpk	2026-06-29 15:10:17 (3 hours ago)	20.91.138.88 - - [29/Jun/2026:14:02:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.91.138.88 - - [29/Jun/2026:14:02:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 848 "-" "-" show less	Bad Web Bot Web App Attack
🇩🇪 Nevermind	2026-06-29 15:08:23 (3 hours ago)	20.91.138.88 - - [29/Jun/2026:17:08:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.91.138.88 - - [29/Jun/2026:17:08:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4756 "-" "-" 20.91.138.88 - - [29/Jun/2026:17:08:22 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 3928 "-" "-" 20.91.138.88 - - [29/Jun/2026:17:08:22 +0200] "GET /min.php HTTP/1.1" 404 3928 "-" "-" 20.91.138.88 - - [29/Jun/2026:17:08:22 +0200] "GET //xozx.php HTTP/1.1" 404 3928 "-" "-" ... show less	Web App Attack
🇨🇭 beatsnet.com	2026-06-29 15:08:08 (3 hours ago)	[Mon Jun 29 17:08:00.276615 2026] [proxy_fcgi:error] [pid 4138:tid 20404475881488] [client 20.91.138 ... show more [Mon Jun 29 17:08:00.276615 2026] [proxy_fcgi:error] [pid 4138:tid 20404475881488] [client 20.91.138.88:22497] AH01071: Got error 'Primary script unknown' [Mon Jun 29 17:08:00.324595 2026] [proxy_fcgi:error] [pid 4138:tid 20404475881488] [client 20.91.138.88:22497] AH01071: Got error 'Primary script unknown' [Mon Jun 29 17:08:01.548174 2026] [proxy_fcgi:error] [pid 4138:tid 20404475881488] [client 20.91.138.88:22497] AH01071: Got error 'Primary script unknown' [Mon Jun 29 17:08:02.020574 2026] [proxy_fcgi:error] [pid 4138:tid 20404475881488] [client 20.91.138.88:22497] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇺🇸 nationaleventpros.com	2026-06-29 14:54:52 (3 hours ago)	vulnerability scan	Web App Attack
🇺🇸 CBJ	2026-06-29 14:48:52 (3 hours ago)	fail2ban: apache-random-recon ...	Web App Attack
Anonymous	2026-06-29 14:47:52 (3 hours ago)	20.91.138.88 - - [29/Jun/2026:16:47:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.91.138.88 - - [29/Jun/2026:16:47:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146739 "-" "-" 20.91.138.88 - - [29/Jun/2026:16:47:25 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146720 "-" "-" 20.91.138.88 - - [29/Jun/2026:16:47:26 +0200] "GET /min.php HTTP/1.1" 404 146698 "-" "-" 20.91.138.88 - - [29/Jun/2026:16:47:27 +0200] "GET /xozx.php HTTP/1.1" 404 146699 "-" "-" 20.91.138.88 - - [29/Jun/2026:16:47:28 +0200] "GET /p-blog.php HTTP/1.1" 404 146701 "-" "-" 20.91.138.88 - - [29/Jun/2026:16:47:29 +0200] "GET /file3.php HTTP/1.1" 404 146700 "-" "-" 20.91.138.88 - - [29/Jun/2026:16:47:31 +0200] "GET /mmrp.php HTTP/1.1" 404 146699 "-" "-" 20.91.138.88 - - [29/Jun/2026:16:47:32 +0200] "GET /harvestry.php HTTP/1.1" 404 146704 "-" "-" 20.91.138.88 - - [29/Jun/2026:16:47:33 +0200] "GET /file61.php HTTP/1.1" 404 146701 "-" "-" 20.91.138.88 - - [29/Jun/2026:16:47:34 +0200] "GET /jj.php HTTP/1.1" 404 146697 "-" "-" 20.91.138.88 - - [29/Jun/2026:16 ... show less	Web App Attack
🇩🇪 LRob.fr	2026-06-29 14:45:17 (3 hours ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
Anonymous	2026-06-29 14:42:39 (3 hours ago)	Requested unexistent endpoint (Wordpress login, etc.)	Web App Attack
🇺🇸 Mainpine	2026-06-29 14:37:24 (4 hours ago)	probing for vulnerable web apps	Web App Attack
🇬🇧 Oakley	2026-06-29 14:33:48 (4 hours ago)	(mod_security) mod_security (id:900191) triggered by 20.91.138.88 (SE/Sweden/-): 5 in the last 900 s ... show more (mod_security) mod_security (id:900191) triggered by 20.91.138.88 (SE/Sweden/-): 5 in the last 900 secs show less	Web App Attack Hacking

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.17.1.118

🇧🇷 205.210.31.186

🇹🇷 194.146.47.161

🇲🇾 175.141.178.91

🇺🇸 143.198.185.63

🇧🇬 78.128.112.30

🇸🇳 41.82.50.218

🇺🇸 216.16.101.175

🇳🇱 195.178.110.30

🇫🇮 147.185.133.159

🇺🇸 147.185.132.103

🇸🇬 114.119.133.85

🇺🇸 69.171.231.136

🇺🇸 44.153.211.123

🇺🇸 44.56.34.178

🇮🇷 37.255.220.246

🇬🇧 35.203.210.30

🇺🇸 135.119.97.71

🇻🇳 103.228.36.70

🇺🇸 91.230.168.25