JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.199.183.73

20.199.183.73 was found in our database!

This IP was reported 153 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.199.183.73

Whois 20.199.183.73

IP Abuse Reports for 20.199.183.73:

This IP address has been reported a total of 153 times from 127 distinct sources. 20.199.183.73 was first reported on July 23rd 2026, and the most recent report was 5 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 thesimonmanuel	2026-07-23 20:45:56 (5 minutes ago)	20.199.183.73 - - [24/Jul/2026:02:15:55 +0530] "GET /wp-config.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 ... show more 20.199.183.73 - - [24/Jul/2026:02:15:55 +0530] "GET /wp-config.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" show less	Web App Attack
🇫🇮 Christopher Hughes	2026-07-23 20:44:51 (6 minutes ago)	[Thu Jul 23 21:44:50.167197 2026] [proxy_fcgi:error] [pid 2127878:tid 139825881544256] [client 20.19 ... show more [Thu Jul 23 21:44:50.167197 2026] [proxy_fcgi:error] [pid 2127878:tid 139825881544256] [client 20.199.183.73:22765] AH01071: Got error 'Primary script unknown' [Thu Jul 23 21:44:50.340124 2026] [proxy_fcgi:error] [pid 2127878:tid 139826510669376] [client 20.199.183.73:22765] AH01071: Got error 'Primary script unknown' [Thu Jul 23 21:44:50.378468 2026] [proxy_fcgi:error] [pid 2127878:tid 139826634544704] [client 20.199.183.73:22765] AH01071: Got error 'Primary script unknown' [Thu Jul 23 21:44:50.458495 2026] [proxy_fcgi:error] [pid 2127878:tid 139826527454784] [client 20.199.183.73:22765] AH01071: Got error 'Primary script unknown' [Thu Jul 23 21:44:50.678647 2026] [proxy_fcgi:error] [pid 2127878:tid 139826552632896] [client 20.199.183.73:22765] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇸 WizardsToolkit	2026-07-23 20:41:12 (10 minutes ago)	tried to access server backup files	Web App Attack
🇩🇰 ScamAware	2026-07-23 20:20:40 (30 minutes ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 2. Unique request paths counted internally: 2. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Web App Attack
🇺🇸 kosada.com	2026-07-23 20:15:02 (36 minutes ago)	Web vulnerability probing: /cc.php	Web App Attack
🇫🇷 masterguru	2026-07-23 20:06:11 (45 minutes ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)	Hacking
🇩🇪 wpadm3	2026-07-23 20:05:56 (45 minutes ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 patrisei	2026-07-23 19:57:51 (53 minutes ago)	You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-probing	Port Scan Web App Attack
Anonymous	2026-07-23 19:51:52 (59 minutes ago)	(PERMBLOCK) 20.199.183.73 (CH/Switzerland/-) has had more than 4 temp blocks in the last 86400 secs; ... show more (PERMBLOCK) 20.199.183.73 (CH/Switzerland/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇺🇸 Epimetheus	2026-07-23 19:38:29 (1 hour ago)	Unauthorized access attempts: [GET] /xmrlpc.php [GET] /wp-includes/js/crop/ [GET] /cache.php [GET] ... show more Unauthorized access attempts: [GET] /xmrlpc.php [GET] /wp-includes/js/crop/ [GET] /cache.php [GET] /wp-admin/images/ [GET] /404.php [GET] /an.php [GET] /wp-content/index.php [GET] /system_log.php [GET] /wp-admin/user/index.php [GET] /wp-content/cache/ [GET] /wp-admin/js/ [GET] /wp-admin/css/colors/index.php [GET] /wp-admin/css/colors/ [GET] /public/css.php UA: Unknown show less	Web App Attack
🇧🇪 taivas.nl	2026-07-23 19:32:03 (1 hour ago)	Wordpress_Attack	Web App Attack
🇩🇪 Lino Project	2026-07-23 19:30:59 (1 hour ago)	CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/http-admin-interface-probing	Hacking
🇵🇱 nfsec.pl	2026-07-23 19:29:12 (1 hour ago)	20.199.183.73 - - [23/Jul/2026:19:29:11 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 404 5316 ... show more 20.199.183.73 - - [23/Jul/2026:19:29:11 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 404 5316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.199.183.73 - - [23/Jul/2026:19:29:11 +0000] "GET /m.php HTTP/1.1" 404 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.199.183.73 - - [23/Jul/2026:19:29:11 +0000] "GET /wp-admin/css/wp-login.php HTTP/1.1" 404 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.199.183.73 - - [23/Jul/2026:19:29:11 +0000] "GET /wk/index.php HTTP/1.1" 404 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.199.183.73 - - [23/Jul/2026:19:29:12 +0000] "GET /mini.php HTTP/1.1" 404 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro ... show less	Web App Attack Exploited Host
🇮🇹 CoreTech srl	2026-07-23 19:23:56 (1 hour ago)	cloudlinux2 fail2ban: 2026-07-23 21:19:00,399 fail2ban.filter [1589]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-23 21:19:00,399 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 103.221.220.62 - 2026-07-23 21:19:00cloudlinux2 fail2ban: 2026-07-23 21:18:59,888 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 103.221.220.62 - 2026-07-23 21:18:59cloudlinux2 fail2ban: 2026-07-23 21:19:00,508 fail2ban.actions [1589]: NOTICE [plesk-modsecurity] Ban 103.221.220.62cloudlinux2 fail2ban: 2026-07-23 21:19:00,600 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 103.221.220.62 - 2026-07-23 21:19:00cloudlinux2 fail2ban: 2026-07-23 21:18:59,804 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 103.221.220.62 - 2026-07-23 21:18:59cloudlinux2 fail2ban: 2026-07-23 21:19:04,355 fail2ban.filter [1589]: INFO [plesk-apache] Found 20.199.183.73 - 2026-07-23 21:19:04cloudlinux2 fail2ban: 2026-07-23 21:18:59,792 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 103.221.220.62 - 2026-07-23 21:18:59cloudlinux2 fail2b show less	Brute-Force
🇬🇧 rakkor	2026-07-23 19:23:34 (1 hour ago)	2026-07-23T20:23:34+01:00 NAS [Thu Jul 23 20:23:34.100249 2026] [proxy_fcgi:error] [pid 4639:tid 466 ... show more 2026-07-23T20:23:34+01:00 NAS [Thu Jul 23 20:23:34.100249 2026] [proxy_fcgi:error] [pid 4639:tid 4660] [client 20.199.183.73:37052] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Hacking

Showing 1 to 15 of 153 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.209.184.114

🇺🇸 193.3.53.5

🇩🇪 140.248.227.167

🇧🇬 79.124.62.230

🇸🇬 47.84.111.68

🇩🇪 34.89.198.83

🇺🇸 2a04:4e40:e040:0:6b0:13c7:109:25b6

🇷🇺 217.149.191.246

🇩🇪 134.209.254.108

🇮🇳 122.187.230.176

🇺🇸 91.230.168.122

🇫🇷 51.77.158.34

🇳🇱 45.148.10.141

🇺🇸 40.80.200.186

🇺🇸 37.140.223.99

🇳🇱 34.90.172.200

🇺🇸 20.83.27.184

🇵🇰 223.123.124.70

🇨🇳 222.128.21.18

🇫🇷 185.177.72.49