JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.203.135.57

20.203.135.57 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.203.135.57

Whois 20.203.135.57

IP Abuse Reports for 20.203.135.57:

This IP address has been reported a total of 125 times from 113 distinct sources. 20.203.135.57 was first reported on August 8th 2022, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 KIDOS	2026-07-26 21:41:44 (13 minutes ago)	malicious activity	Web App Attack
🇩🇪 Viveronese	2026-07-26 21:32:02 (23 minutes ago)	HTTP vulnerability scanning	Web App Attack
🇺🇸 jormaster3k	2026-07-26 21:30:28 (24 minutes ago)	Attack against Apache (too many 404s)	Web App Attack
🇩🇪 Dominik Lysiak	2026-07-26 21:27:37 (27 minutes ago)	20.203.135.57 - - [26/Jul/2026:23:27:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.203.135.57 - - [26/Jul/2026:23:27:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.203.135.57 - - [26/Jul/2026:23:27:36 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 20.203.135.57 - - [26/Jul/2026:23:27:36 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" ... show less	Web App Attack
🇯🇵 sayzard	2026-07-26 21:26:24 (28 minutes ago)	20.203.135.57 - - [27/Jul/2026:06:26:24 +0900] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.203.135.57 - - [27/Jul/2026:06:26:24 +0900] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 22 "-" "-" ... show less	Bad Web Bot
Anonymous	2026-07-26 21:07:02 (48 minutes ago)	Automated web scanner. Requested suspicious paths: /wp-content/plugins/hellopress/wp_filemanager.php ... show more Automated web scanner. Requested suspicious paths: /wp-content/plugins/hellopress/wp_filemanager.php \| /this_is_a_new_hello_world.php \| /public/mI35rZhMg1zJ1vuXdefault.php \| /000.php \| /znuab.php \| /tx79.php \| /htrpu.php \| /zone.php \| /wp-content/plugins/hellopress/wp_filemanager.php \| /sboov.php \| /edit-tags.php \| /sv.php \| /wyzer1.php. UTC: 2026-07-26 20:17:21. show less	Web App Attack
🇳🇱 Roderic	2026-07-26 21:04:53 (50 minutes ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
Anonymous	2026-07-26 21:04:18 (51 minutes ago)	[Sun Jul 26 23:04:16.495537 2026] [authz_core:error] [pid 41496:tid 41552] [client 20.203.135.57:813 ... show more [Sun Jul 26 23:04:16.495537 2026] [authz_core:error] [pid 41496:tid 41552] [client 20.203.135.57:8137] AH01630: client denied by server configuration: /var/www/html/wper.php [Sun Jul 26 23:04:16.540626 2026] [authz_core:error] [pid 41496:tid 41554] [client 20.203.135.57:8137] AH01630: client denied by server configuration: /var/www/html/elp.php [Sun Jul 26 23:04:16.803761 2026] [authz_core:error] [pid 41496:tid 41555] [client 20.203.135.57:8137] AH01630: client denied by server configuration: /var/www/html/BDKR28WP.php [Sun Jul 26 23:04:17.133166 2026] [authz_core:error] [pid 41496:tid 41559] [client 20.203.135.57:8137] AH01630: client denied by server configuration: /var/www/html/da1c121bb2index.php [Sun Jul 26 23:04:17.484466 2026] [authz_core:error] [pid 41496:tid 41556] [client 20.203.135.57:8137] AH01630: client denied by server configuration: /var/www/html/home.php ... show less	Web App Attack
🇩🇪 roxyapi	2026-07-26 21:01:31 (53 minutes ago)	Honeypot: automated vulnerability scan / web app attack. Last probe: GET /public/mI35rZhMg1zJ1vuXdef ... show more Honeypot: automated vulnerability scan / web app attack. Last probe: GET /public/mI35rZhMg1zJ1vuXdefault.php show less	Web App Attack Bad Web Bot
🇳🇱 debestelapp	2026-07-26 21:00:23 (54 minutes ago)		Web App Attack
🇮🇩 sockominfo	2026-07-26 21:00:09 (55 minutes ago)	Webshell discovery success (Response: 200). Threat Score: 8.4/10 (HIGH). Reported by TangerangKota-C ... show more Webshell discovery success (Response: 200). Threat Score: 8.4/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇹🇭 thaizone.com	2026-07-26 20:57:32 (57 minutes ago)	Brute Force Attack on a Web Resources (repeated 404) #1	DDoS Attack Web Spam Brute-Force Web App Attack
Anonymous	2026-07-26 20:54:08 (1 hour ago)	20.203.135.57 - - [26/Jul/2026:22:54:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.203.135.57 - - [26/Jul/2026:22:54:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 5793 "-" "-" ... show less	Web App Attack
🇵🇱 strefapi_com	2026-07-26 20:50:34 (1 hour ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇩🇪 dbmwebdesign	2026-07-26 20:50:14 (1 hour ago)	Repeated probing for non-existent PHP exploit paths blocked by Fail2Ban	Web App Attack

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.177.179.79

🇩🇪 194.187.176.91

🇧🇴 190.181.27.37

🇸🇬 178.128.51.84

🇺🇸 172.217.36.217

🇳🇬 102.88.137.80

🇫🇷 51.68.107.154

🇺🇸 20.106.32.128

🇺🇸 213.108.3.171

🇺🇸 205.169.39.50

🇷🇴 92.118.39.71

🇧🇬 79.124.62.134

🇳🇱 45.148.10.152

🇨🇦 20.151.221.234

🇺🇸 173.255.223.73

🇳🇱 172.253.7.211

🇺🇸 147.185.132.76

🇬🇧 89.37.172.130

🇺🇸 47.77.218.233

🇩🇪 46.224.176.19