JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.203.137.163

20.203.137.163 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.203.137.163

Whois 20.203.137.163

IP Abuse Reports for 20.203.137.163:

This IP address has been reported a total of 111 times from 84 distinct sources. 20.203.137.163 was first reported on June 2nd 2026, and the most recent report was 15 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 as211431.net	2026-06-03 07:43:18 (20 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CH. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CH. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-logs.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 ipblock.com	2026-06-03 07:28:00 (20 hours ago)	IPBlock protected site ID [3390-wh]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-06-03 07:24:10 (20 hours ago)	WordPress/Woo probe	Web App Attack
🇳🇱 Brict IT	2026-06-03 07:15:21 (20 hours ago)		Bad Web Bot Web App Attack
🇵🇱 alianet	2026-06-03 06:17:18 (21 hours ago)	[Wed Jun 03 06:17:17.512067 2026] [proxy_fcgi:error] [pid 205763:tid 205791] [client 20.203.137.163: ... show more [Wed Jun 03 06:17:17.512067 2026] [proxy_fcgi:error] [pid 205763:tid 205791] [client 20.203.137.163:4709] AH01071: Got error 'Primary script unknown' [Wed Jun 03 06:17:17.542438 2026] [proxy_fcgi:error] [pid 205763:tid 205795] [client 20.203.137.163:4709] AH01071: Got error 'Primary script unknown' [Wed Jun 03 06:17:17.573375 2026] [proxy_fcgi:error] [pid 205763:tid 205793] [client 20.203.137.163:4709] AH01071: Got error 'Primary script unknown' [Wed Jun 03 06:17:17.621510 2026] [proxy_fcgi:error] [pid 205763:tid 205798] [client 20.203.137.163:4709] AH01071: Got error 'Primary script unknown' [Wed Jun 03 06:17:17.651848 2026] [proxy_fcgi:error] [pid 205763:tid 205796] [client 20.203.137.163:4709] AH01071: Got error 'Primary script unknown' [Wed Jun 03 06:17:17.716212 2026] [proxy_fcgi:error] [pid 205763:tid 205800] [client 20.203.137.163:4709] AH01071: Got error 'Primary script unknown' [Wed Jun 03 06:17:17.767975 2026] [proxy_fcgi:error] [pid 205763:tid 205802] [client 20.203.137.163: ... show less	Port Scan Web App Attack
🇺🇸 Epimetheus	2026-06-03 06:04:31 (22 hours ago)	Unauthorized access attempts: [GET] /root.php [GET] /aaa.php [GET] /wp-includes/js/tinymce/themes/i ... show more Unauthorized access attempts: [GET] /root.php [GET] /aaa.php [GET] /wp-includes/js/tinymce/themes/inlite/ [GET] /inputs.php [GET] /wp-content/1.php [GET] /index.php [GET] /plugin.php [GET] /colour.php [GET] /updates.php [GET] /wp-logs.php [GET] /alfa-rex1.php [GET] /wp-index.php [GET] /file.php [GET] /wxo.php [GET] /cookie.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇳🇱 middelkoopcc	2026-06-03 05:15:04 (23 hours ago)	2026-06-03 07:12:12 [client 20.203.137.163:3146] AH01071: Got error 'Primary script unknown' && 2026 ... show more 2026-06-03 07:12:12 [client 20.203.137.163:3146] AH01071: Got error 'Primary script unknown' && 2026-06-03 07:12:12 [client 20.203.137.163:3146] AH01071: Got error 'Primary script unknown' && 2026-06-03 07:12:12 [client 20.203.137.163:3146] AH01071: Got error 'Primary script unknown' && 70 more within 20 minutes show less	Web App Attack
🇳🇴 Abuse Buster	2026-06-03 05:04:37 (23 hours ago)	20.203.137.163 - - [03/Jun/2026:07:04:35 +0200] "GET /a.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windo ... show more 20.203.137.163 - - [03/Jun/2026:07:04:35 +0200] "GET /a.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.137.163 - - [03/Jun/2026:07:04:35 +0200] "GET /aa.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.137.163 - - [03/Jun/2026:07:04:35 +0200] "GET /aaa.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.137.163 - - [03/Jun/2026:07:04:35 +0200] "GET /ab.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 Skyrider	2026-06-03 04:55:57 (23 hours ago)	crowdsecurity/http-backdoors-attempts	Hacking
🇺🇸 Mundo Bueno	2026-06-03 04:45:40 (23 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /alfa-rex.php7 \| Pays: CH \| UA: Mozilla/5.0 (Windows NT ... show more [ISILIA Protection v2.1] Tentative d'accès: /alfa-rex.php7 \| Pays: CH \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa show less	Hacking Web App Attack
🇳🇱 Mangelot Hosting	2026-06-03 04:43:07 (23 hours ago)	(upload_shell) srv101 Shell upload 20.203.137.163 (CH/Switzerland/-): 1 in the last 3600 secs; Ports ... show more (upload_shell) srv101 Shell upload 20.203.137.163 (CH/Switzerland/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-06-03 04:26:47 (23 hours ago)	20.203.137.163 - - [03/Jun/2026:06:26:45 +0200] "GET /a.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Wind ... show more 20.203.137.163 - - [03/Jun/2026:06:26:45 +0200] "GET /a.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.137.163 - - [03/Jun/2026:06:26:45 +0200] "GET /aa.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.137.163 - - [03/Jun/2026:06:26:45 +0200] "GET /aaa.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.137.163 - - [03/Jun/2026:06:26:45 +0200] "GET /ab.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.137.163 - - [03/Jun/2026:06:26:45 +0200] "GET /lock360.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.137 ... show less	Web App Attack
🇩🇪 Petros Stefanakis	2026-06-03 04:19:53 (23 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 20.203.137.163 (CH/Switzerland/-)	SQL Injection
🇺🇸 jormaster3k	2026-06-03 04:06:06 (1 day ago)	Attack against Apache (too many 404s)	Web App Attack
🇫🇷 masterguru	2026-06-03 03:37:39 (1 day ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)	Hacking

Showing 31 to 45 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.59.206.2

🇫🇷 188.209.129.151

🇵🇾 181.123.136.11

🇻🇳 180.93.3.33

🇩🇪 165.245.246.63

🇵🇪 161.132.38.234

🇭🇰 152.32.171.99

🇱🇹 141.98.9.227

🇳🇱 103.176.90.41

🇷🇴 92.118.39.236

🇺🇸 91.230.168.123

🇺🇸 66.132.195.124

🇮🇳 59.98.148.5

🇻🇳 42.116.14.91

🇨🇳 180.76.236.214

🇨🇳 180.76.231.110

🇨🇳 180.76.225.49

🇨🇳 180.76.183.253

🇨🇳 117.71.53.210

🇸🇪 81.170.248.221