JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.203.142.71

20.203.142.71 was found in our database!

This IP was reported 1,372 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.203.142.71

Whois 20.203.142.71

IP Abuse Reports for 20.203.142.71:

This IP address has been reported a total of 1,372 times from 611 distinct sources. 20.203.142.71 was first reported on March 31st 2026, and the most recent report was 6 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-30 05:51:50 (6 minutes ago)	[Thu Jul 30 07:51:49.340213 2026] [authz_core:error] [pid 445804:tid 445804] [client 20.203.142.71:3 ... show more [Thu Jul 30 07:51:49.340213 2026] [authz_core:error] [pid 445804:tid 445804] [client 20.203.142.71:35543] AH01630: client denied by server configuration: /var/lib/slidge/attachments ... show less	Brute-Force Web App Attack
🇺🇸 chrisj	2026-07-30 05:46:14 (12 minutes ago)	[Thu Jul 30 05:46:14.010845 2026] [proxy_fcgi:error] [pid 429810:tid 429895] [client 20.203.142.71:3 ... show more [Thu Jul 30 05:46:14.010845 2026] [proxy_fcgi:error] [pid 429810:tid 429895] [client 20.203.142.71:35495] AH01071: Got error 'Primary script unknown' [Thu Jul 30 05:46:14.230835 2026] [proxy_fcgi:error] [pid 429810:tid 429902] [client 20.203.142.71:35495] AH01071: Got error 'Primary script unknown' [Thu Jul 30 05:46:14.453414 2026] [proxy_fcgi:error] [pid 429810:tid 429889] [client 20.203.142.71:35495] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇺🇸 chrisj	2026-07-30 05:26:13 (32 minutes ago)	[Thu Jul 30 05:26:12.558659 2026] [proxy_fcgi:error] [pid 429810:tid 429905] [client 20.203.142.71:3 ... show more [Thu Jul 30 05:26:12.558659 2026] [proxy_fcgi:error] [pid 429810:tid 429905] [client 20.203.142.71:35582] AH01071: Got error 'Primary script unknown' [Thu Jul 30 05:26:12.772985 2026] [proxy_fcgi:error] [pid 429810:tid 429869] [client 20.203.142.71:35582] AH01071: Got error 'Primary script unknown' [Thu Jul 30 05:26:12.986431 2026] [proxy_fcgi:error] [pid 429810:tid 429872] [client 20.203.142.71:35582] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
Anonymous	2026-07-30 05:21:45 (36 minutes ago)	[Thu Jul 30 07:21:44.118476 2026] [authz_core:error] [pid 445790:tid 445790] [client 20.203.142.71:3 ... show more [Thu Jul 30 07:21:44.118476 2026] [authz_core:error] [pid 445790:tid 445790] [client 20.203.142.71:35482] AH01630: client denied by server configuration: /var/lib/slidge/attachments [Thu Jul 30 07:21:44.156908 2026] [authz_core:error] [pid 445790:tid 445790] [client 20.203.142.71:35482] AH01630: client denied by server configuration: /var/lib/slidge/attachments [Thu Jul 30 07:21:44.200233 2026] [authz_core:error] [pid 445790:tid 445790] [client 20.203.142.71:35482] AH01630: client denied by server configuration: /var/lib/slidge/attachments ... show less	Brute-Force Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-07-30 04:58:50 (59 minutes ago)	[Wed Jul 29 18:55:58.523650 2026] [cgid:error] [pid 32061:tid 140520391177792] [client 20.203.142.71 ... show more [Wed Jul 29 18:55:58.523650 2026] [cgid:error] [pid 32061:tid 140520391177792] [client 20.203.142.71:1344] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/index.php [Wed Jul 29 18:56:01.669866 2026] [cgid:error] [pid 32061:tid 140520500217408] [client 20.203.142.71:1344] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/admin.php [Wed Jul 29 22:58:50.292381 2026] [cgid:error] [pid 61121:tid 140520575718976] [client 20.203.142.71:37933] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/index.php ... show less	Web App Attack
🇬🇷 setupgr	2026-07-30 04:55:27 (1 hour ago)	(mod_security) mod_security (id:1000001) triggered by 20.203.142.71 (CH/Switzerland/Zurich/Zurich/-/ ... show more (mod_security) mod_security (id:1000001) triggered by 20.203.142.71 (CH/Switzerland/Zurich/Zurich/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Jul 30 07:55:22.094811 2026] [security2:error] [pid 3338:tid 3404] [remote 20.203.142.71:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.well-known/about.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /.well-known/about.php"] [severity "CRITICAL"] [tag "security"] [hostname "santoriniicon.com"] [uri "/.well-known/about.php"] [unique_id "amrZOq0Le_o8VnS5u1KPtgAEBxE"] show less	Port Scan
🇩🇪 Viveronese	2026-07-30 04:53:57 (1 hour ago)	HTTP vulnerability scanning	Web App Attack
🇮🇪 kundukundu	2026-07-30 04:38:35 (1 hour ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/plugins/hellopress/wp_filemanager ... show more [Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
Anonymous	2026-07-30 04:09:10 (1 hour ago)	20.203.142.71 - - [29/Jul/2026:23:09:00 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.203.142.71 - - [29/Jul/2026:23:09:00 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 403 199 "-" "-" 20.203.142.71 - - [29/Jul/2026:23:09:00 -0500] "GET /this_is_a_new_hello_world.php HTTP/1.0" 403 199 "-" "-" 20.203.142.71 - - [29/Jul/2026:23:09:00 -0500] "GET //aa.php HTTP/1.0" 403 199 "-" "-" 20.203.142.71 - - [29/Jul/2026:23:09:00 -0500] "GET /3PJcpMFsD8B.php HTTP/1.0" 403 199 "-" "-" 20.203.142.71 - - [29/Jul/2026:23:09:01 -0500] "GET /media.php HTTP/1.0" 403 199 "-" "-" 20.203.142.71 - - [29/Jul/2026:23:09:01 -0500] "GET /images.php HTTP/1.0" 403 199 "-" "-" 20.203.142.71 - - [29/Jul/2026:23:09:01 -0500] "GET /gecko.php HTTP/1.0" 403 199 "-" "-" 20.203.142.71 - - [29/Jul/2026:23:09:01 -0500] "GET /82.php HTTP/1.0" 403 199 "-" "-" 20.203.142.71 - - [29/Jul/2026:23:09:01 -0500] "GET /xstelth.php HTTP/1.0" 403 199 "-" "-" 20.203.142.71 - - [29/Jul/2026:23:09:01 -0500] "GET /xp.php HTTP/1.0" 403 199 "-" "-" 20.203.142.71 - - [29/Jul/2026:23:09:01 -0500] "GE ... show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-07-30 04:03:05 (1 hour ago)	Accessed trap at '/admin.php'	Web App Attack
🇳🇱 tpjg	2026-07-30 04:01:29 (1 hour ago)	Automated: 15 requests with error status in 120s window from 20.203.142.71. Evidence: /1polka.php:30 ... show more Automated: 15 requests with error status in 120s window from 20.203.142.71. Evidence: /1polka.php:301,/X.php:404,/X.php:301,/yup.php:404,/yup.php:301,/domvf.php:404,/domvf.php:301,/mgrr.php:404,/mgrr.php:301,/x.php:404,/x.php:301,/this_is_a_new_hello_world.php:404,/this_is_a_new_hello_world.php:301,/wp-content/plugins/hellopress/wp_filemanager.php:404,/wp-content/plugins/hellopress/wp_filemanager.php:301 (+1 more) show less	Web App Attack
🇨🇭 dalslab ltd	2026-07-30 03:10:40 (2 hours ago)	[30/Jul/2026:05:10:39 +0200] - 404 404 - GET https git.dalslab.com "/wp-content/plugins/hellopress/w ... show more [30/Jul/2026:05:10:39 +0200] - 404 404 - GET https git.dalslab.com "/wp-content/plugins/hellopress/wp_filemanager.php" [Client 20.203.142.71] [Length 11] [Gzip -] [Sent-to 10.1.1.40] "-" "-" [30/Jul/2026:05:10:39 +0200] - 404 404 - GET https git.dalslab.com "/this_is_a_new_hello_world.php" [Client 20.203.142.71] [Length 11] [Gzip -] [Sent-to 10.1.1.40] "-" "-" [30/Jul/2026:05:10:39 +0200] - 404 404 - GET https git.dalslab.com "/x.php" [Client 20.203.142.71] [Length 11] [Gzip -] [Sent-to 10.1.1.40] "-" "-" [30/Jul/2026:05:10:39 +0200] - 404 404 - GET https git.dalslab.com "/mgrr.php" [Client 20.203.142.71] [Length 11] [Gzip -] [Sent-to 10.1.1.40] "-" "-" [30/Jul/2026:05:10:39 +0200] - 404 404 - GET https git.dalslab.com "/domvf.php" [Client 20.203.142.71] [Length 11] [Gzip -] [Sent-to 10.1.1.40] "-" "-" ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇪🇸 Francisco Vallejo	2026-07-30 03:05:11 (2 hours ago)	[Thu Jul 30 05:05:10.851485 2026] [core:info] [pid 2690351:tid 140691275491008] [client 20.203.142.7 ... show more [Thu Jul 30 05:05:10.851485 2026] [core:info] [pid 2690351:tid 140691275491008] [client 20.203.142.71:2092] AH00128: File does not exist: /var/www/franvallejo/wp-content/plugins/hellopress/wp_filemanager.php [Thu Jul 30 05:05:10.951591 2026] [core:info] [pid 2690351:tid 140691032233664] [client 20.203.142.71:2092] AH00128: File does not exist: /var/www/franvallejo/this_is_a_new_hello_world.php [Thu Jul 30 05:05:11.048930 2026] [core:info] [pid 2690351:tid 140691023840960] [client 20.203.142.71:2092] AH00128: File does not exist: /var/www/franvallejo/x.php [Thu Jul 30 05:05:11.147784 2026] [core:info] [pid 2690351:tid 140691049019072] [client 20.203.142.71:2092] AH00128: File does not exist: /var/www/franvallejo/mgrr.php [Thu Jul 30 05:05:11.213793 2026] [core:info] [pid 2690351:tid 140691007055552] [client 20.203.142.71:2092] AH00128: File does not exist: /var/www/franvallejo/domvf.php ... show less	Brute-Force SSH
Anonymous	2026-07-30 03:03:18 (2 hours ago)	20.203.142.71 - - [30/Jul/2026:11:03:18 +0800] "GET //cgi-bin/index.php HTTP/1.1" 404 16 "-" "-" ...	Bad Web Bot Web App Attack
🇩🇪 MarkGGN	2026-07-30 03:01:20 (2 hours ago)	Web attack. 20.203.142.71 - - [30/Jul/2026:05:01:19 +0200] "GET /images.php HTTP/1.1" 404 27 "-" "-"	Web App Attack

Showing 1 to 15 of 1372 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.186.99.209

🇻🇳 165.154.105.128

🇩🇪 154.14.139.242

🇺🇸 104.248.218.184

🇱🇹 77.90.185.10

🇺🇸 64.62.197.226

🇸🇬 47.84.115.191

🇩🇪 45.129.242.233

🇧🇪 34.34.167.255

🇨🇳 27.39.128.170

🇺🇿 213.230.99.186

🇲🇦 196.92.7.249

🇩🇪 194.88.98.122

🇦🇷 190.181.97.250

🇧🇷 177.220.182.134

🇦🇺 157.211.246.182

🇮🇷 85.204.76.139

🇺🇸 64.62.156.97

🇬🇧 35.203.210.105

🇺🇸 32.218.35.112