JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.203.150.235

Neutral Activity

Abuse confidence score ?

0% Low Risk

115 reports

84 reporters · latest 2 months ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.203.150.235 has been reported 115 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.203.150.235

Export CSV

This IP address has been reported a total of 115 times from 84 distinct sources. 20.203.150.235 was first reported on April 27th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 gosocial3	2026-07-09 12:00:09 (2 months ago)	WAF blacklist \| reason: uri:exploit:admin.php	Web App Attack
🇮🇳 evicky2002	2026-07-06 15:38:20 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 ghostwarriors	2026-05-12 10:50:52 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-06 14:22:33 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-01 00:22:57 (5 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Shaik Sai Meera	2026-04-29 23:59:23 (5 months ago)	IM360 WAF: Infectors: Suspicious access attempt (webshell)	Brute-Force FTP Brute-Force Open Proxy
🇬🇧 openstrike.co.uk	2026-04-29 05:13:21 (5 months ago)	40 attacks on PHP URLs: GET /wp-content/plugins/index.php HTTP/1.1	Web App Attack
🇫🇷 SpaceHost-Server	2026-04-28 22:37:55 (5 months ago)		Brute-Force Web App Attack
🇫🇷 Murazaki	2026-04-28 22:08:26 (5 months ago)	collabora.mehdibenadel.com 20.203.150.235 - - [28/Apr/2026:00:10:08 +0200] "GET /wp-login.php HTTP/1 ... show more collabora.mehdibenadel.com 20.203.150.235 - - [28/Apr/2026:00:10:08 +0200] "GET /wp-login.php HTTP/1.1" 400 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.12:9980" collabora.mehdibenadel.com 20.203.150.235 - - [28/Apr/2026:00:10:08 +0200] "GET /cgi-bin/ HTTP/1.1" 400 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.12:9980" smtp.mehdibenadel.com 20.203.150.235 - - [28/Apr/2026:00:56:06 +0200] "GET /wp-login.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.72:80" smtp.mehdibenadel.com 20.203.150.235 - - [28/Apr/2026:00:56:06 +0200] "GET /cgi-bin/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.72:80" benadel.fr 20.203.150.235 - - ... show less	Bad Web Bot
🇯🇵 Short-legs-Spider	2026-04-28 19:15:39 (5 months ago)	Test on existence -- [29/Apr/2026:04:15:39 +0900] "GET /1.php HTTP/1.1" 403 76 "-" "Mozilla/5.0 (W ... show more Test on existence -- [29/Apr/2026:04:15:39 +0900] "GET /1.php HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [29/Apr/2026:04:15:39 +0900] "GET /autoload_classmap.php HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [29/Apr/2026:04:15:39 +0900] "GET /flower.php HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [29/Apr/2026:04:15:39 +0900] "GET /post.php HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [29/Apr/2026:04:15:40 +0900] "GET /admin.php HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [29/Apr/2026:04:15:40 +0900] "GET /file.php HTTP/1.1" 403 76 ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-04-28 18:58:02 (5 months ago)	talentaymerch.com.au:443 20.203.150.235 - - [29/Apr/2026:04:56:37 +1000] "GET /autoload_classmap.php ... show more talentaymerch.com.au:443 20.203.150.235 - - [29/Apr/2026:04:56:37 +1000] "GET /autoload_classmap.php HTTP/1.1" 404 107007 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" talentaymerch.com.au:443 20.203.150.235 - - [29/Apr/2026:04:56:40 +1000] "GET /post.php HTTP/1.1" 404 103988 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" talentaymerch.com.au:443 20.203.150.235 - - [29/Apr/2026:04:56:43 +1000] "GET /1.php HTTP/1.1" 404 103994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" talentaymerch.com.au:443 20.203.150.235 - - [29/Apr/2026:04:56:46 +1000] "GET /flower.php HTTP/1.1" 404 103999 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" talentaymerch.com.au:443 20.203.150.235 - - [29/Apr/2026:04:56:49 +1000] "GET /a ... show less	Web App Attack
🇺🇸 deskpass.com	2026-04-28 18:53:31 (5 months ago)	GET /input.php	Web App Attack
🇭🇺 DumaNet	2026-04-28 18:28:00 (5 months ago)	WordPress plugin attack attempts. Date: 2026 Apr 28. 02:53:48 Source IP: 20.203.150.235 Portion ... show more WordPress plugin attack attempts. Date: 2026 Apr 28. 02:53:48 Source IP: 20.203.150.235 Portion of the log(s): 20.203.150.235 - [28/Apr/2026:02:53:48 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.150.235 - [28/Apr/2026:02:53:48 +0200] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.150.235 - [28/Apr/2026:02:53:47 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.150.235 - [28/Apr/2026:02:53:47 +0200] "GET /wp-includes/html-api/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.150.235 - [28/Apr/2026:02:53:47 +0200] "GET /wp show less	Web App Attack Hacking
🇱🇻 garmtech.com	2026-04-28 18:21:57 (5 months ago)	Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇩🇪 macrob	2026-04-28 17:35:04 (5 months ago)	2026/04/28 17:35:01 [error] 3150517#3150517: 185412820 access forbidden by rule, client: 20.203.150 ... show more 2026/04/28 17:35:01 [error] 3150517#3150517: 185412820 access forbidden by rule, client: 20.203.150.235, server: finami.ph, request: "GET /admin.php HTTP/2.0", host: "finami.ph" 2026/04/28 17:35:02 [error] 3150518#3150518: 185413317 access forbidden by rule, client: 20.203.150.235, server: finami.ph, request: "GET /xmlrpc.php HTTP/2.0", host: "finami.ph" 2026/04/28 17:35:02 [error] 3150517#3150517: 185412820 access forbidden by rule, client: 20.203.150.235, server: finami.ph, request: "GET /wp-admin.php HTTP/2.0", host: "finami.ph" ... show less	Web App Attack

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.45.196.62

🇺🇸 162.216.150.36

🇻🇳 117.5.152.48

🇸🇬 101.47.156.170

🇺🇸 66.132.186.218

🇨🇦 64.110.200.174

🇭🇰 46.247.61.108

🇧🇪 198.235.24.252

🇺🇸 172.236.228.202

🇺🇸 144.31.35.60

🇨🇳 119.1.191.197

🇳🇱 109.160.32.145

🇳🇬 105.118.15.54

🇮🇳 103.216.170.144

🇮🇳 103.170.215.118

🇺🇸 100.28.153.226

🇺🇸 99.63.40.58

🇵🇱 95.214.53.157

🇨🇳 58.221.60.25

🇨🇴 45.167.125.169