JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.203.168.197

20.203.168.197 was found in our database!

This IP was reported 371 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.203.168.197

Whois 20.203.168.197

IP Abuse Reports for 20.203.168.197:

This IP address has been reported a total of 371 times from 218 distinct sources. 20.203.168.197 was first reported on August 8th 2022, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 securejdprop	2026-05-25 01:55:06 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. Ip 20.203.168.197 performed ... show more This IP was detected by CrowdSec triggering crowdsecurity/http-probing. Ip 20.203.168.197 performed 'crowdsecurity/http-probing' (11 events over 4.369530613s) at 2026-05-25 01:55:04.0861722 +0000 UTC show less	Hacking Web App Attack
🇺🇸 WellSpring	2026-05-25 01:48:59 (1 week ago)	wordpress scan on 972.today/wp-admin/css/colors/ectoplasm/ — WellSpr.ing/NetSentinel civic-AI securi ... show more wordpress scan on 972.today/wp-admin/css/colors/ectoplasm/ — WellSpr.ing/NetSentinel civic-AI security layer show less	Bad Web Bot Web App Attack
🇬🇧 Apache	2026-05-25 01:44:15 (1 week ago)	(mod_security) mod_security (id:20000010) triggered by 20.203.168.197 (CH/Switzerland/-): 5 in the l ... show more (mod_security) mod_security (id:20000010) triggered by 20.203.168.197 (CH/Switzerland/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇮🇩 soc-yk	2026-05-25 01:43:09 (1 week ago)	Type=public_web_scanning \| Risk=100 \| Confidence=100 \| Priority=77.33	Web App Attack
🇬🇧 poundawebsiteltd	2026-05-25 01:42:01 (1 week ago)	Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:443 20.203.168.197 - - [25/May/2026:02:41:5 ... show more Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:443 20.203.168.197 - - [25/May/2026:02:41:59 +0100] GET /chosen.php?p= HTTP/1.1 403 235 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇩🇪 SCHAPPY	2026-05-25 01:41:20 (1 week ago)	Malicious activity from IP detected: crowdsecurity/http-probing.	Web App Attack Hacking
🇪🇸 el-brujo	2026-05-25 01:41:05 (1 week ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: wiki.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: wiki.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallManaged ASN Description: Microsoft Corporation Country: CH Method: GET Timestamp: 2026-05-25T01:41:05Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇵🇱 Niko's Stuff	2026-05-25 01:39:35 (1 week ago)	Triggered crowdsecurity/http-probing. More information at: https://app.crowdsec.net/cti/20.203.168.1 ... show more Triggered crowdsecurity/http-probing. More information at: https://app.crowdsec.net/cti/20.203.168.197 show less	Web App Attack Hacking
🇺🇸 deskpass.com	2026-05-25 01:39:18 (1 week ago)	GET /wp-conf.php	Web App Attack
🇫🇮 Christopher Hughes	2026-05-25 01:35:52 (1 week ago)	[Mon May 25 02:35:51.540594 2026] [proxy_fcgi:error] [pid 4177849:tid 139773578561088] [client 20.20 ... show more [Mon May 25 02:35:51.540594 2026] [proxy_fcgi:error] [pid 4177849:tid 139773578561088] [client 20.203.168.197:30473] AH01071: Got error 'Primary script unknown' [Mon May 25 02:35:51.578485 2026] [proxy_fcgi:error] [pid 4177849:tid 139773570168384] [client 20.203.168.197:30473] AH01071: Got error 'Primary script unknown' [Mon May 25 02:35:51.615610 2026] [proxy_fcgi:error] [pid 4177849:tid 139774677481024] [client 20.203.168.197:30473] AH01071: Got error 'Primary script unknown' [Mon May 25 02:35:51.653195 2026] [proxy_fcgi:error] [pid 4177849:tid 139774627124800] [client 20.203.168.197:30473] AH01071: Got error 'Primary script unknown' [Mon May 25 02:35:51.700220 2026] [proxy_fcgi:error] [pid 4177849:tid 139774803306048] [client 20.203.168.197:30473] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 Skyrider	2026-05-25 01:30:57 (1 week ago)	crowdsecurity/http-probing	Hacking
🇺🇸 interbiznw.com	2026-05-25 01:28:45 (1 week ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇫🇷 sthoyer.de	2026-05-25 01:25:04 (1 week ago)	20.203.168.197 - - [25/May/2026:03:25:03 +0200] "GET /404.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Wi ... show more 20.203.168.197 - - [25/May/2026:03:25:03 +0200] "GET /404.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:03:25:03 +0200] "GET /abc.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:03:25:03 +0200] "GET /abcd.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 devsecops.cv	2026-05-25 01:21:42 (1 week ago)	Fail2Ban: apache-ratelimit - 20 failures	Port Scan Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2026-05-25 01:20:44 (1 week ago)	[Mon May 25 04:20:39.844830 2026] [proxy_fcgi:error] [pid 3828151:tid 3828194] [client 20.203.168.19 ... show more [Mon May 25 04:20:39.844830 2026] [proxy_fcgi:error] [pid 3828151:tid 3828194] [client 20.203.168.197:0] AH01071: Got error 'Primary script unknown' [Mon May 25 04:20:39.875912 2026] [proxy_fcgi:error] [pid 3828150:tid 3828167] [client 20.203.168.197:0] AH01071: Got error 'Primary script unknown' [Mon May 25 04:20:39.935547 2026] [proxy_fcgi:error] [pid 3828150:tid 3828164] [client 20.203.168.197:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot

Showing 226 to 240 of 371 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.26.87.217

🇱🇹 194.165.16.161

🇺🇸 185.191.171.17

🇿🇦 105.186.248.9

🇺🇸 103.143.231.24

🇺🇸 66.132.195.23

🇺🇸 66.132.186.244

🇺🇸 35.231.237.26

🇷🇴 2.57.121.112

🇩🇪 217.249.151.94

🇺🇸 216.25.89.149

🇺🇸 113.20.4.9

🇨🇳 112.86.225.20

🇮🇳 103.86.180.10

🇮🇩 103.49.239.60

🇱🇷 102.215.52.10

🇺🇸 72.10.32.138

🇳🇱 45.148.10.34

🇨🇳 42.100.25.115

🇨🇦 35.234.251.164