JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.203.205.96

20.203.205.96 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.203.205.96

Whois 20.203.205.96

IP Abuse Reports for 20.203.205.96:

This IP address has been reported a total of 147 times from 132 distinct sources. 20.203.205.96 was first reported on July 29th 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 djboddington	2026-07-29 15:25:06 (7 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 mc4bbs	2026-07-29 15:21:16 (10 minutes ago)	Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ... show more Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-content/plugins/hellopress/wp_filemanager.php -> 404 UA=""; GET /wp-ws68.php?p= -> 404 UA=""; GET /wp-includes/sodium_compat/ -> 404 UA=""; GET /wp-admin/css/colors/coffee/wp-adochan.php -> 404 UA=""; GET /wp-includes/Text/ -> 404 UA="" show less	Web App Attack Hacking
🇩🇪 KiekerJan	2026-07-29 15:19:24 (12 minutes ago)	20.203.205.96 - - [29/Jul/2026:17:19:21 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.203.205.96 - - [29/Jul/2026:17:19:21 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.203.205.96 - - [29/Jul/2026:17:19:23 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ... show less	Web App Attack
🇺🇸 chronos	2026-07-29 15:16:49 (15 minutes ago)	[AUTORAVALT][[29/07/2026 - 12:16:49 -03:00 UTC] Attack from [Microsoft Corporation] [20.203.205.96] ... show more [AUTORAVALT][[29/07/2026 - 12:16:49 -03:00 UTC] Attack from [Microsoft Corporation] [20.203.205.96] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software ] ... show less	Hacking Web App Attack
🇫🇷 Campus France	2026-07-29 14:57:31 (34 minutes ago)	[Wed Jul 29 16:57:29.864531 2026] [php:error] [pid 954773] [client 20.203.205.96:23810] script '/var ... show more [Wed Jul 29 16:57:29.864531 2026] [php:error] [pid 954773] [client 20.203.205.96:23810] script '/var/www/html/brume.org/radios/this_is_a_new_hello_world.php' not found or unable to stat [Wed Jul 29 16:57:29.933558 2026] [php:error] [pid 954773] [client 20.203.205.96:23810] script '/var/www/html/brume.org/radios/aa.php' not found or unable to stat [Wed Jul 29 16:57:30.524672 2026] [php:error] [pid 954773] [client 20.203.205.96:23810] script '/var/www/html/brume.org/radios/3PJcpMFsD8B.php' not found or unable to stat [Wed Jul 29 16:57:30.641720 2026] [php:error] [pid 954773] [client 20.203.205.96:23810] script '/var/www/html/brume.org/radios/media.php' not found or unable to stat [Wed Jul 29 16:57:30.742051 2026] [php:error] [pid 954773] [client 20.203.205.96:23810] script '/var/www/html/brume.org/radios/images.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇵🇱 webadmin	2026-07-29 14:55:51 (36 minutes ago)	20.203.205.96 - - [29/Jul/2026:16:55:49 +0200] "GET /wp-includes/sodium_compat/ HTTP/1.1" 400 25 "-" ... show more 20.203.205.96 - - [29/Jul/2026:16:55:49 +0200] "GET /wp-includes/sodium_compat/ HTTP/1.1" 400 25 "-" "-" (es.inweo.eu / es.inweo.eu) 20.203.205.96 - - [29/Jul/2026:16:55:49 +0200] "GET /wp-includes/Text/ HTTP/1.1" 400 25 "-" "-" (es.inweo.eu / es.inweo.eu) 20.203.205.96 - - [29/Jul/2026:16:55:49 +0200] "GET /wp-content/uploads/ HTTP/1.1" 400 25 "-" "-" (es.inweo.eu / es.inweo.eu) 20.203.205.96 - - [29/Jul/2026:16:55:51 +0200] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 400 25 "-" "-" (es.inweo.eu / es.inweo.eu) 20.203.205.96 - - [29/Jul/2026:16:55:51 +0200] "GET /wp-admin/js/ HTTP/1.1" 400 25 "-" "-" (es.inweo.eu / es.inweo.eu) show less	Web App Attack
🇩🇪 dbmwebdesign	2026-07-29 14:50:08 (42 minutes ago)	Repeated probing for non-existent PHP exploit paths blocked by Fail2Ban	Web App Attack
🇩🇪 HandyTreff.de	2026-07-29 14:37:19 (54 minutes ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -54.813 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -54.813 (Bad < -10 / Very Bad < -20 / Extreme < -35) show less	Web App Attack Bad Web Bot
🇮🇹 mediarama.com	2026-07-29 14:35:13 (56 minutes ago)	Banned by Fail2Ban	Web App Attack
🇦🇹 penguin-solutions.at	2026-07-29 14:21:18 (1 hour ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇸🇪 nekopavel	2026-07-29 14:08:07 (1 hour ago)	20.203.205.96 - - [29/Jul/2026:16:07:59 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.203.205.96 - - [29/Jul/2026:16:07:59 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162"-" insights.neko.chat "-""0.000" "-""Zurich" "CH" 20.203.205.96 - - [29/Jul/2026:16:08:01 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 19"-" insights.neko.chat "-""0.006" "0.005""Zurich" "CH" 20.203.205.96 - - [29/Jul/2026:16:08:05 +0200]"GET /wp-ws68.php?p= HTTP/1.1" 301 162"-" insights.neko.chat "-""0.000" "-""Zurich" "CH" ... show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-07-29 14:02:22 (1 hour ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇬🇧 Swiptly	2026-07-29 14:01:24 (1 hour ago)	Excessive 403/404/405 PHP/CMS errors from scanning or broken bots ...	Web App Attack
🇩🇪 Skyrider	2026-07-29 13:56:55 (1 hour ago)	crowdsecurity/http-crawl-non_statics	Bad Web Bot
🇳🇱 wlt-blocker	2026-07-29 13:52:15 (1 hour ago)	Unauthorized access to webpage admin	Web App Attack

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.71

🇵🇱 185.254.221.52

🇺🇸 172.202.9.120

🇮🇳 82.180.146.1

🇺🇸 50.116.55.133

🇧🇷 45.157.156.222

🇳🇱 45.148.10.157

🇸🇬 43.134.93.164

🇺🇸 23.254.178.60

🇺🇸 20.163.27.102

🇪🇸 196.196.150.99

🇸🇬 192.250.235.149

🇩🇪 167.94.145.30

🇹🇭 150.95.27.209

🇦🇷 131.100.88.69

🇨🇳 123.54.215.74

🇸🇬 118.139.164.171

🇰🇬 109.71.229.234

🇧🇩 101.2.164.22

🇷🇴 2.57.122.238