JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.203.221.142

20.203.221.142 was found in our database!

This IP was reported 315 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.203.221.142

Whois 20.203.221.142

IP Abuse Reports for 20.203.221.142:

This IP address has been reported a total of 315 times from 249 distinct sources. 20.203.221.142 was first reported on July 27th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-07-29 01:00:41 (3 minutes ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇦🇹 penguin-solutions.at	2026-07-29 00:58:26 (5 minutes ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇺🇸 oijon.net	2026-07-29 00:44:44 (19 minutes ago)	[Tue Jul 28 20:44:42.942036 2026] [php:error] [pid 548493:tid 548493] [client 20.203.221.142:4282] s ... show more [Tue Jul 28 20:44:42.942036 2026] [php:error] [pid 548493:tid 548493] [client 20.203.221.142:4282] script '/var/www/accessed-by-ip/this_is_a_new_hello_world.php' not found or unable to stat [Tue Jul 28 20:44:43.053066 2026] [php:error] [pid 548493:tid 548493] [client 20.203.221.142:4282] script '/var/www/accessed-by-ip/nothing2.php' not found or unable to stat [Tue Jul 28 20:44:43.567329 2026] [php:error] [pid 548493:tid 548493] [client 20.203.221.142:4282] script '/var/www/accessed-by-ip/wkl.php' not found or unable to stat [Tue Jul 28 20:44:43.676964 2026] [php:error] [pid 548493:tid 548493] [client 20.203.221.142:4282] script '/var/www/accessed-by-ip/ls.php' not found or unable to stat [Tue Jul 28 20:44:43.786581 2026] [php:error] [pid 548493:tid 548493] [client 20.203.221.142:4282] script '/var/www/accessed-by-ip/error.php' not found or unable to stat ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Phenix Info	2026-07-29 00:35:30 (28 minutes ago)	SmallGuard.fr - Empty User Agent	Web App Attack
🇬🇧 Apache	2026-07-29 00:16:10 (48 minutes ago)	(mod_security) mod_security (id:20000010) triggered by 20.203.221.142 (CH/Switzerland/-): 5 in the l ... show more (mod_security) mod_security (id:20000010) triggered by 20.203.221.142 (CH/Switzerland/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-07-28 23:54:48 (1 hour ago)	bermanfamily.com.au:443 20.203.221.142 - - [29/Jul/2026:09:54:48 +1000] "GET /edit.php HTTP/1.1" 404 ... show more bermanfamily.com.au:443 20.203.221.142 - - [29/Jul/2026:09:54:48 +1000] "GET /edit.php HTTP/1.1" 404 506 "-" "-" ... show less	Web App Attack
Anonymous	2026-07-28 22:58:22 (2 hours ago)	Portscan: TCP/80 (5x), TCP/443	Port Scan
🇮🇪 kundukundu	2026-07-28 22:55:53 (2 hours ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/plugins/hellopress/wp_filemanager ... show more [Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇩🇪 jasperedv.de	2026-07-28 22:49:56 (2 hours ago)	Apache Login - Brutforcing	Web App Attack Brute-Force
🇩🇪 Vegascosmetics	2026-07-28 22:41:41 (2 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wp-content/ (Match: /wp-content/) show less	Hacking Exploited Host Web App Attack
🇮🇹 CoreTech srl	2026-07-28 22:32:24 (2 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇧🇪 voormedia	2026-07-28 22:27:34 (2 hours ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇩🇰 SaltySoftworks	2026-07-28 22:25:06 (2 hours ago)	User agent spoofing Page: /wp-content/plugins/hellopress/wp_filemanager.php	Spoofing Brute-Force Web App Attack Hacking
🇳🇱 vaddilyin	2026-07-28 22:10:15 (2 hours ago)	{"ClientAddr":"20.203.221.142:23312","ClientHost":"20.203.221.142","ClientPort":"23312","ClientUsern ... show more {"ClientAddr":"20.203.221.142:23312","ClientHost":"20.203.221.142","ClientPort":"23312","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":43519,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":43519,"RequestAddr":"minio.vdkln.com","RequestContentSize":0,"RequestCount":62862,"RequestHost":"minio.vdkln.com","RequestMethod":"GET","RequestPath":"/wp-content/plugins/hellopress/wp_filemanager.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-07-28T22:10:14.890657812Z","StartUTC":"2026-07-28T22:10:14.890657812Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-07-28T22:10:14Z"} {"ClientAddr":"20.203.221.142:23312","ClientHost":"20.203.221.142","ClientPort":"23312","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":61918,"GzipRatio":0,"OriginContentSize":0,"OriginD ... show less	Web App Attack
🇹🇭 thaizone.com	2026-07-28 22:08:51 (2 hours ago)	Hacking attempts against websites (D1) #3	Web App Attack Hacking

Showing 1 to 15 of 315 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇻 185.113.139.51

🇨🇳 183.151.73.54

🇺🇸 172.105.147.49

🇧🇷 143.255.164.36

🇨🇳 124.239.12.72

🇫🇷 91.196.152.20

🇺🇸 4.246.117.137

🇺🇸 3.83.245.221

🇺🇿 213.230.123.66

🇳🇱 195.178.110.228

🇧🇷 191.235.102.133

🇮🇹 172.235.235.248

🇺🇸 162.216.149.46

🇩🇪 134.209.235.15

🇨🇳 123.182.50.244

🇨🇳 120.48.54.170

🇨🇳 116.132.254.96

🇳🇱 94.156.177.153

🇺🇸 64.62.197.62

🇺🇸 64.62.156.226