JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.203.243.122

20.203.243.122 was found in our database!

This IP was reported 142 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.203.243.122

Whois 20.203.243.122

IP Abuse Reports for 20.203.243.122:

This IP address has been reported a total of 142 times from 123 distinct sources. 20.203.243.122 was first reported on July 31st 2026, and the most recent report was 59 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-07-31 13:56:38 (59 seconds ago)	Probing for exploits 20.203.243.122 - - [31/Jul/2026:15:54:24 +0200] "GET /wp-content/plugins/hellop ... show more Probing for exploits 20.203.243.122 - - [31/Jul/2026:15:54:24 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" 20.203.243.122 - - [31/Jul/2026:15:56:34 +0200] "GET //a.php HTTP/1.1" 422 0 "-" "-" show less	Hacking Web App Attack
🇵🇱 strefapi_com	2026-07-31 13:51:58 (5 minutes ago)	Brute-force on web app ...	Brute-Force Web App Attack
🇩🇪 maxpower	2026-07-31 13:43:51 (13 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.203.243.122 (CH/Switzerland/-): 1 in the l ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.203.243.122 (CH/Switzerland/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.203.243.122 - - [31/Jul/2026:15:43:44 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 315 "-" "-" "-" host=archabi.it show less	Port Scan
🇵🇱 UMP-PL	2026-07-31 13:42:40 (14 minutes ago)	Webserver scan (backups, phpadmin, etc.)	Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-31 13:41:04 (16 minutes ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 jasperedv.de	2026-07-31 13:30:15 (27 minutes ago)	Apache Login - Brutforcing	Web App Attack Brute-Force
🇩🇪 Ba-Yu	2026-07-31 13:29:25 (28 minutes ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇸🇪 SkyDancer	2026-07-31 13:27:30 (30 minutes ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇺🇸 lavnet.net	2026-07-31 13:21:33 (36 minutes ago)	20.203.243.122 - - [31/Jul/2026:13:21:32 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.203.243.122 - - [31/Jul/2026:13:21:32 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2066 "-" "-" 20.203.243.122 - - [31/Jul/2026:13:21:32 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2028 "-" "-" 20.203.243.122 - - [31/Jul/2026:13:21:33 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 2028 "-" "-" 20.203.243.122 - - [31/Jul/2026:13:21:33 +0000] "GET /err.php HTTP/1.1" 404 2028 "-" "-" 20.203.243.122 - - [31/Jul/2026:13:21:33 +0000] "GET /img.php HTTP/1.1" 404 2028 "-" "-" 20.203.243.122 - - [31/Jul/2026:13:21:33 +0000] "GET //aa.php HTTP/1.1" 404 2028 "-" "-" ... show less	Brute-Force
🇩🇪 lolyay	2026-07-31 13:18:45 (38 minutes ago)	20.203.243.122 - - [31/Jul/2026:13:18:44 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 20.203.243.122 - - [31/Jul/2026:13:18:44 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 4 "-" "-" 20.203.243.122 - - [31/Jul/2026:13:18:44 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 4 "-" "-" ... show less	Web App Attack Bad Web Bot
🇵🇱 lns.bz	2026-07-31 13:12:14 (45 minutes ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
Anonymous	2026-07-31 13:07:03 (50 minutes ago)	Automated web scanner. Requested suspicious paths: /img.php \| /3PJcpMFsD8B.php \| //aa.php \| /err.php ... show more Automated web scanner. Requested suspicious paths: /img.php \| /3PJcpMFsD8B.php \| //aa.php \| /err.php \| /this_is_a_new_hello_world.php \| /wp-content/plugins/hellopress/wp_filemanager.php \| //av.php \| /xa.php \| /media.php \| /images.php \| /gecko.php \| /xstelth.php \| /82.php \| /xp.php \| ///admin.php. UTC: 2026-07-31 12:54:58. show less	Web App Attack
🇮🇹 CoreTech srl	2026-07-31 12:54:01 (1 hour ago)	CloudLinux/Plesk alert - host=cloudlinux5 dominio=francescacarbotti.it ip=20.203.243.122 richieste=9 ... show more CloudLinux/Plesk alert - host=cloudlinux5 dominio=francescacarbotti.it ip=20.203.243.122 richieste=90 rischio=ALTO score=10 motivi=richieste_elevate,diverse_uri_uniche,molti_404,path_sospetti,poco_statico,dinamico cat_id=21,19 periodo=10min show less	Web App Attack Bad Web Bot
🇩🇪 maxpower	2026-07-31 12:47:49 (1 hour ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.203.243.122 (CH/Switzerland/-): 1 in the l ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 20.203.243.122 (CH/Switzerland/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.203.243.122 - - [31/Jul/2026:14:47:45 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 156806 "-" "-" "-" host=mail.ramsesconsulting.it show less	Port Scan
Anonymous	2026-07-31 12:45:57 (1 hour ago)	(caddyscan) Scanner path probe from 20.203.243.122 (CH/Switzerland/-): 5 in the last 3600 secs; Port ... show more (caddyscan) Scanner path probe from 20.203.243.122 (CH/Switzerland/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.203.243.122 - - [31/Jul/2026:12:45:27 +0000] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" [REDACTED] 200 2627 20.203.243.122 - - [31/Jul/2026:12:45:46 +0000] "GET /wp-admin/js/ HTTP/1.1" [REDACTED] 200 2627 20.203.243.122 - - [31/Jul/2026:12:45:51 +0000] "GET /wp-admin/css/ HTTP/1.1" [REDACTED] 200 2627 20.203.243.122 - - [31/Jul/2026:12:45:52 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" [REDACTED] 200 2627 20.203.243.122 - - [31/Jul/2026:12:45:56 +0000] "GET //wp-admin/js/index.php HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 142 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.244.143.162

🇳🇱 172.94.9.64

🇮🇳 117.203.216.43

🇶🇦 89.211.83.249

🇰🇷 58.229.253.119

🇳🇱 45.148.10.157

🇺🇸 18.97.19.245

🇳🇱 195.178.110.137

🇵🇦 191.98.196.19

🇺🇸 174.138.44.8

🇸🇬 152.42.176.197

🇳🇱 142.93.129.190

🇬🇧 5.226.140.42

🇺🇸 216.25.89.143

🇺🇸 172.98.33.130

🇩🇪 94.16.17.139

🇮🇶 62.201.228.210

🇷🇺 176.208.50.142

🇫🇷 91.196.152.194

🇫🇷 85.217.140.44