JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.203.142.71

20.203.142.71 was found in our database!

This IP was reported 1,802 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.203.142.71

Whois 20.203.142.71

IP Abuse Reports for 20.203.142.71:

This IP address has been reported a total of 1,802 times from 665 distinct sources. 20.203.142.71 was first reported on March 31st 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Charlesiv	2026-08-01 20:01:10 (1 minute ago)	Triggered Cloudflare WAF (botFight) from CH. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from CH. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /3PJcpMFsD8B.php Timestamp: 2026-08-01T18:29:58Z Ray ID: a246e94edbea273b UA: Empty string show less	Bad Web Bot
🇺🇸 ctidrv	2026-08-01 19:23:01 (39 minutes ago)	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /img.php \| rDNS: 20. ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /img.php \| rDNS: 20.203.142.71 \| Attacks detected: webshell \| Reasons: webshell_probe show less	Web App Attack Exploited Host
🇺🇸 Mehmet_The_Script_Kiddie	2026-08-01 19:21:26 (40 minutes ago)	CloudFlare WAF REPORT: /img.php	Bad Web Bot Web App Attack
🇩🇪 usc-IPDB	2026-08-01 19:10:25 (51 minutes ago)	20.203.142.71 - - [01/Aug/2026:21:10:20 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.203.142.71 - - [01/Aug/2026:21:10:20 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 20.203.142.71 - - [01/Aug/2026:21:10:24 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-" 20.203.142.71 - - [01/Aug/2026:21:10:25 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" ... show less	Port Scan
🇫🇮 Christopher Hughes	2026-08-01 19:07:28 (54 minutes ago)	[Sat Aug 01 19:57:21.296759 2026] [proxy_fcgi:error] [pid 2456044:tid 139826502276672] [client 20.20 ... show more [Sat Aug 01 19:57:21.296759 2026] [proxy_fcgi:error] [pid 2456044:tid 139826502276672] [client 20.203.142.71:47910] AH01071: Got error 'Primary script unknown' [Sat Aug 01 19:57:21.333941 2026] [proxy_fcgi:error] [pid 2456044:tid 139826634544704] [client 20.203.142.71:47910] AH01071: Got error 'Primary script unknown' [Sat Aug 01 20:07:27.083644 2026] [proxy_fcgi:error] [pid 2456664:tid 139826634544704] [client 20.203.142.71:35566] AH01071: Got error 'Primary script unknown' [Sat Aug 01 20:07:27.125921 2026] [proxy_fcgi:error] [pid 2456664:tid 139826552632896] [client 20.203.142.71:35566] AH01071: Got error 'Primary script unknown' [Sat Aug 01 20:07:27.180062 2026] [proxy_fcgi:error] [pid 2456664:tid 139825990583872] [client 20.203.142.71:35566] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇮 Christopher Hughes	2026-08-01 18:47:15 (1 hour ago)	[Sat Aug 01 19:47:14.373337 2026] [proxy_fcgi:error] [pid 2456044:tid 139825982191168] [client 20.20 ... show more [Sat Aug 01 19:47:14.373337 2026] [proxy_fcgi:error] [pid 2456044:tid 139825982191168] [client 20.203.142.71:47888] AH01071: Got error 'Primary script unknown' [Sat Aug 01 19:47:14.411514 2026] [proxy_fcgi:error] [pid 2456044:tid 139825587930688] [client 20.203.142.71:47888] AH01071: Got error 'Primary script unknown' [Sat Aug 01 19:47:14.449682 2026] [proxy_fcgi:error] [pid 2456044:tid 139826552632896] [client 20.203.142.71:47888] AH01071: Got error 'Primary script unknown' [Sat Aug 01 19:47:14.488445 2026] [proxy_fcgi:error] [pid 2456044:tid 139825998976576] [client 20.203.142.71:47888] AH01071: Got error 'Primary script unknown' [Sat Aug 01 19:47:14.528824 2026] [proxy_fcgi:error] [pid 2456044:tid 139826527454784] [client 20.203.142.71:47888] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇵🇱 UMP-PL	2026-08-01 18:36:03 (1 hour ago)	Webserver scan (backups, phpadmin, etc.)	Web App Attack
🇩🇪 bryth	2026-08-01 18:32:56 (1 hour ago)	Wordpress login/xmlrpc abuse (Sat Aug 1 06:16:08 PM UTC 2026)	Hacking Web App Attack
Anonymous	2026-08-01 18:32:41 (1 hour ago)	[Sat Aug 01 20:32:40.095236 2026] [authz_core:error] [pid 11661] [client 20.203.142.71:33432] AH0163 ... show more [Sat Aug 01 20:32:40.095236 2026] [authz_core:error] [pid 11661] [client 20.203.142.71:33432] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Aug 01 20:32:40.105182 2026] [authz_core:error] [pid 11661] [client 20.203.142.71:33432] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Aug 01 20:32:40.115042 2026] [authz_core:error] [pid 11661] [client 20.203.142.71:33432] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇵🇱 ketovoila.pl	2026-08-01 18:15:03 (1 hour ago)	ketovoila.pl web app/PHP backdoor scan: hits=7; unique_paths=7; sample_paths=/1.php; UA=""; window=2 ... show more ketovoila.pl web app/PHP backdoor scan: hits=7; unique_paths=7; sample_paths=/1.php; UA=""; window=2026-08-01T18:15:03Z..2026-08-01T18:15:03Z show less	Bad Web Bot Web App Attack
🇩🇪 mravb	2026-08-01 17:44:12 (2 hours ago)	20.203.142.71 - - [01/Aug/2026:20:44:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.203.142.71 - - [01/Aug/2026:20:44:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 187 "-" "-" ... show less	Web App Attack Hacking
🇺🇸 MPL	2026-08-01 17:37:52 (2 hours ago)	tcp/80 (10 or more attempts)	Port Scan
🇩🇪 Bedios GmbH	2026-08-01 17:29:58 (2 hours ago)	Wordpress hacking attempt	Web App Attack
🇧🇷 Peregrine	2026-08-01 17:11:53 (2 hours ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.203.142.71 162.158.217.30 - - [01/Aug/2026:14:11 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.203.142.71 162.158.217.30 - - [01/Aug/2026:14:11:48 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18193 show less	Bad Web Bot
Anonymous	2026-08-01 16:52:33 (3 hours ago)	[Sat Aug 01 18:52:32.415014 2026] [proxy_fcgi:error] [pid 1576:tid 1632] [client 20.203.142.71:61411 ... show more [Sat Aug 01 18:52:32.415014 2026] [proxy_fcgi:error] [pid 1576:tid 1632] [client 20.203.142.71:61411] AH01071: Got error 'Primary script unknown' [Sat Aug 01 18:52:32.436571 2026] [proxy_fcgi:error] [pid 1576:tid 1629] [client 20.203.142.71:61411] AH01071: Got error 'Primary script unknown' [Sat Aug 01 18:52:32.501796 2026] [proxy_fcgi:error] [pid 1576:tid 1645] [client 20.203.142.71:61411] AH01071: Got error 'Primary script unknown' [Sat Aug 01 18:52:32.523654 2026] [proxy_fcgi:error] [pid 1576:tid 1640] [client 20.203.142.71:61411] AH01071: Got error 'Primary script unknown' [Sat Aug 01 18:52:32.568432 2026] [proxy_fcgi:error] [pid 1576:tid 1636] [client 20.203.142.71:61411] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 1802 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:c605:c001

🇳🇱 213.176.26.51

🇺🇸 147.185.132.78

🇷🇺 121.127.37.58

🇮🇹 37.103.81.25

🇺🇸 216.25.89.134

🇺🇸 209.87.169.85

🇮🇳 182.78.112.158

🇺🇸 167.71.31.169

🇺🇸 157.230.89.156

🇮🇩 157.20.37.254

🇺🇸 152.39.189.127

🇮🇹 151.3.178.94

🇪🇸 104.252.251.153

🇩🇪 103.14.32.224

🇬🇧 78.153.140.156

🇷🇺 31.29.195.20

🇺🇸 20.64.104.79

🇪🇸 5.182.83.231

🇳🇱 213.176.26.113