JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.102.103.146

20.102.103.146 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 89%: ?

89%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.102.103.146

Whois 20.102.103.146

IP Abuse Reports for 20.102.103.146:

This IP address has been reported a total of 17 times from 15 distinct sources. 20.102.103.146 was first reported on May 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Scan	2026-06-03 02:31:32 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 MPL	2026-06-02 22:54:46 (1 day ago)	tcp port scan (8 or more attempts)	Port Scan
🇦🇹 urnilxfgbez	2026-06-02 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-06-02 21:52:34 (1 day ago)	Reported from Nginx log analysis 16. Log: 20.102.103.146 - - [02/Jun/2026:xx:xx:xx 0200] "GET /.git ... show more Reported from Nginx log analysis 16. Log: 20.102.103.146 - - [02/Jun/2026:xx:xx:xx 0200] "GET /.git/HEAD HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "-" "US United States Washington" "AS8075" "Microsoft Corporation" show less	Port Scan Brute-Force SSH
🇬🇧 Apache	2026-06-02 21:39:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.102.103.146 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:210492) triggered by 20.102.103.146 (US/United States/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇬🇧 PeravixGroup	2026-06-02 21:05:01 (1 day ago)	Imunify360 WAF block (graylisted)	Web App Attack
🇺🇸 RAP	2026-06-02 20:48:06 (1 day ago)	2026-06-02 20:48:06 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇸🇬 WMK965	2026-06-02 20:47:41 (1 day ago)	20.102.103.146 - - [03/Jun/2026:04:47:35 +0800] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Ma ... show more 20.102.103.146 - - [03/Jun/2026:04:47:35 +0800] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" 20.102.103.146 - - [03/Jun/2026:04:47:37 +0800] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" 20.102.103.146 - - [03/Jun/2026:04:47:41 +0800] "GET /.env.backup HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" show less	Port Scan Web App Attack
🇺🇸 xmission.com	2026-06-02 19:40:30 (1 day ago)	Blocked by UFW (TCP on 80) Source port: 60202 TTL: 49 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 60202 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 20.102.103.146) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 kosada.com	2026-06-02 18:44:21 (1 day ago)	Web vulnerability probing: /wp-config.php (bogus vhost/SNI)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 18:43:48 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.102.103.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 20.102.103.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 14:43:45.386881 2026] [security2:error] [pid 31856:tid 31856] [client 20.102.103.146:60384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.12"] [uri "/.env"] [unique_id "ah8kYQ5kANqiSSPeKFHpIQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 17:42:34 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 20.102.103.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 20.102.103.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 13:42:30.069890 2026] [security2:error] [pid 8011:tid 8011] [client 20.102.103.146:59584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.193"] [uri "/.git/HEAD"] [unique_id "ah8WBimcfmkpAKLEV-RzGAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-02 17:29:15 (1 day ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-06-02 17:25:48 (1 day ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇬🇧 PeravixGroup	2026-06-02 17:21:56 (1 day ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇨🇳 203.76.241.18

🇨🇳 118.145.104.105

🇮🇳 106.76.72.69

🇬🇧 35.203.210.22

🇦🇷 190.185.237.18

🇷🇺 45.147.202.53

🇷🇴 2.57.122.238

🇳🇱 213.176.16.100

🇨🇳 171.113.244.220

🇨🇦 148.170.156.248

🇺🇸 104.129.28.12

🇰🇷 1.214.214.114

🇮🇳 2404:6800:4013:813::12e

🇩🇪 213.209.159.242

🇩🇪 194.88.98.91

🇭🇰 165.154.1.18

🇺🇸 162.216.149.13

🇰🇷 116.123.150.231

🇭🇰 114.111.53.116