JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.120.3.103

20.120.3.103 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.120.3.103

Whois 20.120.3.103

IP Abuse Reports for 20.120.3.103:

This IP address has been reported a total of 38 times from 17 distinct sources. 20.120.3.103 was first reported on February 4th 2022, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-07-13 19:04:23 (3 years ago)	Credential Stuffing attacks against Microsoft 365	Brute-Force
Anonymous	2022-06-23 10:59:21 (3 years ago)	Credential Stuffing attacks against Microsoft 365	Brute-Force
🇲🇾 syokadmin	2022-04-22 01:23:15 (4 years ago)	(mod_security) mod_security (id:210492) triggered by 20.120.3.103 (US/United States/-): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 20.120.3.103 (US/United States/-): 1 in the last 3600 secs show less	Brute-Force
🇲🇾 syokadmin	2022-04-20 12:43:11 (4 years ago)	(mod_security) mod_security (id:210492) triggered by 20.120.3.103 (US/United States/-): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 20.120.3.103 (US/United States/-): 1 in the last 3600 secs show less	Brute-Force
🇪🇸 10dencehispahard SL	2022-04-16 01:47:41 (4 years ago)	Suspicious activity detected by Modsecurity [Application attack LFI]	Hacking Web App Attack
🇮🇩 NOC Monitoring KAI	2022-03-20 16:43:46 (4 years ago)	- /vendor/.env - /cronlab/.env - /database/.env	Port Scan Web App Attack
🇺🇸 NXTwoThou	2022-03-20 01:19:01 (4 years ago)	/.env	Web App Attack
🇲🇾 syokadmin	2022-03-19 09:05:52 (4 years ago)	(mod_security) mod_security (id:210492) triggered by 20.120.3.103 (US/United States/-): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 20.120.3.103 (US/United States/-): 1 in the last 3600 secs show less	Brute-Force
Anonymous	2022-03-02 05:01:16 (4 years ago)	20.120.3.103 - - [02/Mar/2022:11:01:11 +0100] "GET /.env HTTP/1.1" 403 140 "https://www.google.com/" ... show more 20.120.3.103 - - [02/Mar/2022:11:01:11 +0100] "GET /.env HTTP/1.1" 403 140 "https://www.google.com/" "Mozilla/5.0 (Windows; U; MSIE 6.1; Linux i386; .NET CLR 2.0.25206; X11)" 20.120.3.103 - - [02/Mar/2022:11:01:12 +0100] "GET /.remote HTTP/1.1" 403 140 "https://www.google.com/" "Mozilla/5.0 (Windows; U; MSIE 6.1; Linux i386; .NET CLR 2.0.25206; X11)" 20.120.3.103 - - [02/Mar/2022:11:01:12 +0100] "GET /.local HTTP/1.1" 403 140 "https://www.google.com/" "Mozilla/5.0 (Windows; U; MSIE 6.1; Linux i386; .NET CLR 2.0.25206; X11)" 20.120.3.103 - - [02/Mar/2022:11:01:12 +0100] "GET /.production HTTP/1.1" 403 140 "https://www.google.com/" "Mozilla/5.0 (Windows; U; MSIE 6.1; Linux i386; .NET CLR 2.0.25206; X11)" 20.120.3.103 - - [02/Mar/2022:11:01:12 +0100] "GET //vendor/.env HTTP/1.1" 403 140 "https://www.google.com/" "Mozilla/5.0 (Windows; U; MSIE 6.1; Linux i386; .NET CLR 2.0.25206; X11)" 20.120.3.103 - - [02/Mar/2022:11:01:13 +0100] "GET //lib/.env HTTP/1.1" 403 140 "https://www.google.com/" ... show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2022-03-02 02:29:52 (4 years ago)	(PERMBLOCK) 20.120.3.103 (US/United States/-) has had more than 2 temp blocks in the last 86400 secs	Brute-Force
🇲🇾 syokadmin	2022-03-01 15:25:22 (4 years ago)	(mod_security) mod_security (id:210492) triggered by 20.120.3.103 (US/United States/-): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 20.120.3.103 (US/United States/-): 1 in the last 3600 secs show less	Brute-Force
🇫🇷 sigma	2022-02-28 08:21:59 (4 years ago)	[28/Feb/2022:13:21:58 +0000] YhzMdtyYtFE5bHeKFasGUAAAAAo 20.120.3.103 38202 85.25.196.171 7081 [28/F ... show more [28/Feb/2022:13:21:58 +0000] YhzMdtyYtFE5bHeKFasGUAAAAAo 20.120.3.103 38202 85.25.196.171 7081 [28/Feb/2022:13:21:59 +0000] YhzMd0Rx09W5Jn9cn0b0pQAAAJg 20.120.3.103 38210 85.25.196.171 7081 [28/Feb/2022:13:21:59 +0000] YhzMd0Rx09W5Jn9cn0b0pgAAAII 20.120.3.103 38212 85.25.196.171 7081 ... show less	Exploited Host Web App Attack
🇬🇧 childporn.network	2022-02-28 02:44:07 (4 years ago)	0.120.3.103 - - [26/Feb/2022:18:41:12 +0000] "POST //admin/vendor/phpunit/phpunit/src/Util/PHP/eval- ... show more 0.120.3.103 - - [26/Feb/2022:18:41:12 +0000] "POST //admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 303 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 6.1; Macintosh; .NET CLR 3.4.25754; Intel Mac OS X 10_2_5)" show less	Bad Web Bot Web App Attack
🇲🇾 syokadmin	2022-02-27 10:05:59 (4 years ago)	(mod_security) mod_security (id:210492) triggered by 20.120.3.103 (US/United States/-): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 20.120.3.103 (US/United States/-): 1 in the last 3600 secs show less	Brute-Force
🇳🇱 Savvii	2022-02-27 06:32:32 (4 years ago)	20 attempts against mh-misbehave-ban on stem	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 91.92.40.151

🇦🇹 81.16.152.2

🇺🇸 45.61.150.8

🇺🇸 2a04:c300:400::1b4

🇳🇱 94.102.49.144

🇩🇪 93.230.86.59

🇨🇦 85.217.149.7

🇷🇴 80.94.95.211

🇺🇸 64.62.156.46

🇳🇱 51.15.59.186

🇨🇳 36.249.162.81

🇧🇪 34.52.145.140

🇺🇸 20.221.60.108

🇺🇸 18.221.179.104

🇺🇸 13.89.125.225

🇺🇸 2607:ff10:c8:594::7

🇺🇸 2604:a880:400:d1:0:4:9e8d:a001

🇩🇪 185.242.3.195

🇬🇪 185.83.37.5

🇩🇪 167.94.145.31