AbuseIPDB » 20.168.103.243
20.168.103.243
This IP was reported 8 times. Confidence of
Abuse
is 49% : ?
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸
United States of America
City
Phoenix, Arizona
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 20.168.103.243 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
20.168.103.243 was first reported on
July 15th 2026 , and the most recent report was
1 hour ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
Admins@FBN
2026-07-25 09:48:48
(1 hour ago)
FW-PortScan: Traffic Blocked srcport=3794 dstport=2095
Port Scan
2026-07-25 09:26:19
(1 hour ago)
20.168.103.243 - - [25/Jul/2026:04:26:12 -0500] "GET /.git/HEAD HTTP/1.1" 404 1288 "-" "Mozilla/5.0 ...
show more
20.168.103.243 - - [25/Jul/2026:04:26:12 -0500] "GET /.git/HEAD HTTP/1.1" 404 1288 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
20.168.103.243 - - [25/Jul/2026:04:26:13 -0500] "GET /.git/config HTTP/1.1" 404 1288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
20.168.103.243 - - [25/Jul/2026:04:26:19 -0500] "GET /.git/refs/heads/main HTTP/1.1" 404 1288 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇵🇱
TaKeN
2026-07-25 08:22:38
(2 hours ago)
Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ...
show more
Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching blocked event(s) between 2026-07-25T10:22:38+02:00 and 2026-07-25T10:22:38+02:00. Sample requested paths: /.npmrc.
show less
Web App Attack
Hacking
🇬🇧
Smish
2026-07-25 08:10:21
(2 hours ago)
HONEYPOT HIT --> Fail2ban time=1784967020 log=2026-07-25T09:10:20+01:00 ip=20.168.103.243 host=89.39 ...
show more
HONEYPOT HIT --> Fail2ban time=1784967020 log=2026-07-25T09:10:20+01:00 ip=20.168.103.243 host=89.39.211.6 method=GET uri="/.env.local" status=404 ua="Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" ref="-" rid=54de6793dbbd894ef9e753dd557eb55c
show less
Web App Attack
🇹🇼
kk_it_man
2026-07-25 08:00:12
(3 hours ago)
Port Scan
2026-07-25 07:12:34
(3 hours ago)
denied traffic to a non-approved destination port. destination port 2078.
Port Scan
🇩🇪
lolyay
2026-07-25 06:29:19
(4 hours ago)
20.168.103.243 - - [25/Jul/2026:06:29:16 +0000] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 ...
show more
20.168.103.243 - - [25/Jul/2026:06:29:16 +0000] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"
20.168.103.243 - - [25/Jul/2026:06:29:17 +0000] "GET /.git/refs/heads/master HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
🇹🇷
Threat.live
2026-07-15 17:55:08
(1 week ago)
Suspicious Connection Attempts
Brute-Force
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: