JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.121.120.242

103.121.120.242 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 27%: ?

27%

ISP	Logon Broadband Pvt. Limited
Usage Type	Fixed Line ISP
ASN	AS131275
Domain Name	logon.com.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.121.120.242

Whois 103.121.120.242

IP Abuse Reports for 103.121.120.242:

This IP address has been reported a total of 6 times from 6 distinct sources. 103.121.120.242 was first reported on May 29th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 ptlab	2026-06-10 08:45:40 (2 weeks ago)	Detected xmlrpc_brute attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 04:06:15 (2 weeks ago)	(mod_security) mod_security (id:210831) triggered by 103.121.120.242 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 103.121.120.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 00:06:05.496723 2026] [security2:error] [pid 23541:tid 23541] [client 103.121.120.242:50938] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "aijirbSq-IuY6VKSj3R_TgAAABg"], referer: https://shopviets.com/quan-tay-nam-hang-hieu-tphcm/ show less	Brute-Force Bad Web Bot Web App Attack
🇸🇮 administrator	2026-06-02 22:08:57 (3 weeks ago)	2026-06-01 14:52:34,848 fail2ban.actions [1162]: NOTICE [error-bots] Ban 103.121.120.242 202 ... show more 2026-06-01 14:52:34,848 fail2ban.actions [1162]: NOTICE [error-bots] Ban 103.121.120.242 2026-06-01 14:52:34,848 fail2ban.actions [1162]: NOTICE [error-bots] Ban 103.121.120.242 2026-06-01 14:52:34,848 fail2ban.actions [1162]: NOTICE [error-bots] Ban 103.121.120.242 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
Anonymous	2026-06-02 04:30:09 (3 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇯🇵 Short-legs-Spider	2026-05-31 18:51:00 (3 weeks ago)	Received: from 202.93.77.110 (HELO p134-static210.eurekanet.pk) (EHLO mtagw0001.mail.otm.ynwp.yaho ... show more Received: from 202.93.77.110 (HELO p134-static210.eurekanet.pk) (EHLO mtagw0001.mail.otm.ynwp.yahoo.co.jp) (103.121.120.242) by mta0058.mail.otm.ynwp.yahoo.co.jp with SMTP; Mon, 01 Jun 2026 03:51:52 +0900 Received: from 237.43.224.214 by 103.236.134.210; Sun, 31 May 2026 11:45:48 -0700 From: "=?ISO-2022-JP?B?GyRCJDckRRsoQg==?=" <[email protected]> Reply-To: "=?ISO-2022-JP?B?GyRCJGokZyQmJD8bKEI=?=" <[email protected]> To: [email protected] Subject: =?ISO-2022-JP?B?KBskQidwGyhCOhskQiFbIislOCVjJSQlIiVzGyhC?= Date: Sun, 31 May 2026 13:43:48 -0500 X-Mailer: Microsoft Outlook Express 5.00.2615.200 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--88585195669824741364" show less	Email Spam
🇦🇺 Powston	2026-05-29 20:01:28 (4 weeks ago)	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-05-29T19:07:55Z and 2026-05- ... show more Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-05-29T19:07:55Z and 2026-05-29T20:01:28Z show less	Brute-Force SSH

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:382:1172:9118:e8eb:2c12:67d9:ab83

🇪🇨 191.99.50.98

🇳🇱 176.65.131.189

🇮🇩 157.15.67.253

🇵🇰 154.208.47.121

🇺🇸 64.62.197.209

🇩🇪 45.135.194.48

🇺🇸 31.204.29.196

🇺🇸 18.218.118.203

🇰🇷 1.214.214.114

🇬🇧 2a06:4880:4000::4c

🇨🇳 219.151.22.113

🇦🇷 186.23.190.194

🇵🇱 172.253.255.50

🇨🇳 120.48.109.59

🇺🇸 99.46.31.249

🇬🇧 35.203.211.84

🇺🇸 216.180.246.159

🇩🇪 194.187.176.47

🇫🇮 147.185.133.159