JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.20.241.102

103.20.241.102 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 23%: ?

23%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Space Digital Technology t/a Space Digital Technology
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55720
Domain Name	spacedigitaltech.com
Country	🇲🇾 Malaysia
City	Kuala Lumpur, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.20.241.102

Whois 103.20.241.102

IP Abuse Reports for 103.20.241.102:

This IP address has been reported a total of 43 times from 27 distinct sources. 103.20.241.102 was first reported on May 6th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-05-27 12:15:07 (1 week ago)	Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk- ... show more Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk-login jail show less	Brute-Force Web App Attack
🇳🇱 Kotiacat_one	2026-05-23 03:30:27 (2 weeks ago)	2026-05-23T06:30:26.544175+03:00 kotiacat.nexus sshd-session[3662]: Invalid user admin from 103.20.2 ... show more 2026-05-23T06:30:26.544175+03:00 kotiacat.nexus sshd-session[3662]: Invalid user admin from 103.20.241.102 port 35168 ... show less	Brute-Force SSH
Anonymous	2026-05-06 01:00:08 (1 month ago)	2026-05-05 19:00:02,103 fail2ban.actions [3625835]: NOTICE [tor] Ban 103.20.241.102 2026-05- ... show more 2026-05-05 19:00:02,103 fail2ban.actions [3625835]: NOTICE [tor] Ban 103.20.241.102 2026-05-05 21:00:05,358 fail2ban.actions [3625835]: NOTICE [tor] Ban 103.20.241.102 2026-05-05 23:00:06,537 fail2ban.actions [3625835]: NOTICE [tor] Ban 103.20.241.102 2026-05-06 01:00:52,513 fail2ban.actions [3625835]: NOTICE [tor] Ban 103.20.241.102 2026-05-06 04:00:04,006 fail2ban.actions [3625835]: NOTICE [tor] Ban 103.20.241.102 show less	Brute-Force
🇨🇿 ddw	2026-05-03 00:23:00 (1 month ago)	WordPress XMLRPC.PHP Access Attempt.	Hacking Web App Attack
Anonymous	2026-04-24 18:00:08 (1 month ago)	2026-04-24 12:00:01,543 fail2ban.actions [7718]: NOTICE [tor] Ban 103.20.241.102 2026-04-24 ... show more 2026-04-24 12:00:01,543 fail2ban.actions [7718]: NOTICE [tor] Ban 103.20.241.102 2026-04-24 14:00:06,554 fail2ban.actions [7718]: NOTICE [tor] Ban 103.20.241.102 2026-04-24 16:00:24,290 fail2ban.actions [7718]: NOTICE [tor] Ban 103.20.241.102 2026-04-24 18:01:02,283 fail2ban.actions [7718]: NOTICE [tor] Ban 103.20.241.102 2026-04-24 21:00:04,998 fail2ban.actions [7718]: NOTICE [tor] Ban 103.20.241.102 show less	Brute-Force
🇪🇪 gnom4ik	2026-04-12 04:39:56 (1 month ago)	ban-reviewer auto report; ip=103.20.241.102; scenario=http:scan; verdict=valid_ban; confidence=0.92; ... show more ban-reviewer auto report; ip=103.20.241.102; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇩🇪 LRob.fr	2026-04-08 15:00:05 (1 month ago)	Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk- ... show more Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk-login jail show less	Brute-Force Web App Attack
Anonymous	2026-03-23 16:31:39 (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-panel jail	Brute-Force
Anonymous	2026-03-17 17:00:24 (2 months ago)	2026-03-17 10:00:02,401 fail2ban.actions [3511917]: NOTICE [tor] Ban 103.20.241.102 2026-03- ... show more 2026-03-17 10:00:02,401 fail2ban.actions [3511917]: NOTICE [tor] Ban 103.20.241.102 2026-03-17 12:00:08,744 fail2ban.actions [3511917]: NOTICE [tor] Ban 103.20.241.102 2026-03-17 14:00:34,431 fail2ban.actions [3511917]: NOTICE [tor] Ban 103.20.241.102 2026-03-17 16:00:53,434 fail2ban.actions [3511917]: NOTICE [tor] Ban 103.20.241.102 2026-03-17 19:00:02,305 fail2ban.actions [3511917]: NOTICE [tor] Ban 103.20.241.102 show less	Brute-Force
🇪🇸 gnom4ik	2026-02-22 11:22:52 (3 months ago)	ban-reviewer auto report; ip=103.20.241.102; scenario=ssh:bruteforce; verdict=valid_ban; confidence= ... show more ban-reviewer auto report; ip=103.20.241.102; scenario=ssh:bruteforce; verdict=valid_ban; confidence=0.95; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ssh:bruteforce scenario detected; ip has active decisions total of 2 (including this one); decision duration of 9480m (6.6 days) indicates sustained threat show less	Port Scan Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-02-04 09:15:45 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 103.20.241.102 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 103.20.241.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 04:15:36.954784 2026] [security2:error] [pid 11564:tid 11564] [client 103.20.241.102:47248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|beckersystems.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "beckersystems.net"] [uri "/xmlrpc.php"] [unique_id "aYMOONGH5qnneJ0genUriAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 dankmemer3920	2026-01-27 00:35:35 (4 months ago)	CrowdSec: import to_import.txt- 56363 ips	Port Scan
🇫🇷 eduardomelendezjr	2025-12-24 20:18:10 (5 months ago)	Rule : PLESK BOT 2025-12-24 12:17:23 Unauthorized login attempt to Plesk Panel from IP 103.20.241.10 ... show more Rule : PLESK BOT 2025-12-24 12:17:23 Unauthorized login attempt to Plesk Panel from IP 103.20.241.102 with username root show less	Hacking Brute-Force Web App Attack
🇦🇺 MAGIC	2025-12-24 03:10:07 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇹 mgarofano80	2025-12-22 22:43:59 (5 months ago)		Brute-Force Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇴 190.167.237.191

🇳🇱 85.10.133.12

🇭🇰 47.83.159.53

🇺🇸 199.127.63.58

🇷🇺 195.2.84.198

🇨🇴 190.0.63.226

🇻🇳 171.244.201.80

🇨🇳 116.236.43.254

🇵🇰 103.138.223.141

🇵🇱 81.210.53.105

🇩🇪 78.46.173.96

🇺🇸 2a03:2880:16ff:11::

🇨🇳 120.48.60.18

🇨🇳 117.32.132.170

🇷🇴 92.118.39.236

🇺🇸 73.21.28.14

🇨🇦 45.194.92.26

🇮🇳 43.225.52.111

🇺🇸 43.166.244.66

🇭🇰 43.154.127.188