JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.20.243.160

103.20.243.160 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 35%: ?

35%

ISP	HALDA NETWORK COMMUNICATION
Usage Type	Unknown
ASN	Unknown
Domain Name	halda.com.bd
Country	🇧🇩 Bangladesh
City	Cox's Bazar, Chittagong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.20.243.160

Whois 103.20.243.160

IP Abuse Reports for 103.20.243.160:

This IP address has been reported a total of 36 times from 24 distinct sources. 103.20.243.160 was first reported on January 21st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 DrLex0	2026-09-01 05:26:24 (2 weeks ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 103.20.243.160 443 - [01/Sep/2026:05:26:24 +0000] "GET [redacted] HTTP/1.1" 410 6111 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15" show less	Bad Web Bot Exploited Host
🇺🇸 gui-ying233	2026-08-26 11:40:50 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 15:42:31 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-24 10:02:47 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇧🇾 stroytrest	2026-08-23 05:41:05 (4 weeks ago)	2026-08-23T08:41:04.491558+03:00 gate kernel: [1018784.188609] nftables: JAIL-SSH IN=wan OUT= MAC= S ... show more 2026-08-23T08:41:04.491558+03:00 gate kernel: [1018784.188609] nftables: JAIL-SSH IN=wan OUT= MAC= SRC=103.20.243.160 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=9650 DF PROTO=TCP SPT=53514 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-08-22 03:28:50 (4 weeks ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
🇺🇸 donarev419	2026-08-22 00:46:22 (4 weeks ago)	Connection to port 8080 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:8080 ... show more Connection to port 8080 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:8080 Connection: close User-Agent: Mozilla/5.0 (Windows NT 6. show less	Port Scan Hacking
🇫🇷 Zkillu	2026-08-19 22:11:54 (1 month ago)	UDP flood (DDoS) vs AS215599: 180 pkts / 0.26 MB to UDP 8443 across 110 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 180 pkts / 0.26 MB to UDP 8443 across 110 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇵🇹 rnl	2026-08-19 02:40:55 (1 month ago)	postfix	Brute-Force Email Spam
🇵🇹 rnl	2026-08-18 01:44:53 (1 month ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇺🇸 cybsecaoccol	2026-08-17 22:42:29 (1 month ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇨🇭 Origon	2026-08-16 18:59:22 (1 month ago)	NOQUEUE - IP: 103.20.243.160 - Aug 16 20:59:22 plesk postfix/smtpd[2987943]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 103.20.243.160 - Aug 16 20:59:22 plesk postfix/smtpd[2987943]: NOQUEUE: reject: RCPT from unknown[103.20.243.160]: 554 5.7.1 Service unavailable; Client host [103.20.243.160] blocked using dnsbl-1.uceprotect.net; IP 103.20.243.160 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=103.20.243.160; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<103.20.243.163> show less	Email Spam
🇫🇷 Sklurk	2026-05-28 04:20:22 (3 months ago)	Web App Attack	Web App Attack
🇺🇸 stechusa	2026-04-11 03:18:47 (5 months ago)	ELEVATED_THREAT \| country=BD \| ASN=Plusnet Inc \| form_key 5M47EogE... shared by 5 IPs: 150.228.105.1 ... show more ELEVATED_THREAT \| country=BD \| ASN=Plusnet Inc \| form_key 5M47EogE... shared by 5 IPs: 150.228.105.139, 96.49.12.144, 103.20.243.160, 187.255.41.50, 49.47.11.140 \| Facet request during elevated threat (facet_ratio=0.71, unique_ips=140) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-04-11 03:18:47 (5 months ago)	[Askari] \| country=BD \| Behavior: HTTP/1.1 over TLS, Outdated browser, Concurrent page load during a ... show more [Askari] \| country=BD \| Behavior: HTTP/1.1 over TLS, Outdated browser, Concurrent page load during attack show less	Bad Web Bot DDoS Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.198

🇩🇪 167.94.146.70

🇳🇱 130.12.180.48

🇵🇭 112.208.72.91

🇺🇸 104.128.228.18

🇺🇸 91.230.168.7

🇪🇸 91.142.223.216

🇫🇷 91.134.242.90

🇵🇱 80.49.182.77

🇮🇹 194.153.198.230

🇺🇸 172.200.195.165

🇺🇸 153.52.160.248

🇹🇼 123.192.127.86

🇨🇳 120.48.17.39

🇮🇩 114.12.17.98

🇻🇳 103.200.23.107

🇺🇸 68.183.168.78

🇲🇾 49.124.149.53

🇮🇩 43.230.5.42

🇩🇪 34.40.20.106