JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.23.208.202

103.23.208.202 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 99%: ?

99%

ISP	Servers.com Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS7979
Domain Name	servers.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.23.208.202

Whois 103.23.208.202

IP Abuse Reports for 103.23.208.202:

This IP address has been reported a total of 25 times from 20 distinct sources. 103.23.208.202 was first reported on July 11th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 SSP	2026-07-14 08:15:19 (2 days ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 63 Unique Ports: 96 Destination Ports: 5986, 5905, 5980, 5926, 6000, 5914, 5978, 5904, 5907, 5993, 5936, 5935, 5937, 5959, 5942, 5902, 5972, 5917, 5931, 5985, 5944, 5989, 5933, 5999, 5994, 5958, 5929, 5964, 5910, 5984, 5961, 5915, 5927, 5930, 5913, 5966, 5945, 5903, 5979, 5949, 5970, 5960 First Seen: 2026-07-13 08:10 UTC Last Seen: 2026-07-13 08:20 UTC show less	Port Scan
🇧🇷 chronos	2026-07-13 15:42:23 (3 days ago)	2026-07-13 12:21:04 UTC-3\|\|Unauthorized connection attempt detected for port scanning	Port Scan
🇧🇷 chronos	2026-07-13 15:21:04 (3 days ago)	Generic malicious activity: ALERT: External attempt to access critical TCP port... \| Port: 5900 \| Pr ... show more Generic malicious activity: ALERT: External attempt to access critical TCP port... \| Port: 5900 \| Proto: TCP \| Location: Singapore, N/A show less	Port Scan Hacking
🇺🇸 SSP	2026-07-13 08:10:31 (3 days ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 306 Unique Ports: 96 Destination Ports: 5986, 5905, 5980, 5926, 6000, 5914, 5978, 5904, 5907, 5993, 5936, 5935, 5937, 5959, 5942, 5902, 5972, 5917, 5931, 5985, 5944, 5989, 5933, 5999, 5994, 5958, 5929, 5964, 5910, 5984, 5961, 5915, 5927, 5930, 5913, 5966, 5945, 5903, 5979, 5949, 5970, 5960 First Seen: 2026-07-13 07:10 UTC Last Seen: 2026-07-13 08:10 UTC show less	Port Scan
🇮🇩 soc-yk	2026-07-13 07:54:20 (3 days ago)	Type: suspicious_network_activity Risk: 96 Events: 1178 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 96 Events: 1178 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇭🇰 PingMeMaybe	2026-07-13 07:15:57 (3 days ago)	Blocked by UFW on hk [5975/tcp] Source port: 61000 TTL: 245 Packet length: 44 TOS: 0x00 This report ... show more Blocked by UFW on hk [5975/tcp] Source port: 61000 TTL: 245 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 LiftUp Hosting	2026-07-13 07:10:04 (3 days ago)	Honeypot hit: Empty payload (likely service probe); 5998 [1], 5950 [1] TCP	Port Scan
🇳🇱 Erik	2026-07-13 06:45:11 (3 days ago)	Port Scan detected from 103.23.208.202 (SG/Singapore/-/-/-). 11 hits in the last 280 seconds	Web App Attack Port Scan
🇭🇺 DumaNet	2026-07-13 03:44:00 (3 days ago)	Blocked for port scanning. Time: Mon Jul 13. 04:58:47 2026 +0200 IP: 103.23.208.202 (SG/Singapore/ ... show more Blocked for port scanning. Time: Mon Jul 13. 04:58:47 2026 +0200 IP: 103.23.208.202 (SG/Singapore/-) Sample of block hits: Jul 13 04:55:36 vserv kernel: [22755714.860370] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.23.208.202 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=5127 PROTO=TCP SPT=61000 DPT=5975 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 13 04:56:09 vserv kernel: [22755747.415088] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.23.208.202 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=63402 PROTO=TCP SPT=61000 DPT=5923 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 13 04:56:32 vserv kernel: [22755770.625823] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.23.208.202 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=3347 PROTO=TCP SPT=61000 DPT=5922 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 13 04:57:00 vserv kernel: [22755799.044386] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.23.208.202 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=7154 PROTO=TCP SPT=61000 DPT=5956 WINDOW show less	Port Scan
🇭🇺 DumaNet	2026-07-13 03:30:00 (3 days ago)	Blocked fr port scanning. Time: Mon Jul 13. 03:53:39 2026 +0200 IP: 103.23.208.202 (SG/Singapore/- ... show more Blocked fr port scanning. Time: Mon Jul 13. 03:53:39 2026 +0200 IP: 103.23.208.202 (SG/Singapore/-) Sample of block hits: Jul 13 03:52:24 vserv kernel: [22751923.235899] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.23.208.202 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=30128 PROTO=TCP SPT=61000 DPT=5920 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 13 03:52:27 vserv kernel: [22751926.277875] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.23.208.202 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=43621 PROTO=TCP SPT=61000 DPT=5937 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 13 03:52:32 vserv kernel: [22751931.226878] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.23.208.202 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=5247 PROTO=TCP SPT=61000 DPT=5985 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 13 03:52:35 vserv kernel: [22751933.903287] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.23.208.202 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=36888 PROTO=TCP SPT=61000 DPT=5957 WIN show less	Port Scan
🇩🇪 Darki1962	2026-07-13 02:50:01 (3 days ago)	11 hits, proto=tcp, ports=5908,5913,5926,5933,5948,5950,5954,5963,5985,5990,5994	Port Scan Hacking Brute-Force SSH
🇩🇪 Darki1962	2026-07-13 02:35:01 (3 days ago)	11 hits, proto=tcp, ports=5901,5906,5910,5921,5929,5931,5945,5958,5970,5981,5992	Port Scan Hacking Brute-Force SSH
🇫🇷 peter.pann	2026-07-12 22:20:39 (4 days ago)	Port scan: 101 blocked connection attempts to ports 5900,5901,5902,5903,5904,5905,5906,5907,5908,590 ... show more Port scan: 101 blocked connection attempts to ports 5900,5901,5902,5903,5904,5905,5906,5907,5908,5909 (dropped by our geo-firewall). show less	Port Scan
Anonymous	2026-07-12 17:26:10 (4 days ago)	fail2ban:piguard2:14,18	Port Scan Brute-Force
🇫🇮 sonot	2026-07-12 17:24:20 (4 days ago)	Blocked by UFW on mail [5999/tcp] \| SPT: 61000 \| TTL: 238 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on mail [5999/tcp] \| SPT: 61000 \| TTL: 238 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a09:bac5:2a91:2464::3a0:58

🇺🇸 2602:80d:1007::c1

🇬🇪 212.58.121.50

🇵🇱 176.53.159.198

🇺🇸 162.216.149.234

🇭🇰 152.32.213.68

🇺🇸 146.88.240.187

🇷🇴 92.118.39.171

🇸🇬 84.247.146.115

🇰🇭 36.37.133.196

🇯🇵 8.216.7.76

🇸🇬 2a09:bac5:55fa:1014::19a:173

🇩🇪 185.242.3.226

🇫🇮 178.20.210.151

🇺🇸 146.88.241.157

🇺🇸 145.132.102.241

🇺🇸 138.197.204.198

🇨🇳 124.223.106.161

🇰🇷 118.33.119.34

🇺🇸 107.173.41.67