JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.161.2.140

103.161.2.140 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 52%: ?

52%

ISP	Sunlit Network
Usage Type	Fixed Line ISP
ASN	AS134480
Hostname(s)	sunlitnetwork.com
Domain Name	sunlitnetwork.com
Country	🇧🇩 Bangladesh
City	Jessore, Khulna Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.161.2.140

Whois 103.161.2.140

IP Abuse Reports for 103.161.2.140:

This IP address has been reported a total of 34 times from 22 distinct sources. 103.161.2.140 was first reported on February 4th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-09-14 09:37:42 (1 day ago)	tcp ports: 23,22 (12 or more attempts)	Port Scan
🇫🇷 bigorre.org	2026-09-13 10:41:28 (2 days ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 kosada.com	2026-09-07 10:19:46 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A516&f%5B1%5D=digest_key_terms%3A529&field_article_edition%5B504%5D=504&field_key_terms%5B391%5D=391 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0") show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-09-03 23:40:17 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 xmission.com	2026-09-03 06:38:52 (1 week ago)	Blocked by UFW (TCP on 23) Source port: 32978 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 32978 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 103.161.2.140) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-08-27 12:22:50 (2 weeks ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇺🇸 kosada.com	2026-08-25 07:54:41 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 RAP	2026-08-23 01:40:28 (3 weeks ago)	2026-08-23 01:40:28 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 Zkillu	2026-08-19 20:44:29 (3 weeks ago)	UDP flood (DDoS) vs AS215599: 330 pkts / 0.47 MB to UDP 8443 across 169 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 330 pkts / 0.47 MB to UDP 8443 across 169 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 20:44:29 (3 weeks ago)	UDP flood (DDoS) vs AS215599: 330 pkts / 0.47 MB to UDP 8443 across 169 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 330 pkts / 0.47 MB to UDP 8443 across 169 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇮🇩 sockominfo	2026-08-07 12:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 103.161.2.140. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 103.161.2.140. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-07 11:00:09 (1 month ago)	Zimbra: Login failures from malicious IP: 103.161.2.140. Threat Score: 5.9/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 103.161.2.140. Threat Score: 5.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-07-31 01:21:46 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇷🇴 INTEQ	2026-07-28 17:33:13 (1 month ago)	Web attack from 103.161.2.140	Web App Attack
🇺🇸 synthient	2026-07-17 08:21:53 (1 month ago)	Earnify Botnet DDoS Attack July 17th. IOCs: https://github.com/deepfield/public-research/tree/main/m ... show more Earnify Botnet DDoS Attack July 17th. IOCs: https://github.com/deepfield/public-research/tree/main/maskify show less	Brute-Force DDoS Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.247

🇵🇾 186.182.105.49

🇺🇸 184.105.247.248

🇺🇸 184.105.247.211

🇺🇸 184.105.247.207

🇦🇷 181.84.155.120

🇨🇳 122.51.59.198

🇹🇼 106.107.242.11

🇩🇪 104.207.63.208

🇹🇷 88.242.132.242

🇺🇸 76.33.146.136

🇩🇪 51.89.39.55

🇸🇬 47.245.117.221

🇩🇪 35.198.177.93

🇯🇵 34.84.19.45

🇸🇬 2400:8901::2000:c3ff:feb3:eed7

🇬🇧 213.166.84.59

🇧🇪 198.235.24.245

🇧🇪 198.235.24.240

🇧🇪 198.235.24.239