JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.113.149.245

103.113.149.245 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 13%: ?

13%

ISP	DigiCon Telecommunication Ltd
Usage Type	Fixed Line ISP
ASN	AS137967
Domain Name	confidencegroup.com.bd
Country	🇧🇩 Bangladesh
City	Chattogram, Chittagong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.113.149.245

Whois 103.113.149.245

IP Abuse Reports for 103.113.149.245:

This IP address has been reported a total of 31 times from 17 distinct sources. 103.113.149.245 was first reported on January 18th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 week ago)	Aisuru(Mirai variant) DDoS \| Incident ID: f33ea243-b344-42fe-b994-8adedb9f85ca	DDoS Attack
Anonymous	2026-05-21 06:30:51 (2 weeks ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-01-02 06:22:18 (5 months ago)	(mod_security) mod_security (id:240950) triggered by 103.113.149.245 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240950) triggered by 103.113.149.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 01:22:09.923378 2026] [security2:error] [pid 24629:tid 24629] [client 103.113.149.245:36272] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)\|\|beckersystems.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "beckersystems.net"] [uri "/beckerwiki/index.php/User:SilaxoRogenu"] [unique_id "aVdkEf3OHhAkmNDpu-Tx3gAAACA"], referer: http://beckersystems.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2025-12-09 13:52:32 (5 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
Anonymous	2025-11-24 18:50:29 (6 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-18 23:57:47 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-10-26 13:43:02 (7 months ago)	[Sun Oct 26 20:25:28.495922 2025] [security2:error] [pid 1021298:tid 140451091822272] [client 103.11 ... show more [Sun Oct 26 20:25:28.495922 2025] [security2:error] [pid 1021298:tid 140451091822272] [client 103.113.149.245:47970] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=618&id=555555659%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-april-02-mei-2017&start=20 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=618&id=555555659%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-april-02-mei-2..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aP4hSIoeJU ... show less	Hacking Web App Attack
Anonymous	2025-10-25 06:47:11 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.25 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.25 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 IllusionCloud	2024-11-14 00:31:45 (1 year ago)	ILShield Appliance Alert: The following IPv4 address has been identified with potential malicious ac ... show more ILShield Appliance Alert: The following IPv4 address has been identified with potential malicious activities, including Internet Scanning, Denial of Service (DoS) Attacks, Participation in Distributed Denial of Service (DDoS) Attacks, Transmission of Invalid Packets, Potential IP Spoofing. show less	DNS Compromise DNS Poisoning DDoS Attack FTP Brute-Force Ping of Death SQL Injection Brute-Force Exploited Host Web App Attack SSH IoT Targeted
🇲🇹 Malta	2024-09-17 06:15:42 (1 year ago)	103.113.149.245 - - [17/Sep/2024:08:15:42 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linu ... show more 103.113.149.245 - - [17/Sep/2024:08:15:42 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.138 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇩🇪 Packets-Decreaser.NET	2024-08-07 16:57:44 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇩 HendraLeonar	2024-08-06 12:42:00 (1 year ago)	SYN FLOOD	DDoS Attack
🇨🇳 ThreatBook.io	2023-05-13 22:23:22 (3 years ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/103.113.149.245 2023-05- ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/103.113.149.245 2023-05-13 01:54:03 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2023-05-07 22:26:00 (3 years ago)	ThreatBook Intelligence: VPN,Dynamic IP more details on https://threatbook.io/ip/103.113.149.245 202 ... show more ThreatBook Intelligence: VPN,Dynamic IP more details on https://threatbook.io/ip/103.113.149.245 2023-05-07 16:48:30 /robots.txt show less	Web App Attack
🇺🇸 marlorodrigues	2023-04-22 16:23:27 (3 years ago)	Port Scan	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 210.16.168.11

🇱🇧 185.187.131.132

🇳🇱 160.119.78.191

🇧🇮 154.117.199.56

🇺🇸 152.32.205.153

🇱🇹 81.30.98.158

🇷🇴 80.94.92.187

🇩🇪 47.245.128.248

🇳🇱 45.148.10.152

🇩🇪 213.209.159.236

🇩🇪 213.209.159.56

🇩🇪 161.35.205.74

🇨🇳 106.75.143.205

🇺🇸 94.183.232.247

🇺🇸 71.199.4.100

🇫🇷 51.178.137.163

🇳🇱 31.56.209.215

🇺🇸 2600:3c00::2000:82ff:fe47:7ce1

🇺🇸 199.245.176.58

🇺🇸 162.216.150.163