JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.138.123.78

103.138.123.78 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 35%: ?

35%

ISP	RL CAFE NET
Usage Type	Fixed Line ISP
ASN	AS134204
Domain Name	rlcafenet.com
Country	🇧🇩 Bangladesh
City	Barishal, Barisal Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.138.123.78

Whois 103.138.123.78

IP Abuse Reports for 103.138.123.78:

This IP address has been reported a total of 30 times from 19 distinct sources. 103.138.123.78 was first reported on July 27th 2025, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-24 09:02:33 (6 hours ago)	(mod_security) mod_security (id:217210) triggered by 103.138.123.78 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 103.138.123.78 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 05:02:24.955379 2026] [security2:error] [pid 26844:tid 26844] [client 103.138.123.78:60796] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|cruisedawgs.com\|F\|4"] [data "GET http://cruisedawgs.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cruisedawgs.com"] [uri "/"] [unique_id "ajudIAy5a2lkG4JecB2eIwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-23 13:44:51 (1 day ago)	Unauthorized VPN login attempts	Hacking Brute-Force
🇰🇷 zlhIcd	2026-06-16 01:15:04 (1 week ago)	103.138.123.78 - - [15/Jun/2026:19:44:28 +0900] "GET /pcwiki/index.php?days=30&from=20251213131458&h ... show more 103.138.123.78 - - [15/Jun/2026:19:44:28 +0900] "GET /pcwiki/index.php?days=30&from=20251213131458&hideminor=1&limit=500&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.1; rv:127.0) Gecko/20100101 Firefox/127.0" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack
🇨🇭 backslash	2026-05-31 16:06:06 (3 weeks ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇩🇪 milcraft.nl	2026-05-19 00:34:02 (1 month ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇬🇧 myintarweb	2026-05-08 06:22:58 (1 month ago)	103.138.123.78 - - [08/May/2026:07:22:57 +0100] 443 "GET /arse.jpg HTTP/1.1" 200 24389 "-" "Mozilla/ ... show more 103.138.123.78 - - [08/May/2026:07:22:57 +0100] 443 "GET /arse.jpg HTTP/1.1" 200 24389 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0" ... show less	Hacking Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-05-02 01:13:08 (1 month ago)	Scraping webshop URLs (webshop.hofstede-optiek.nl), likely botnet drone	Bad Web Bot Exploited Host
🇩🇪 filstal.org	2026-04-09 04:32:55 (2 months ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇩🇪 FeG Deutschland	2026-04-09 03:58:01 (2 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 EGP Abuse Dept	2026-04-05 00:04:33 (2 months ago)	Scraping webshop URLs (www.badgehouder.nl), likely botnet drone	Bad Web Bot Exploited Host
🇫🇷 Sklurk	2026-04-01 09:39:29 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 stechusa	2026-03-29 20:28:45 (2 months ago)	[Askari] \| country=BD \| Behavior: HTTP/1.1 over TLS, Targeting specific pages, Outdated browser, Con ... show more [Askari] \| country=BD \| Behavior: HTTP/1.1 over TLS, Targeting specific pages, Outdated browser, Concurrent page load during attack show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-03-29 20:28:45 (2 months ago)	ELEVATED_THREAT \| country=BD \| ASN=Business Network \| Facet request during elevated threat (facet_ra ... show more ELEVATED_THREAT \| country=BD \| ASN=Business Network \| Facet request during elevated threat (facet_ratio=0.77, unique_ips=174) \| 14 IPs targeting /room.html \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇫🇷 Sklurk	2026-03-21 07:09:50 (3 months ago)	Web App Attack	Web App Attack
🇮🇹 A000Z	2026-03-19 04:27:10 (3 months ago)	Fail2Ban: 103.138.123.78 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 103.138.123.78 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇬 2620:171:b8:f003:9999::114

🇨🇳 202.112.237.233

🇬🇧 194.50.235.142

🇫🇷 185.177.72.12

🇨🇳 117.132.5.139

🇻🇳 116.99.49.208

🇺🇸 91.230.168.170

🇮🇳 45.123.110.70

🇬🇧 185.216.145.190

🇷🇴 141.98.83.240

🇰🇷 125.138.175.113

🇳🇱 91.92.40.237

🇺🇿 87.192.224.131

🇺🇸 66.132.195.154

🇩🇴 45.172.152.74

🇭🇰 43.132.214.228

🇺🇸 40.124.175.75

🇿🇲 165.56.186.104

🇧🇬 79.124.62.126

🇺🇸 67.199.171.81