This IP address has been reported a total of
65
times from
30 distinct
sources.
103.138.145.128 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 18
reports;
Germany
with 6
reports;
Russian Federation
with 4
reports.
The most common categories in these recent reports were:
Bad Web Bot
21
times;
DDoS Attack
12
times;
Web App Attack
10
times;
Exploited Host
8
times;
Brute-Force
7
times;
Other
8
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
HTTP application-layer DoS / botnet traffic from 103.138.145.128: repeated high-cost dynamic page an ...
show moreHTTP application-layer DoS / botnet traffic from 103.138.145.128: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
nfdump top talker: 103.138.145.128 | first seen 2026-10-13 08:05:50.336 | duration 00:00:00.067 | fl ...
show morenfdump top talker: 103.138.145.128 | first seen 2026-10-13 08:05:50.336 | duration 00:00:00.067 | flows=4 | packets=109461 | bytes=77.8 M | pps=1631 | bps=9.3 M | bpp=711 | proto=any
show less
nfdump top talker: 103.138.145.128 | first seen 2026-10-12 12:24:56.960 | duration 00:00:00.176 | fl ...
show morenfdump top talker: 103.138.145.128 | first seen 2026-10-12 12:24:56.960 | duration 00:00:00.176 | flows=7 | packets=189255 | bytes=136.7 M | pps=1069 | bps=6.2 M | bpp=722 | proto=udp
show less
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5 ...
show moreRepeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5D=40&topics%5B3%5D=42&topics%5B4%5D=48&topics%5B5%5D=68 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36")
show less
(modsec_5040) ModSec 5040: API Basic Auth blocked from 103.138.145.128 (BD/Bangladesh/-): 1 in the l ...
show more(modsec_5040) ModSec 5040: API Basic Auth blocked from 103.138.145.128 (BD/Bangladesh/-): 1 in the last 3600 secs (0-195)
show less
WordPress login brute force | path: /wp-login.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15 ...
show moreWordPress login brute force | path: /wp-login.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
nfdump top talker: 103.138.145.128 | first seen 2026-10-09 11:46:11.968 | duration 00:00:00.082 | fl ...
show morenfdump top talker: 103.138.145.128 | first seen 2026-10-09 11:46:11.968 | duration 00:00:00.082 | flows=7 | packets=198462 | bytes=148.7 M | pps=2407 | bps=14.4 M | bpp=749 | proto=any
show less
nfdump top talker: 103.138.145.128 | first seen 2026-10-08 13:39:54.880 | duration 00:00:00.245 | fl ...
show morenfdump top talker: 103.138.145.128 | first seen 2026-10-08 13:39:54.880 | duration 00:00:00.245 | flows=3 | packets=123783 | bytes=90.8 M | pps=504 | bps=3.0 M | bpp=733 | proto=any
show less
