JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.147.106.41

103.147.106.41 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 28%: ?

28%

ISP	Galaxy Net
Usage Type	Fixed Line ISP
ASN	AS139927
Domain Name	galaxynett.com
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.147.106.41

Whois 103.147.106.41

IP Abuse Reports for 103.147.106.41:

This IP address has been reported a total of 16 times from 9 distinct sources. 103.147.106.41 was first reported on February 3rd 2024, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2026-09-17 11:17:28 (15 hours ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 gui-ying233	2026-09-04 05:33:11 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-02 09:06:17 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-02 07:22:20 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇵🇱 MatStef132	2026-08-28 19:44:52 (2 weeks ago)	MatShield L7: blocked on test-clean.mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 bigorre.org	2026-08-28 15:42:33 (2 weeks ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 gui-ying233	2026-08-27 13:31:40 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-23 11:58:14 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-08-22 06:36:06 (3 weeks ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
Anonymous	2026-07-21 06:13:27 (1 month ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇺🇸 kosada.com	2026-07-11 05:07:40 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-07 04:45:36 (3 months ago)	(mod_security) mod_security (id:217210) triggered by 103.147.106.41 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 103.147.106.41 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 00:45:30.432400 2026] [security2:error] [pid 30505:tid 30505] [client 103.147.106.41:54432] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|blog66chances.shop\|F\|4"] [data "GET http://blog66chances.shop HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "blog66chances.shop"] [uri "/"] [unique_id "aiT3aibWhC-O2rxx2hkxagAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-05-10 07:17:29 (4 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇪🇸 el-brujo	2026-04-10 23:35:39 (5 months ago)	Cloudflare WAF: Request Path: /foro_libre/como_realizar_un_eje_cronologico_por_ordenador-t313560.0.h ... show more Cloudflare WAF: Request Path: /foro_libre/como_realizar_un_eje_cronologico_por_ordenador-t313560.0.html Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: GALAXYNET-AS-AP Galaxy Net Country: BD Method: GET Timestamp: 2026-04-10T23:35:39Z ruleId: 561d6e73a48e41d18a1a014356a284e1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇩🇪 NxtGenIT	2024-02-05 00:58:41 (2 years ago)	103.147.106.41 has been observed attacking Port 123. Observed Threat: NTP Amplification REQ_MON_GETL ... show more 103.147.106.41 has been observed attacking Port 123. Observed Threat: NTP Amplification REQ_MON_GETLIST Request Found show less	DDoS Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.23.149.55

🇺🇸 185.180.141.110

🇺🇸 161.0.2.247

🇰🇷 152.32.139.200

🇺🇸 147.185.132.87

🇮🇳 103.161.232.38

🇺🇸 96.246.40.65

🇫🇷 85.217.140.4

🇺🇸 45.149.173.233

🇸🇬 43.133.61.254

🇫🇷 34.155.26.70

🇺🇸 20.171.10.225

🇺🇸 9.234.8.246

🇨🇦 199.189.27.232

🇹🇼 198.235.24.86

🇨🇱 191.113.202.231

🇨🇱 190.5.35.178

🇬🇧 185.247.137.218

🇳🇱 185.223.235.19

🇿🇦 102.129.61.112