JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.148.115.60

103.148.115.60 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 44%: ?

44%

ISP	Virtual Communications
Usage Type	Fixed Line ISP
ASN	AS140093
Domain Name	vcbd.net
Country	🇧🇩 Bangladesh
City	Mymensingh, Mymensingh Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.148.115.60

Whois 103.148.115.60

IP Abuse Reports for 103.148.115.60:

This IP address has been reported a total of 29 times from 17 distinct sources. 103.148.115.60 was first reported on May 22nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-15 07:06:42 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 103.148.115.60 (103-148-115-60.vcbd.net): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 103.148.115.60 (103-148-115-60.vcbd.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:06:36.566434 2026] [security2:error] [pid 11080:tid 11206] [client 103.148.115.60:56498] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.quantumgaze.iancaird.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.quantumgaze.iancaird.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atB7fIHdpYH4GXfPw26JWwAAAUU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-10-14 17:25:06 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 12:15:49 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 103.148.115.60 (103-148-115-60.vcbd.net): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 103.148.115.60 (103-148-115-60.vcbd.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:15:40.499173 2026] [security2:error] [pid 22872:tid 22976] [client 103.148.115.60:35372] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|koalacogs.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "koalacogs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as9ybOMjiJ_7AQwcwYUBzQAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-10-14 05:15:47 (2 days ago)	[Wed Oct 14 12:15:46.913002 2026] [security2:error] [pid 1952172:tid 140402847798976] [client 103.14 ... show more [Wed Oct 14 12:15:46.913002 2026] [security2:error] [pid 1952172:tid 140402847798976] [client 103.148.115.60:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur"] [unique_id "as8QAisyXpct8tScB9jIKgAAAEA"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1952226] [NWUQBgZQqjQ] [as8QAisyXpct8tScB9jIKgAAAEA] keep_alive=[0] [2026-10-14 12:15:46.913010] [R:as8QAisyXpct8tScB9jIKgAAAEA] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10 ... show less	Email Spam Hacking
🇺🇸 TPI-Abuse	2026-10-14 04:16:32 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 103.148.115.60 (103-148-115-60.vcbd.net): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 103.148.115.60 (103-148-115-60.vcbd.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 00:16:27.331092 2026] [security2:error] [pid 16400:tid 16400] [client 103.148.115.60:47984] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cosplayculture.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cosplayculture.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as8CG6YfM3RY0QfLm5bEtgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-10-14 04:08:38 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇷🇺 Darth Vader	2026-10-12 16:57:37 (4 days ago)	nfdump top talker: 103.148.115.60 \| first seen 2026-10-12 19:57:37.536 \| duration 00:00:00.089 \| flo ... show more nfdump top talker: 103.148.115.60 \| first seen 2026-10-12 19:57:37.536 \| duration 00:00:00.089 \| flows=2 \| packets=78771 \| bytes=56.2 M \| pps=879 \| bps=5.0 M \| bpp=713 \| proto=udp show less	DDoS Attack Exploited Host
🇺🇸 鬼影233	2026-09-22 07:45:05 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 17:52:37 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 09:45:11 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 05:38:56 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-23 15:14:12 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-20 16:23:25 (1 month ago)	DDoS flood attack against 82.152.54.0 (2026-08-20 16:18:25 -> 2026-08-20 16:33:25 UTC) targeting AS2 ... show more DDoS flood attack against 82.152.54.0 (2026-08-20 16:18:25 -> 2026-08-20 16:33:25 UTC) targeting AS215599. This IP (AS140093) sent ~1883 packets (2.68 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-19 21:58:04 (1 month ago)	UDP flood (DDoS) vs AS215599: 26 pkts / 0.04 MB to UDP 8443 across 24 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 26 pkts / 0.04 MB to UDP 8443 across 24 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:58:04 (1 month ago)	UDP flood (DDoS) vs AS215599: 26 pkts / 0.04 MB to UDP 8443 across 24 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 26 pkts / 0.04 MB to UDP 8443 across 24 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.107.164.75

🇮🇶 130.193.245.2

🇺🇸 64.23.143.246

🇰🇷 221.162.218.85

🇨🇭 198.251.91.100

🇨🇳 123.59.7.18

🇮🇩 114.125.27.143

🇺🇦 91.247.182.59

🇳🇱 77.83.39.45

🇺🇸 70.167.234.157

🇩🇪 51.195.6.20

🇺🇸 35.196.31.156

🇸🇰 212.37.95.235

🇪🇸 212.30.33.202

🇳🇱 198.105.96.8

🇨🇳 183.201.208.25

🇳🇱 151.245.151.188

🇯🇵 138.3.223.188

🇫🇷 88.170.169.145

🇷🇺 82.147.84.244