JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.149.143.16

103.149.143.16 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 22%: ?

22%

ISP	eCourier Limited
Usage Type	Fixed Line ISP
ASN	AS63526
Hostname(s)	103-149-143-16.Dhaka.carnival.com.bd
Domain Name	ecourier.com.bd
Country	🇧🇩 Bangladesh
City	Gaurnadi, Barisal Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.149.143.16

Whois 103.149.143.16

IP Abuse Reports for 103.149.143.16:

This IP address has been reported a total of 14 times from 12 distinct sources. 103.149.143.16 was first reported on November 15th 2021, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-06-01 10:41:51 (5 days ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇦🇺 MAGIC	2026-05-23 02:08:34 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-05-06 16:53:03 (4 weeks ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2026-05-01 07:25:58 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 stechusa	2026-03-29 04:08:24 (2 months ago)	ELEVATED_THREAT \| country=BD \| ASN=Systems Solutions & development Technologies Limited \| 17 IPs tar ... show more ELEVATED_THREAT \| country=BD \| ASN=Systems Solutions & development Technologies Limited \| 17 IPs targeting /brand/satco-products-inc.html \| Facet request during elevated threat (facet_ratio=0.70, unique_ips=112) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇦🇺 MAGIC	2026-03-14 03:18:26 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇹🇷 rtbh.com.tr	2026-03-12 20:12:01 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-11 20:12:00 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2026-03-11 03:06:39 (2 months ago)	(mod_security) mod_security (id:217210) triggered by 103.149.143.16 (103-149-143-16.Dhaka.carnival.c ... show more (mod_security) mod_security (id:217210) triggered by 103.149.143.16 (103-149-143-16.Dhaka.carnival.com.bd): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 23:06:32.086071 2026] [security2:error] [pid 2081:tid 2081] [client 103.149.143.16:43954] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|moon7lates.top\|F\|4"] [data "GET http://moon7lates.top HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "moon7lates.top"] [uri "/"] [unique_id "abDcOKaTVFMAlkmJq6f9nAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-03-09 18:06:05 (2 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇫🇷 Sklurk	2026-02-12 08:54:45 (3 months ago)	Web App Attack	Web App Attack
🇸🇬 mypatricks	2025-10-15 21:31:58 (7 months ago)	103.149.143.16 \| Port: 10243 \| DNS: 103-149-143-16.Dhaka.carnival.com.bd 2025-10-16T05:31:57+08:00 A ... show more 103.149.143.16 \| Port: 10243 \| DNS: 103-149-143-16.Dhaka.carnival.com.bd 2025-10-16T05:31:57+08:00 Asia/Dhaka \| Bad Behavior Activity \| UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 HTTP/1.1 443 GET \| URL: /hashtag/camouflage/?eb61984b6cac19b73f19b3b1=KRW&code=KRW \| Ref: - \| Country: BD/Bangladesh/+06:00 IP City: Netrakona 98f26d1ac11b5d31-CGP/Chittagong, Bangladesh 1 hits/0 secs Robots 3 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
🇩🇪 creoline GmbH	2021-12-02 07:39:40 (4 years ago)	E-Mail Spam (RBL) [T61A8CC8FL00000000]	Email Spam
🇸🇬 Sean64	2021-11-15 00:47:31 (4 years ago)	Nov 15 13:46:54 sean postfix/smtpd[2334316]: NOQUEUE: reject: RCPT from unknown[103.149.143.16]: 554 ... show more Nov 15 13:46:54 sean postfix/smtpd[2334316]: NOQUEUE: reject: RCPT from unknown[103.149.143.16]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.149.143.16]> Nov 15 13:47:15 sean postfix/smtpd[2330533]: NOQUEUE: reject: RCPT from unknown[103.149.143.16]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.149.143.16]> Nov 15 13:47:31 sean postfix/smtpd[2331313]: NOQUEUE: reject: RCPT from unknown[103.149.143.16]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.149.143.16]> ... show less	Email Spam Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.121

🇺🇸 216.24.212.19

🇱🇹 62.60.130.235

🇺🇸 47.251.124.47

🇳🇱 45.148.10.141

🇩🇪 213.209.159.56

🇪🇸 213.195.117.233

🇳🇱 192.42.116.21

🇨🇳 182.242.168.158

🇮🇩 157.15.40.85

🇩🇪 139.19.117.130

🇭🇰 103.103.245.61

🇵🇱 87.251.64.155

🇺🇸 66.132.172.136

🇺🇸 65.49.1.124

🇮🇳 13.232.162.32

🇺🇸 216.24.212.17

🇺🇸 205.210.31.65

🇳🇵 202.79.60.37

🇺🇸 113.20.0.58