JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.149.241.152

103.149.241.152 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 63%: ?

63%

ISP	Khan Telecom
Usage Type	Fixed Line ISP
ASN	AS140499
Domain Name	khantelecom.net
Country	🇵🇰 Pakistan
City	Rawalpindi, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.149.241.152

Whois 103.149.241.152

IP Abuse Reports for 103.149.241.152:

This IP address has been reported a total of 23 times from 15 distinct sources. 103.149.241.152 was first reported on July 12th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2026-09-09 10:57:27 (2 days ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 RAP	2026-09-08 16:17:54 (3 days ago)	2026-09-08 16:17:54 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇫🇷 Entalpi.net	2026-09-07 04:00:12 (4 days ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇧🇷 noconex	2026-09-05 15:39:03 (6 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 103.149.24 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 103.149.241.152 show less	Port Scan Brute-Force SSH
🇷🇸 Smel	2026-09-05 08:02:03 (6 days ago)	SSH/22 MH Probe, BF, Hack -	Hacking Brute-Force SSH
🇺🇸 gui-ying233	2026-08-30 20:00:54 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇪🇸 el-brujo	2026-08-27 13:52:59 (2 weeks ago)	[Thu Aug 27 15:51:13.963036 2026] [authz_core:error] [pid 2770036:tid 2772974] [remote 103.149.241.1 ... show more [Thu Aug 27 15:51:13.963036 2026] [authz_core:error] [pid 2770036:tid 2772974] [remote 103.149.241.152:0] AH01630: client denied by server configuration: /home/httpd/vhosts/elhacker.net/httpdocs/.html [Thu Aug 27 15:51:21.539040 2026] [authz_core:error] [pid 2770112:tid 2774769] [remote 103.149.241.152:0] AH01630: client denied by server configuration: /home/httpd/vhosts/elhacker.net/httpdocs/.html [Thu Aug 27 15:51:25.081973 2026] [authz_core:error] [pid 2770132:tid 2775118] [remote 103.149.241.152:0] AH01630: client denied by server configuration: /home/httpd/vhosts/elhacker.net/httpdocs/.html, referer: https://elhacker.net/about [Thu Aug 27 15:51:37.770792 2026] [authz_core:error] [pid 2770112:tid 2775163] [remote 103.149.241.152:0] AH01630: client denied by server configuration: /home/httpd/vhosts/elhacker.net/httpdocs/.html, referer: https://elhacker.net/?zIzs=0kTR64 [Thu Aug 27 15:51:48.058012 2026] [authz_core:error] [pid 2770036:tid 2773204] [remote 103.149.241.152:0] AH01630: ... show less	Hacking Web App Attack
🇺🇸 gui-ying233	2026-08-27 09:07:45 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 18:17:16 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-25 12:23:32 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇬 garrymenata	2026-08-24 01:54:07 (2 weeks ago)	103.149.241.152 - - [24/Aug/2026:02:27:22 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; ... show more 103.149.241.152 - - [24/Aug/2026:02:27:22 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 103.149.241.152 - - [24/Aug/2026:02:27:24 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 103.149.241.152 - - [24/Aug/2026:02:27:26 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
Anonymous	2026-08-21 06:24:25 (3 weeks ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇫🇷 Zkillu	2026-08-19 20:24:59 (3 weeks ago)	UDP flood (DDoS) vs AS215599: 112 pkts / 0.16 MB to UDP 80 across 52 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 112 pkts / 0.16 MB to UDP 80 across 52 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 LSPCCU	2026-08-10 07:17:13 (1 month ago)	TSEC Honeypot Network report. Threat score: 70/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 70/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie, ssh-telnet. Context: 103.149.241.152 classified as automated brute-force attacker targeting SSH/Telnet credentials (high confidence). show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇩🇪 ghostwarriors	2026-08-07 09:20:39 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1007::67

🇮🇳 2404:6800:4000:1002::12c

🇺🇦 212.8.49.44

🇺🇦 185.250.21.151

🇨🇦 144.217.243.186

🇮🇩 103.193.166.12

🇮🇳 103.173.112.10

🇲🇩 91.199.133.133

🇬🇧 77.68.118.194

🇫🇷 51.178.183.38

🇧🇷 45.166.204.133

🇮🇷 37.255.213.72

🇺🇸 34.193.119.44

🇺🇸 34.125.23.74

🇺🇸 34.27.206.109

🇦🇷 191.84.230.220

🇲🇽 149.19.169.12

🇧🇬 109.160.32.88

🇩🇪 93.152.224.9

🇹🇷 84.44.39.47