JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.157.92.138

103.157.92.138 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 40%: ?

40%

ISP	Rural Development Project Network
Usage Type	Fixed Line ISP
ASN	AS141351
Domain Name	rdpnbd.com
Country	🇧🇩 Bangladesh
City	Gazipur, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.157.92.138

Whois 103.157.92.138

IP Abuse Reports for 103.157.92.138:

This IP address has been reported a total of 29 times from 21 distinct sources. 103.157.92.138 was first reported on August 12th 2024, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-09-20 04:22:43 (17 hours ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 07:25:30 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 103.157.92.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 103.157.92.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:25:23.246292 2026] [security2:error] [pid 15073:tid 15073] [client 103.157.92.138:37838] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|creartest.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "creartest.com"] [uri "/hacertests-114475-pruebas_de_grado_.php"] [unique_id "aqpEY5ym0EQbP1OIG0bkJgAAAAI"], referer: https://creartest.com/hacertests-12023-historia.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-09-13 15:41:00 (1 week ago)	IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-09-13 15:25:56 (1 week ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 gui-ying233	2026-09-07 03:49:09 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-04 06:49:24 (2 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=65&topics%5B3%5D=70&topics%5B4%5D=61&topics%5B5%5D=39 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0") show less	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2026-05-17 01:12:47 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇸🇬 mypatricks	2026-05-07 21:16:34 (4 months ago)	103.157.92.138 \| Port: 11515 \| DNS: 103.157.92.138 2026-05-08T05:16:33+08:00 Asia/Dhaka \| FETCH Spro ... show more 103.157.92.138 \| Port: 11515 \| DNS: 103.157.92.138 2026-05-08T05:16:33+08:00 Asia/Dhaka \| FETCH Sproofing Activity Detetced. \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /contents/jquery-code?bbfcbeafabcc=afaeddbefdfac \| Ref: - \| Country: BD/Bangladesh/+06:00 IP City: Gazipur 9f833f1739bfba5c-DAC/Dhaka, Bangladesh 1 hits/0 secs Robots 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇧🇪 dbelm	2026-04-21 20:12:00 (4 months ago)	RdpGuard detected brute-force attempt on IMAP	Brute-Force
🇺🇸 SiliSoftware	2026-04-20 10:51:51 (5 months ago)	/phpBB3/viewforum.php?f=21&sid=16cb5559f06baeb49782cffc04eedbab	Web App Attack
🇺🇸 kosada.com	2026-04-17 05:02:07 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇹🇷 rtbh.com.tr	2026-03-15 20:12:04 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-14 20:12:03 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 Sklurk	2026-03-14 08:25:37 (6 months ago)	Web App Attack	Web App Attack
🇫🇷 vtchost.com	2026-03-11 13:05:49 (6 months ago)	invalid/bad user agent - possible botnet ...	Bad Web Bot

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.19

🇸🇬 140.245.116.147

🇨🇳 118.196.27.115

🇻🇳 113.176.85.112

🇩🇪 47.245.143.183

🇺🇸 204.8.96.140

🇪🇬 197.44.229.34

🇵🇦 190.218.251.83

🇨🇲 154.70.102.114

🇺🇸 147.182.185.121

🇭🇰 139.198.113.29

🇰🇷 121.142.87.218

🇺🇸 76.39.125.109

🇳🇱 45.148.10.152

🇺🇸 35.229.97.177

🇯🇵 34.85.77.160

🇺🇸 216.73.216.221

🇺🇸 104.248.113.216

🇺🇸 104.194.8.156

🇷🇴 92.118.39.77