JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.159.254.216

103.159.254.216 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 41%: ?

41%

ISP	Shahana Begum t/a SNS IT
Usage Type	Fixed Line ISP
ASN	AS141460
Domain Name	snsitbd.com
Country	🇧🇩 Bangladesh
City	Tungi, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.159.254.216

Whois 103.159.254.216

IP Abuse Reports for 103.159.254.216:

This IP address has been reported a total of 21 times from 16 distinct sources. 103.159.254.216 was first reported on January 10th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Zkillu	2026-08-19 21:12:31 (4 days ago)	UDP flood (DDoS) vs AS215599: 16 pkts / 0.02 MB to UDP 8443 across 15 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 16 pkts / 0.02 MB to UDP 8443 across 15 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:12:31 (4 days ago)	UDP flood (DDoS) vs AS215599: 16 pkts / 0.02 MB to UDP 8443 across 15 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 16 pkts / 0.02 MB to UDP 8443 across 15 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 bigorre.org	2026-08-19 20:42:02 (4 days ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
Anonymous	2026-08-18 11:31:18 (5 days ago)	Distributed scraper residential proxy pool — www.pearlriverwines.com /store/filtered/ (WineCommerce ... show more Distributed scraper residential proxy pool — www.pearlriverwines.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 windowsforum	2026-08-17 12:55:41 (6 days ago)	Spam bot SSO registration: triggers=sso_service_check, username=Nailsbeautyzone	Web Spam Bad Web Bot
🇺🇸 kosada.com	2026-08-11 07:09:37 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇵🇱 bmino.pl	2026-08-09 16:35:46 (2 weeks ago)	Autoban IP(2): 103.159.254.216 - Hostname: SNS IT - City: Bhatara - Region: Dhaka Division - Country ... show more Autoban IP(2): 103.159.254.216 - Hostname: SNS IT - City: Bhatara - Region: Dhaka Division - Country: Bangladesh - Location: 23.8,90.45 - Organization: Shahana Begum - failed attempts. show less	Web App Attack
🇺🇸 kosada.com	2026-07-28 05:22:11 (3 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 ipblock.com	2026-07-21 17:47:00 (1 month ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-07-17 15:07:30 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 kosada.com	2026-07-11 11:29:11 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 08:09:35 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-20 08:59:21 (2 months ago)	[Sat Jun 20 15:59:18.335821 2026] [security2:error] [pid 296548:tid 140141870945984] [client 103.159 ... show more [Sat Jun 20 15:59:18.335821 2026] [security2:error] [pid 296548:tid 140141870945984] [client 103.159.254.216:55692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim"] [unique_id "ajZWZtSNmf37wvwxTRToAAAAgwc"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[296556] [ZK/Un+tCnWk] [ajZWZtSNmf37wvwxTRToAAAAgwc] keep_alive=[1] [2026-06-20 15:59:18.335828] [R:ajZWZtSNmf37wvw ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-21 05:59:15 (3 months ago)	1779343148.573452 103.159.254.216 103.166.156.58 65535_2-4-8-1-3_1360_6 2026-05-21 12:59:08 WIB ...	Email Spam Hacking
🇫🇷 Sklurk	2026-05-19 03:08:01 (3 months ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 109.205.211.110

🇺🇸 104.196.192.9

🇷🇺 95.154.84.123

🇳🇱 45.148.10.123

🇺🇦 212.92.253.250

🇺🇸 207.90.244.19

🇬🇧 193.163.125.151

🇮🇹 185.47.136.111

🇷🇺 176.32.137.160

🇺🇸 172.172.23.211

🇻🇳 171.243.148.32

🇺🇸 150.107.38.161

🇨🇳 111.231.226.6

🇮🇳 103.180.213.20

🇳🇱 91.92.242.55

🇪🇸 81.43.26.210

🇧🇬 79.124.62.230

🇺🇸 69.12.71.34

🇲🇾 49.124.148.197

🇰🇪 41.90.238.111