JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.172.139.51

103.172.139.51 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 40%: ?

40%

ISP	Stardust Telecom Ltd.
Usage Type	Fixed Line ISP
ASN	AS137967
Domain Name	mimebd.com
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.172.139.51

Whois 103.172.139.51

IP Abuse Reports for 103.172.139.51:

This IP address has been reported a total of 28 times from 18 distinct sources. 103.172.139.51 was first reported on September 18th 2025, and the most recent report was 45 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-31 23:44:46 (45 minutes ago)	(mod_security) mod_security (id:210730) triggered by 103.172.139.51 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 103.172.139.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 19:44:38.207297 2026] [security2:error] [pid 15409:tid 15409] [client 103.172.139.51:58484] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ipostsocialmedia.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ipostsocialmedia.com"] [uri "/[email protected]"] [unique_id "apYR5ki_UcUdl2ofIL_VlQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-26 09:24:36 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-24 17:19:15 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 bigorre.org	2026-08-24 17:07:58 (1 week ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 15:03:23 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 22:11:51 (1 week ago)	UDP flood (DDoS) vs AS215599: 47 pkts / 0.07 MB to UDP 80/8443 across 45 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 47 pkts / 0.07 MB to UDP 80/8443 across 45 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:11:51 (1 week ago)	UDP flood (DDoS) vs AS215599: 47 pkts / 0.07 MB to UDP 80/8443 across 45 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 47 pkts / 0.07 MB to UDP 80/8443 across 45 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 SX Communications	2026-08-03 13:19:06 (4 weeks ago)	HTTP application-layer DoS / botnet traffic from 103.172.139.51: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 103.172.139.51: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-08-02 15:47:38 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-11 11:20:34 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 10:29:25 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇹 VHosting	2026-04-26 16:33:25 (4 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇨🇦 polycoda	2026-04-20 10:49:13 (4 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇫🇮 notelseit	2026-04-17 02:50:51 (4 months ago)	2026-04-17T04:50:41.668132+02:00 mail dovecot: auth-worker(537405): conn unix:auth-worker (pid=53540 ... show more 2026-04-17T04:50:41.668132+02:00 mail dovecot: auth-worker(537405): conn unix:auth-worker (pid=535407,uid=110): auth-worker<36>: sql([email protected],103.172.139.51,<A4ihA59PzI1nrIsz>): Password mismatch 2026-04-17T04:50:49.042169+02:00 mail dovecot: auth-worker(537405): conn unix:auth-worker (pid=535407,uid=110): auth-worker<37>: sql([email protected],103.172.139.51,<A4ihA59PzI1nrIsz>): Password mismatch 2026-04-17T04:50:51.045059+02:00 mail dovecot: pop3-login: Disconnected: Connection closed (auth failed, 2 attempts in 12 secs): user=<[email protected]>, method=PLAIN, rip=103.172.139.51, lip=65.21.131.50, TLS: Connection closed, session=<A4ihA59PzI1nrIsz> ... show less	Brute-Force Email Spam
🇺🇸 Hmorrin	2026-04-06 02:15:43 (4 months ago)		Port Scan

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.166

🇳🇱 193.47.62.69

🇨🇱 186.10.86.130

🇳🇱 178.16.54.19

🇻🇳 171.245.78.143

🇫🇮 147.185.133.44

🇵🇰 103.169.99.74

🇹🇳 102.30.2.68

🇺🇸 98.82.128.239

🇳🇱 81.4.103.127

🇺🇸 54.234.246.56

🇹🇭 49.49.248.226

🇩🇪 31.220.3.165

🇺🇸 195.184.76.225

🇳🇱 195.178.110.227

🇳🇱 176.65.149.188

🇺🇸 162.216.149.16

🇰🇷 125.138.166.217

🇫🇷 91.231.89.151

🇨🇳 60.182.186.2