JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.181.69.16

103.181.69.16 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 18%: ?

18%

ISP	Digicon Telecommunication Ltd
Usage Type	Fixed Line ISP
ASN	AS137967
Domain Name	confidencegroup.com.bd
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.181.69.16

Whois 103.181.69.16

IP Abuse Reports for 103.181.69.16:

This IP address has been reported a total of 42 times from 32 distinct sources. 103.181.69.16 was first reported on December 15th 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 A000Z	2026-05-17 17:21:45 (2 weeks ago)	Fail2Ban: 103.181.69.16 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 103.181.69.16 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 ALPHANET	2026-05-10 04:45:05 (3 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇨🇭 Origon	2026-04-26 07:21:16 (1 month ago)	NOQUEUE - IP: 103.181.69.16 - Apr 26 09:21:16 plesk postfix/smtpd[560090]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 103.181.69.16 - Apr 26 09:21:16 plesk postfix/smtpd[560090]: NOQUEUE: reject: RCPT from unknown[103.181.69.16]: 554 5.7.1 Service unavailable; Client host [103.181.69.16] blocked using dnsbl-3.uceprotect.net; Your ISP DIGICON-ISP-AS Digicon Telecommunication Ltd, BD/AS137967 is UCEPROTECT-Level3 listed because of a spamscore of 520.8. See: http://www.uceprotect.net/rblcheck.php?ipr=103.181.69.16; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<ilmegliodiinternet.it> show less	Email Spam
🇩🇪 filstal.org	2026-04-14 02:10:17 (1 month ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇺🇸 stechusa	2026-03-30 04:21:28 (2 months ago)	[Askari] \| Behavior: Holding server worker, HTTP/1.1 over TLS, Targeting specific pages, Outdated br ... show more [Askari] \| Behavior: Holding server worker, HTTP/1.1 over TLS, Targeting specific pages, Outdated browser, Concurrent page load during attack show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-03-30 04:21:28 (2 months ago)	ELEVATED_THREAT \| 9 IPs targeting /brand.html \| Facet request during elevated threat (facet_ratio=0. ... show more ELEVATED_THREAT \| 9 IPs targeting /brand.html \| Facet request during elevated threat (facet_ratio=0.66, unique_ips=99) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇦🇺 MAGIC	2026-03-30 01:08:28 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 vtchost.com	2026-03-25 12:38:04 (2 months ago)	hit a honeypot - ignored robots.txt - possible botnet ...	Bad Web Bot
🇫🇷 vtchost.com	2026-03-20 15:19:40 (2 months ago)	invalid/bad user agent - possible botnet ...	Bad Web Bot
🇫🇷 Sklurk	2026-03-15 06:24:59 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 rsiddall	2026-03-13 18:00:26 (2 months ago)	2026-03-13T14:00:25.964073linnet.elirion.net postfix/postscreen[30772]: DISCONNECT [103.181.69.16]:6 ... show more 2026-03-13T14:00:25.964073linnet.elirion.net postfix/postscreen[30772]: DISCONNECT [103.181.69.16]:60484 2026-03-13T14:00:25.972119linnet.elirion.net postfix/postscreen[30772]: DISCONNECT [103.181.69.16]:60482 2026-03-13T14:00:25.972213linnet.elirion.net postfix/postscreen[30772]: DISCONNECT [103.181.69.16]:60485 2026-03-13T14:00:25.979345linnet.elirion.net postfix/postscreen[30772]: DISCONNECT [103.181.69.16]:60487 2026-03-13T14:00:25.979435linnet.elirion.net postfix/postscreen[30772]: DISCONNECT [103.181.69.16]:60483 ... show less	Brute-Force
🇳🇱 EGP Abuse Dept	2026-03-04 01:17:56 (3 months ago)	Scanning for port/service exploits on tpc-005.mach3builders.nl	Port Scan Hacking
🇺🇸 matt	2026-03-02 22:39:35 (3 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-17 20:51:20 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 103.181.69.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 103.181.69.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 15:51:17.356798 2026] [security2:error] [pid 23644:tid 23644] [client 103.181.69.16:60950] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ourodyssey.us\|F\|2"] [data ".blogspot.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ourodyssey.us"] [uri "/ourodyssey.blogspot.com"] [unique_id "aZTUxd1JcQeHGMtxt7Tc7wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-10 21:43:31 (3 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇭 203.189.159.235

🇧🇷 179.250.202.24

🇺🇸 173.230.145.110

🇹🇼 165.154.227.8

🇮🇳 103.176.160.146

🇺🇸 72.167.50.103

🇫🇷 54.36.120.31

🇺🇸 45.148.124.80

🇧🇷 200.59.217.43

🇹🇼 198.235.24.96

🇬🇧 185.247.137.39

🇺🇸 185.213.193.216

🇺🇸 173.239.211.142

🇺🇸 173.239.211.129

🇺🇸 173.239.211.118

🇻🇳 171.224.181.28

🇺🇸 157.254.174.96

🇰🇷 125.138.175.113

🇵🇰 119.157.76.119

🇻🇳 115.84.183.240