JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.182.45.75

103.182.45.75 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 85%: ?

85%

ISP	GPALV BROADBAND PRIVATE LIMITED
Usage Type	Fixed Line ISP
ASN	AS135836
Domain Name	gpalvbroadband.in
Country	🇮🇳 India
City	Durg, Chhattisgarh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.182.45.75

Whois 103.182.45.75

IP Abuse Reports for 103.182.45.75:

This IP address has been reported a total of 19 times from 15 distinct sources. 103.182.45.75 was first reported on August 28th 2026, and the most recent report was 44 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-28 17:45:56 (44 minutes ago)	Aug 28 13:45:56 localhost kernel: [116284299.900146] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Aug 28 13:45:56 localhost kernel: [116284299.900146] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=103.182.45.75 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=19419 PROTO=TCP SPT=47641 DPT=2222 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 28 13:45:56 localhost kernel: [116284299.900175] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=103.182.45.75 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=19419 PROTO=TCP SPT=47641 DPT=2222 SEQ=758719300 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 28 13:45:56 localhost kernel: [116284299.906829] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=103.182.45.75 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=19419 PROTO=TCP SPT=47641 DPT=2222 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 28 13:45:56 localhost kernel: [116284299.906850] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=103.182.45.75 DST=[mungedIP2] LEN=40 TOS=0x show less	Port Scan
🇮🇪 AutosOnShow	2026-08-28 17:22:04 (1 hour ago)	blocked for webapp attack \| path requested: /index.php \| seen at 2026-08-28 17:21:28.547 \|	Web App Attack
🇸🇪 SkyDancer	2026-08-28 16:46:59 (1 hour ago)	Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by ... show more Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface. show less	Hacking Brute-Force SSH
🇺🇸 MPL	2026-08-28 16:13:44 (2 hours ago)	tcp/80 (4 or more attempts)	Port Scan
Anonymous	2026-08-28 16:04:01 (2 hours ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇺🇸 TPI-Abuse	2026-08-28 15:57:47 (2 hours ago)	(mod_security) mod_security (id:218420) triggered by 103.182.45.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 103.182.45.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 11:57:39.307768 2026] [security2:error] [pid 21922:tid 21922] [client 103.182.45.75:45230] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.39:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.39"] [uri "/hello.world"] [unique_id "apGv8wIQ5dRiRaCcclEa6wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2026-08-28 15:52:05 (2 hours ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
Anonymous	2026-08-28 15:22:27 (3 hours ago)	SIEM ALERT AUTO REPORT	Email Spam
🇩🇪 mxpgmbh	2026-08-28 15:18:43 (3 hours ago)	2026-08-28T17:18:05.502123+02:00 ** sshd-session[9900]: pam_unix(sshd:auth): authentication failur ... show more 2026-08-28T17:18:05.502123+02:00 sshd-session[9900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.182.45.75 user=root 2026-08-28T17:18:07.357404+02:00 sshd-session[9900]: Failed password for root from 103.182.45.75 port 51306 ssh2 2026-08-28T17:18:40.628368+02:00 sshd-session[10006]: Invalid user from 103.182.45.75 port 48048 2026-08-28T17:18:40.629501+02:00 sshd-session[10006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.182.45.75 2026-08-28T17:18:42.936555+02:00 sshd-session[10006]: Failed password for invalid user ** from 103.182.45.75 port 48048 ssh2 show less	Brute-Force SSH
Anonymous	2026-08-28 14:54:19 (3 hours ago)	2026-08-28T14:53:42.054923+00:00 arrow-us3 sshd-session[58865]: pam_unix(sshd:auth): authentication ... show more 2026-08-28T14:53:42.054923+00:00 arrow-us3 sshd-session[58865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.182.45.75 2026-08-28T14:53:44.242297+00:00 arrow-us3 sshd-session[58865]: Failed password for invalid user admin from 103.182.45.75 port 47352 ssh2 2026-08-28T14:54:18.586828+00:00 arrow-us3 sshd-session[58867]: Invalid user user from 103.182.45.75 port 36548 ... show less	Brute-Force SSH
🇫🇷 dynamix	2026-08-28 14:44:52 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇵🇱 alianet	2026-08-28 14:39:06 (3 hours ago)	Aug 28 14:38:32 vps-eb8e942e sshd-session[762999]: Connection closed by invalid user admin 103.182.4 ... show more Aug 28 14:38:32 vps-eb8e942e sshd-session[762999]: Connection closed by invalid user admin 103.182.45.75 port 41030 [preauth] Aug 28 14:39:02 vps-eb8e942e sshd-session[763038]: Connection from 103.182.45.75 port 54412 on 57.128.195.69 port 2222 rdomain "" Aug 28 14:39:05 vps-eb8e942e sshd-session[763038]: Invalid user user from 103.182.45.75 port 54412 ... show less	Brute-Force SSH
Anonymous	2026-08-28 14:38:37 (3 hours ago)	Command Injection Over HTTP.	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 14:30:06 (3 hours ago)	(mod_security) mod_security (id:218420) triggered by 103.182.45.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 103.182.45.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:29:58.573958 2026] [security2:error] [pid 19664:tid 19701] [client 103.182.45.75:51654] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.131:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.131"] [uri "/hello.world"] [unique_id "apGbZnOzscTQeWZ4X8C4PwAAAYU"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇼 kk_it_man	2026-08-28 14:16:02 (4 hours ago)	hack	Hacking

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇳🇱 45.148.10.152

🇫🇷 172.71.127.86

🇫🇷 172.71.127.85

🇧🇩 103.97.162.89

🇫🇷 85.217.140.34

🇭🇰 74.125.179.157

🇺🇸 67.215.237.232

🇮🇹 57.131.50.86

🇺🇸 50.217.40.11

🇺🇸 34.139.68.175

🇩🇰 193.181.210.158

🇺🇸 100.54.118.92

🇱🇻 84.15.221.159

🇩🇪 213.209.159.230

🇲🇽 201.113.13.157

🇫🇷 169.58.170.94

🇺🇸 129.213.81.80

🇺🇸 20.163.34.23

🇰🇷 222.116.40.28