AbuseIPDB » 103.185.20.148
103.185.20.148
This IP was reported 8 times. Confidence of
Abuse
is 32% : ?
ISP
Taherpur Online
Usage Type
Fixed Line ISP
ASN
AS149658
Domain Name
taherpuronline.net
Country
🇧🇩
Bangladesh
City
Natore, Rajshahi Division
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 103.185.20.148 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
103.185.20.148 was first reported on
December 22nd 2025 , and the most recent report was
13 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-23 09:35:26
(13 hours ago)
denied traffic to a honeypot network. destination port 445.
Port Scan
Hacking
🇺🇸
stechusa
2026-07-20 15:12:38
(3 days ago)
ELEVATED_THREAT | 584 IPs targeting /brand.html | URL template shared by 265 IPs: /brand.html?bulb_s ...
show more
ELEVATED_THREAT | 584 IPs targeting /brand.html | URL template shared by 265 IPs: /brand.html?bulb_shape=*&bulb_shape_type=*&bulb_type=*&mode=list&p=* | Facet request during elevated threat (facet_ratio=0.99, unique_ips=773)
show less
Bad Web Bot
DDoS Attack
🇺🇸
kosada.com
2026-07-07 17:24:32
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇨🇭
backslash
2026-07-03 08:48:09
(2 weeks ago)
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
Bad Web Bot
🇺🇸
kosada.com
2026-06-25 22:04:41
(4 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇫🇷
TheHoneyPotter
2026-06-11 04:54:23
(1 month ago)
Honeypot [fc-honeypot]: SMB traffic on port 445
Reported by: https://github.com/sefinek/T-Pot-To-Abu ...
show more
Honeypot [fc-honeypot]: SMB traffic on port 445
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Hacking
🇮🇩
hermawan
2026-05-30 16:17:37
(1 month ago)
[Sat May 30 23:17:32.954591 2026] [security2:error] [pid 472970:tid 140573603198656] [client 103.185 ...
show more
[Sat May 30 23:17:32.954591 2026] [security2:error] [pid 472970:tid 140573603198656] [client 103.185.20.148:51868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /plant-t.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/plant-t.webp"] [unique_id "ahsNnEkG1eXr2rWuCBsASQAATg8"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[472986] [ggdyTAucaP4] [ahsNnEkG1eXr2rWuCBsASQAATg8] keep_alive=[1] [2026-05-30 23:17:32.954595] [R:ahsNnEkG1eXr2rWuCBsASQAATg8] UA:'Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74'
...
show less
Email Spam
Hacking
🇮🇹
VHosting
2025-12-22 22:07:05
(7 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: