JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.197.153.212

103.197.153.212 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 34%: ?

34%

ISP	Link3 Technologies Limited
Usage Type	Fixed Line ISP
ASN	AS23688
Domain Name	link3.net
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.197.153.212

Whois 103.197.153.212

IP Abuse Reports for 103.197.153.212:

This IP address has been reported a total of 27 times from 13 distinct sources. 103.197.153.212 was first reported on July 24th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-17 16:05:46 (8 hours ago)	(mod_security) mod_security (id:210350) triggered by 103.197.153.212 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 103.197.153.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 12:05:39.385550 2026] [security2:error] [pid 25800:tid 25800] [client 103.197.153.212:54256] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ridgecrestconsultinggroup.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ridgecrestconsultinggroup.com"] [uri "/"] [unique_id "aqwP01XT4kaPLHghOC-2dgAAABI"], referer: https://domaincheckeronline.online/dir/trusted-seo-backlinks-176704 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-07 02:07:17 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A311&f%5B1%5D=digest_key_terms%3A313&f%5B2%5D=digest_key_terms%3A321&f%5B3%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B392%5D=392 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇨🇭 ALPHANET	2026-09-05 03:45:03 (1 week ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 gui-ying233	2026-09-03 12:41:27 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇳🇱 DrLex0	2026-08-30 07:04:44 (2 weeks ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 103.197.153.212 443 - [30/Aug/2026:07:04:44 +0000] "GET [redacted] HTTP/1.1" 410 6174 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇺🇸 gui-ying233	2026-08-25 15:09:22 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 10:55:09 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-23 06:04:54 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-14 06:46:24 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇷🇴 INTEQ	2026-08-02 06:46:35 (1 month ago)	Web attack from 103.197.153.212	Web App Attack
🇺🇸 kosada.com	2026-07-26 23:44:47 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-12 12:45:59 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 12:50:15 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇹 A000Z	2026-05-11 09:09:22 (4 months ago)	Fail2Ban: 103.197.153.212 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 103.197.153.212 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.1188.1111 Safari/537.36 show less	Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-05-02 00:49:19 (4 months ago)	Scraping webshop URLs (webshop.hofstede-optiek.nl), likely botnet drone	Bad Web Bot Exploited Host

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 161.248.162.15

🇱🇹 141.98.10.73

🇸🇬 43.156.33.17

🇺🇸 34.72.78.12

🇦🇺 216.226.77.10

🇺🇸 195.184.76.172

🇺🇸 195.184.76.138

🇭🇳 190.53.248.136

🇲🇽 187.221.142.203

🇧🇷 186.205.21.251

🇺🇸 184.105.247.195

🇩🇪 139.59.133.58

🇵🇭 121.58.196.194

🇳🇬 105.127.8.66

🇵🇰 103.117.163.237

🇹🇳 102.159.220.149

🇨🇦 85.217.149.52

🇵🇰 39.35.197.113

🇮🇩 36.78.110.18

🇬🇧 2a06:4880:8000::aa