JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.197.249.234

103.197.249.234 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 41%: ?

41%

ISP	S.M. ZAKIR HOSSAIN t/a EUROtelbd Online Ltd.
Usage Type	Fixed Line ISP
ASN	AS64043
Hostname(s)	103.197.249-234.eurotelbd.net
Domain Name	eurotelbd.com
Country	🇧🇩 Bangladesh
City	Barishal, Barisal Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.197.249.234

Whois 103.197.249.234

IP Abuse Reports for 103.197.249.234:

This IP address has been reported a total of 30 times from 18 distinct sources. 103.197.249.234 was first reported on June 22nd 2025, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-24 14:38:08 (19 hours ago)	(mod_security) mod_security (id:210350) triggered by 103.197.249.234 (103.197.249-234.eurotelbd.net) ... show more (mod_security) mod_security (id:210350) triggered by 103.197.249.234 (103.197.249-234.eurotelbd.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 10:38:02.728263 2026] [security2:error] [pid 18380:tid 18380] [client 103.197.249.234:49860] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|davidnevue.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "davidnevue.com"] [uri "/webmin/adminer.php"] [unique_id "aoxXSrtRVemhFn6Gik2JugAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-08-20 04:21:26 (5 days ago)	Web App Attack	Web App Attack
🇺🇸 kosada.com	2026-08-10 11:15:04 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇮 iamxorum	2026-08-05 10:18:54 (2 weeks ago)	2026-08-05T10:18:53.377355+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2: ... show more 2026-08-05T10:18:53.377355+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=103.197.249.234 DST=46.62.222.43 LEN=60 TOS=0x08 PREC=0x20 TTL=42 ID=58244 DF PROTO=TCP SPT=21203 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan IoT Targeted
🇺🇸 etu brutus	2026-07-30 14:47:54 (3 weeks ago)	103.197.249.234 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇺🇸 kosada.com	2026-07-29 09:57:16 (3 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇳🇱 DrLex0	2026-07-21 04:24:46 (1 month ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being a burning bag of dog poop. 103.197.249.234 443 - [21/Jul/2026:04:24:46 +0000] "GET [redacted] HTTP/1.1" 200 6775 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-07-13 01:29:16 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-11 09:45:43 (1 month ago)	Large-scale coordinated botnet (450+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (450+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/10393/form_key/9deQ0Zt0z47r8fpx/ \| UA: Mozilla/5.0 (Android 1.0; Mobile; rv:5.0) Gecko/5.0 Firefox/5.0 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 pixelmemory.us	2026-07-09 07:09:29 (1 month ago)	2026-07-09T07:02:58 103.197.249.234 GET /Photos/Work/Shutterfly/t/4313.jpg Mozilla/5.0 (Windows NT 1 ... show more 2026-07-09T07:02:58 103.197.249.234 GET /Photos/Work/Shutterfly/t/4313.jpg Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇫🇷 bigorre.org	2026-07-06 16:48:14 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇨🇭 backslash	2026-07-03 06:03:03 (1 month ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇮🇹 A000Z	2026-06-28 10:27:17 (1 month ago)	Fail2Ban: 103.197.249.234 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 103.197.249.234 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-06-28 09:49:23 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-04-22 17:53:52 (4 months ago)	04/23/2026-00:53:49.133357 [Drop] [] [1:920621:1] Suricata Local: Ubiquiti Discovery (5678) [] ... show more 04/23/2026-00:53:49.133357 [Drop] [] [1:920621:1] Suricata Local: Ubiquiti Discovery (5678) [] [Classification: (null)] [Priority: 3] {UDP} 103.197.249.234:41079 -> 103.166.156.58:37277 ... show less	Email Spam Hacking

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.4.214.115

🇱🇹 213.176.26.194

🇱🇹 213.176.26.29

🇯🇵 84.247.152.77

🇵🇱 83.168.110.251

🇳🇱 45.148.10.152

🇬🇧 45.82.76.103

🇨🇳 36.212.245.130

🇯🇵 23.145.248.35

🇧🇷 205.210.31.194

🇳🇱 193.47.62.69

🇨🇳 116.179.32.37

🇨🇳 115.205.219.225

🇳🇱 91.92.47.128

🇫🇮 65.109.178.234

🇸🇬 51.79.178.46

🇫🇷 2400:cb00:532:1000:5cbe:ed0c:c9df:2b8c

🇩🇪 213.209.159.25

🇬🇧 195.96.139.212

🇫🇮 147.185.133.178