JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.198.132.49

103.198.132.49 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 43%: ?

43%

ISP	Velocity Networks Limited
Usage Type	Fixed Line ISP
ASN	AS134734
Domain Name	velocitynetworksbd.com
Country	🇧🇩 Bangladesh
City	Gazipur, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.198.132.49

Whois 103.198.132.49

IP Abuse Reports for 103.198.132.49:

This IP address has been reported a total of 38 times from 26 distinct sources. 103.198.132.49 was first reported on November 17th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 Domainhizmetleri.com	2026-10-02 01:44:08 (2 weeks ago)	Source: DH Hunter (Honeypot) \| Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)	Port Scan
Anonymous	2026-10-02 01:10:24 (2 weeks ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇫🇷 PhiJai	2026-10-01 19:11:22 (2 weeks ago)	Signalement automatique (DEUS NemesisBanisher). balayage : connexion à un port qui ne sert rien ; ba ... show more Signalement automatique (DEUS NemesisBanisher). balayage : connexion à un port qui ne sert rien ; balayage : connexion à un faux service telnet. show less	Port Scan IoT Targeted
🇺🇸 TPI-Abuse	2026-09-27 03:29:46 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 103.198.132.49 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 103.198.132.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 23:29:42.365562 2026] [security2:error] [pid 27556:tid 27556] [client 103.198.132.49:51734] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|akramansari.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "akramansari.com"] [uri "/"] [unique_id "ariNpj7gYjlZqhRKywG2ewAAAAA"], referer: https://bulkdacheckeronline.space/dir/white-hat-backlinks-5405 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-23 08:56:59 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 03:46:57 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-22 02:20:07 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 103.198.132.49 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 103.198.132.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 22:20:00.619789 2026] [security2:error] [pid 1216:tid 1224] [client 103.198.132.49:37356] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|dreammile.info\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dreammile.info"] [uri "/"] [unique_id "arHl0H0rd-4ZuSbBqiXsigAAAQY"], referer: https://aeosmithwes.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2026-09-21 17:45:06 (3 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 鬼影233	2026-09-21 11:10:40 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 09:51:43 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 xmission.com	2026-09-18 12:52:03 (4 weeks ago)	Blocked by UFW (TCP on 22) Source port: 42079 TTL: 48 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 42079 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 103.198.132.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇺🇸 MPL	2026-09-18 11:11:58 (4 weeks ago)	tcp ports: 23,22 (8 or more attempts)	Port Scan
🇫🇷 Sklurk	2026-09-18 02:21:32 (4 weeks ago)	Web App Attack	Web App Attack
🇺🇸 鬼影233	2026-09-02 07:44:45 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 13:15:43 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇧 185.97.95.213

🇨🇳 120.198.23.233

🇪🇸 46.253.45.10

🇸🇪 46.59.88.232

🇰🇷 221.162.218.85

🇺🇸 195.184.76.187

🇨🇳 183.232.212.197

🇻🇳 117.4.254.98

🇺🇸 100.33.249.226

🇷🇺 87.251.81.76

🇳🇱 77.91.71.11

🇺🇸 64.62.156.162

🇱🇹 62.60.134.212

🇺🇸 40.124.123.217

🇺🇸 172.232.3.17

🇸🇬 165.22.51.61

🇨🇦 85.217.149.61

🇨🇦 85.217.149.13

🇺🇸 72.17.34.38

🇳🇱 45.148.10.157