JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.198.155.6

103.198.155.6 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 63%: ?

63%

ISP	PLAY BROADBAND (PRIVATE) LIMITED
Usage Type	Fixed Line ISP
ASN	AS151330
Domain Name	pbb.net.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.198.155.6

Whois 103.198.155.6

IP Abuse Reports for 103.198.155.6:

This IP address has been reported a total of 84 times from 41 distinct sources. 103.198.155.6 was first reported on July 31st 2025, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-08-22 01:06:42 (10 hours ago)	Brute force	Brute-Force
🇺🇸 gui-ying233	2026-08-20 14:12:40 (1 day ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-08-19 20:23:22 (2 days ago)	[Thu Aug 20 06:23:21.589850 2026] [security2:error] [pid 433262] [client 103.198.155.6:47070] [clien ... show more [Thu Aug 20 06:23:21.589850 2026] [security2:error] [pid 433262] [client 103.198.155.6:47070] [client 103.198.155.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/promo/www/product/productlist.php"] [unique_id "aoYQuX3gsRcXDFE_YNBMkwAAAAM"] ... show less	Web App Attack
🇺🇸 kosada.com	2026-08-19 12:47:44 (2 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 sockominfo	2026-08-17 13:00:59 (4 days ago)	Zimbra: Login failures from malicious IP: 103.198.155.6. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 103.198.155.6. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 76%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-17 12:00:09 (4 days ago)	Zimbra: Login failures from malicious IP: 103.198.155.6. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 103.198.155.6. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇫🇷 Sklurk	2026-08-15 06:27:38 (1 week ago)	Web App Attack	Web App Attack
🇺🇸 floreriaexpress	2026-08-14 20:18:21 (1 week ago)	FakeADS-Anti: country:PK \| https://floreriaexpresschile.cl/product-tag/ramo-de-rosas-santiago/?order ... show more FakeADS-Anti: country:PK \| https://floreriaexpresschile.cl/product-tag/ramo-de-rosas-santiago/?orderby=price&per_page=18&per_row=4&shop_view=grid show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-14 08:27:05 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): IP auto-blocked. Evidence: BlockedIPs list	Hacking Web App Attack
🇩🇪 klaus_ph	2026-08-13 07:02:32 (1 week ago)	103.198.155.6 - - [12/Aug/2026:05:54:15 +0200] "GET /lka/Record/c0280221+5.1784/Details?lng=vi HTTP/ ... show more 103.198.155.6 - - [12/Aug/2026:05:54:15 +0200] "GET /lka/Record/c0280221+5.1784/Details?lng=vi HTTP/1.1" 200 13232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.137 Safari/537.36" ... show less	Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-08-10 02:07:00 (1 week ago)	Scraping webshop URLs (creall.com), likely botnet drone	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-08-06 08:58:03 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 HandyTreff.de	2026-07-27 17:35:12 (3 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -48.756 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -48.756 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18. show less	Web App Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-26 04:48:14 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇪🇸 librebit	2026-07-24 15:18:57 (4 weeks ago)	Brute force	Brute-Force

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 203.83.231.93

🇵🇱 185.158.133.1

🇨🇳 120.224.74.191

🇫🇷 91.196.152.96

🇳🇱 91.92.40.35

🇳🇴 20.100.175.163

🇬🇧 2.57.17.44

🇰🇷 220.70.104.133

🇳🇱 193.47.62.69

🇳🇱 185.224.128.16

🇨🇳 182.138.158.168

🇺🇸 142.111.245.178

🇺🇸 103.168.66.237

🇫🇷 91.231.89.154

🇺🇸 65.49.1.172

🇬🇧 35.203.211.225

🇬🇧 2.57.17.84

🇨🇳 220.197.85.128

🇺🇸 172.235.41.110

🇳🇱 45.148.10.183