JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 114.130.146.49

114.130.146.49 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 27%: ?

27%

ISP	Bangladesh Telegraph & Telephone Board
Usage Type	Fixed Line ISP
ASN	AS45588
Domain Name	bttb.net.bd
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 114.130.146.49

Whois 114.130.146.49

IP Abuse Reports for 114.130.146.49:

This IP address has been reported a total of 13 times from 9 distinct sources. 114.130.146.49 was first reported on April 3rd 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-18 04:09:49 (5 days ago)	Web App Attack	Web App Attack
🇮🇩 bps-statistics	2026-06-15 04:41:52 (1 week ago)	WP Login Scan Activities: "2026-06-15T11:41:52.270+07:00" "/wp-login.php" "114.130.146.49" "Mozilla/ ... show more WP Login Scan Activities: "2026-06-15T11:41:52.270+07:00" "/wp-login.php" "114.130.146.49" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 london2038.com	2026-06-05 13:44:13 (2 weeks ago)	Malformed or malicious web request 114.130.146.49 - - [05/Jun/2026:15:43:44 +0200] "POST /xmlrpc.php ... show more Malformed or malicious web request 114.130.146.49 - - [05/Jun/2026:15:43:44 +0200] "POST /xmlrpc.php HTTP/1.1" 404 4187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇬🇧 PeravixGroup	2026-05-25 09:47:21 (4 weeks ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇫🇷 security.rdmc.fr	2026-05-22 21:29:02 (1 month ago)	Port Scan Attack proto:TCP src:57716 dst:23	Port Scan
🇬🇧 PeravixGroup	2026-05-20 13:02:52 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇫🇷 Sklurk	2026-05-19 02:27:02 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-05-16 00:21:58 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 security.rdmc.fr	2026-05-12 01:43:19 (1 month ago)	Port Scan Attack proto:TCP src:60956 dst:23	Port Scan
🇷🇺 genokrad	2026-04-27 01:28:40 (1 month ago)	Unauthorized connection attempt on TCP/23 (Telnet)	Port Scan
🇨🇭 Origon	2026-04-22 04:18:50 (2 months ago)	NOQUEUE - IP: 114.130.146.49 - Apr 22 06:18:50 plesk postfix/smtpd[1597680]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 114.130.146.49 - Apr 22 06:18:50 plesk postfix/smtpd[1597680]: NOQUEUE: reject: RCPT from unknown[114.130.146.49]: 554 5.7.1 Service unavailable; Client host [114.130.146.49] blocked using dnsbl-3.uceprotect.net; Your ISP BTTB-AS-AP Telecom Operator & Internet Service Provider as well, BD/AS17494 is UCEPROTECT-Level3 listed because of a spamscore of 67.5. See: http://www.uceprotect.net/rblcheck.php?ipr=114.130.146.49; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<qsoftnet.cat> show less	Email Spam
🇺🇸 TPI-Abuse	2026-04-14 16:30:56 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 114.130.146.49 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 114.130.146.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 12:30:53.271022 2026] [security2:error] [pid 3428932:tid 3428932] [client 114.130.146.49:49304] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.grupoporvenir.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.grupoporvenir.com"] [uri "/serconpri.com"] [unique_id "ad5rvV547ozstH-w2sP9CwAAABE"], referer: https://www.grupoporvenir.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-04-03 03:15:56 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 111.68.107.91

🇬🇧 87.236.176.245

🇺🇸 44.17.174.59

🇨🇦 2607:f8b0:4023:1801::129

🇺🇸 205.210.31.36

🇺🇸 198.62.5.235

🇬🇧 193.176.29.24

🇺🇸 162.216.150.137

🇨🇳 106.54.193.198

🇺🇸 44.10.68.151

🇮🇩 180.252.147.158

🇺🇸 172.253.8.146

🇩🇪 167.94.145.19

🇭🇰 154.221.28.214

🇺🇸 141.11.88.3

🇺🇸 130.131.162.132

🇧🇷 129.121.32.44

🇭🇰 124.156.133.69

🇯🇵 111.238.174.6

🇨🇳 106.89.58.82