JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 114.130.156.211

114.130.156.211 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 35%: ?

35%

ISP	Bangladesh Telegraph & Telephone Board
Usage Type	Fixed Line ISP
ASN	AS45588
Domain Name	bttb.net.bd
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 114.130.156.211

Whois 114.130.156.211

IP Abuse Reports for 114.130.156.211:

This IP address has been reported a total of 28 times from 16 distinct sources. 114.130.156.211 was first reported on February 11th 2022, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 04:18:06 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 114.130.156.211 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 114.130.156.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 00:18:03.147269 2026] [security2:error] [pid 13566:tid 13582] [client 114.130.156.211:59530] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|captechinc.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "captechinc.com"] [uri "/"] [unique_id "aqy7exASHXU3cAgV7LlahgAAAIw"], referer: https://onlinedachecker.online/dir/premium-link-building-33831 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-13 12:01:29 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-10 08:22:16 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /search?f%5B0%5D=key_ter ... show more Repeated requests classified as pathological web bot behavior, for example: /search?f%5B0%5D=key_terms%3A311&f%5B10%5D=key_terms%3A531&f%5B11%5D=key_terms%3A543&f%5B12%5D=key_terms%3A718&f%5B1%5D=key_terms%3A315&f%5B2%5D=key_terms%3A316&f%5B3%5D=key_terms%3A317&f%5B4%5D=key_terms%3A325&f%5B5%5D=key_terms%3A336&f%5B6%5D=key_terms%3A517&f%5B7%5D=key_terms%3A520&f%5B8%5D=key_terms%3A522&f%5B9%5D=key_terms%3A525 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0") show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-09-08 09:40:09 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 09:25:54 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-19 01:48:34 (1 month ago)	denied traffic to a honeypot network. destination port 7777.	Port Scan Hacking
🇫🇷 EDSL	2026-08-18 02:29:30 (1 month ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
Anonymous	2026-08-18 02:04:12 (1 month ago)	denied traffic to a honeypot network. destination port 38893.	Port Scan Hacking
Anonymous	2026-08-17 15:54:41 (1 month ago)	51665/udp (1 or more attempts)	Port Scan
🇺🇸 kosada.com	2026-08-16 23:28:38 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 pltcldvlpr	2026-07-28 04:54:50 (1 month ago)	Bogus Useragent: 114.130.156.211 - - [28/Jul/2026:06:54:49 +0200] "GET /mandate?id=hh_16_spd_gunter- ... show more Bogus Useragent: 114.130.156.211 - - [28/Jul/2026:06:54:49 +0200] "GET /mandate?id=hh_16_spd_gunter-frank HTTP/1.1" 444 0 "-" "Opera/9.44.(Windows CE; eo-US) Presto/2.9.171 Version/11.00" asn=45588 org="Bangladesh Telegraph & Telephone Board" country=BD ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-28 01:39:39 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-06 21:10:39 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 15:46:19 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-09 11:27:33 (3 months ago)	(mod_security) mod_security (id:240335) triggered by 114.130.156.211 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 114.130.156.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:27:28.428980 2026] [security2:error] [pid 22199:tid 22199] [client 114.130.156.211:58326] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 114.130.156.211 (+1 hits since last alert)\|pluralmatrix.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pluralmatrix.net"] [uri "/xmlrpc.php"] [unique_id "aif4oMb90hk2lufu-xECCQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 196.75.248.109

🇲🇽 187.209.224.76

🇨🇳 123.56.97.72

🇫🇷 91.196.152.18

🇧🇬 79.124.62.134

🇺🇸 73.166.84.237

🇲🇾 47.250.178.28

🇮🇱 37.122.153.202

🇧🇪 34.62.251.45

🇬🇧 31.14.254.10

🇺🇸 18.221.179.104

🇻🇳 14.225.206.187

🇻🇳 14.225.206.171

🇻🇳 14.179.227.67

🇬🇧 2a06:4880:2000::47

🇮🇳 2400:6180:100:d0::c78b:9001

🇩🇪 213.209.159.16

🇺🇦 195.96.143.132

🇦🇷 179.238.43.55

🇵🇪 179.7.72.198