AbuseIPDB » 103.112.65.253
103.112.65.253
This IP was reported 8 times. Confidence of
Abuse
is 34% : ?
ISP
Bhuiyan Telecom
Usage Type
Fixed Line ISP
ASN
AS137532
Domain Name
bhuiyan-online.com
Country
🇧🇩
Bangladesh
City
Sonargaon, Dhaka Division
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 103.112.65.253 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
103.112.65.253 was first reported on
April 3rd 2026 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-07-05 05:50:12
(2 days ago)
(mod_security) mod_security (id:217210) triggered by 103.112.65.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:217210) triggered by 103.112.65.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 01:50:08.458000 2026] [security2:error] [pid 14130:tid 14248] [client 103.112.65.253:47770] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.wheezer.org|F|4"] [data "GET http://www.wheezer.org HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wheezer.org"] [uri "/"] [unique_id "aknwkAmZPWu7H84laJ6jhwAAAg8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-07-03 16:54:16
(3 days ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-07-01 16:37:11
(5 days ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇰🇷
zlhIcd
2026-06-17 00:08:50
(2 weeks ago)
103.112.65.253 - - [15/Jun/2026:23:08:02 +0900] "GET /pcwiki/index.php?days=30&from=20251212222255&h ...
show more
103.112.65.253 - - [15/Jun/2026:23:08:02 +0900] "GET /pcwiki/index.php?days=30&from=20251212222255&hideliu=1&hideminor=1&limit=100&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12.1; rv:131.0) Gecko/20100101 Firefox/131.0"
...
show less
Web Spam
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
gui-ying233
2026-06-11 00:02:33
(3 weeks ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
MPL
2026-05-21 18:39:05
(1 month ago)
tcp/443 (21 or more attempts)
Port Scan
🇩🇪
bescared
2026-04-26 14:09:00
(2 months ago)
WAF (1) - Malicious path pattern detected.
Bad Web Bot
Web App Attack
🇳🇱
melroy89
2026-04-03 18:21:56
(3 months ago)
103.112.65.253 - - [03/Apr/2026:20:21:02 +0200] "GET /login HTTP/1.1" 200 1989 "-" "Mozilla/5.0 (Wi ...
show more
103.112.65.253 - - [03/Apr/2026:20:21:02 +0200] "GET /login HTTP/1.1" 200 1989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "kbin.melroy.org" 0.031
...
show less
DDoS Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: