JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.114.166.98

103.114.166.98 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 31%: ?

31%

ISP	BROTHERS ONLINE
Usage Type	Fixed Line ISP
ASN	AS135131
Domain Name	boisp.net
Country	🇧🇩 Bangladesh
City	Satkhira, Khulna Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.114.166.98

Whois 103.114.166.98

IP Abuse Reports for 103.114.166.98:

This IP address has been reported a total of 14 times from 11 distinct sources. 103.114.166.98 was first reported on March 2nd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-07-22 00:06:18 (2 days ago)	Scanning for port/service exploits on tpc-049.mach3builders.nl	Port Scan Hacking
🇺🇸 kosada.com	2026-07-06 15:10:14 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-03 14:32:15 (2 weeks ago)	Port scan / connection attempts on port 39921/UDP to unused IP	Port Scan
🇮🇩 hermawan	2026-06-28 07:39:06 (3 weeks ago)	[Sun Jun 28 14:39:01.339990 2026] [security2:error] [pid 189047:tid 140332174915264] [client 103.114 ... show more [Sun Jun 28 14:39:01.339990 2026] [security2:error] [pid 189047:tid 140332174915264] [client 103.114.166.98:45842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "akDPlbl-6BJe14qArEyVjgABDAQ"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[189052] [6glxb8tGTrU] [akDPlbl-6BJe14qArEyVjgABDAQ] keep_alive=[1] [2026-06-28 ... show less	Email Spam Hacking
🇺🇸 kosada.com	2026-06-27 02:54:48 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇦🇺 prologic	2026-06-12 22:09:10 (1 month ago)	Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 ... show more Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool. show less	DDoS Attack Web App Attack
🇨🇦 polycoda	2026-06-11 10:57:32 (1 month ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
Anonymous	2026-06-04 06:15:26 (1 month ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signatur ... show more Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signature Blocked: /wishlist/index/add/product/11136/form_key/V4EkQMb52q6bMOet/ \| UA: Mozilla/5.0 (iPod; U; CPU iPhone OS 3_0 like Mac OS X; fr-CH) AppleWebKit/5... show less	Hacking Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-04-29 14:32:11 (2 months ago)	[Wed Apr 29 21:27:27.675932 2026] [security2:error] [pid 18068:tid 139800443086528] [client 103.114. ... show more [Wed Apr 29 21:27:27.675932 2026] [security2:error] [pid 18068:tid 139800443086528] [client 103.114.166.98:46228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "623"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "afIVT6Yl5MHnTlkkHSDXEgAASQI"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[18071] [sROoJZowCeE] [afIVT6Yl5MHnTlkkHSDXEgAASQI] keep_alive=[1] [2026-04-29 21:27:27.675935] [R:afIVT6Yl5MHnTlkkHSDXEgAASQI] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text ... show less	Email Spam Hacking
Anonymous	2026-04-27 01:11:37 (2 months ago)	RdpGuard detected brute-force attempt on IMAP	Brute-Force
Anonymous	2026-03-21 09:15:39 (4 months ago)	Malicious activity	Bad Web Bot Web App Attack
🇮🇹 A000Z	2026-03-13 07:38:21 (4 months ago)	Fail2Ban: 103.114.166.98 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 103.114.166.98 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇦 polycoda	2026-03-11 15:36:44 (4 months ago)	📄 Probes for tons of inexistent files and PHP scripts	Hacking Web App Attack
🇺🇸 matt	2026-03-02 22:25:29 (4 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.162.218.85

🇧🇷 191.242.74.80

🇸🇬 101.47.15.26

🇺🇸 91.193.232.102

🇱🇻 83.99.242.71

🇨🇳 182.54.23.140

🇳🇱 176.65.148.250

🇪🇬 154.236.187.231

🇺🇸 150.107.38.133

🇨🇳 113.194.203.31

🇨🇳 113.80.94.237

🇸🇪 89.233.203.159

🇷🇴 80.94.92.55

🇬🇧 209.42.21.221

🇬🇧 195.206.182.203

🇨🇴 186.169.48.47

🇵🇪 181.224.229.91

🇧🇷 179.181.133.153

🇺🇸 162.217.100.196

🇬🇧 134.122.106.248