JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.137.160.113

Recent Activity

Abuse Confidence Score

28% Elevated

41 reports

19 reporters · latest 3 days ago

ISP: Top Network
Usage Type: Fixed Line ISP
ASN: AS138953
Domain Name: topnetbd.com
Country: 🇧🇩 Bangladesh
City: Maijdi, Chittagong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

41 from 19 distinct reporters

First reported

March 3rd 2023

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 4 🇵🇱 Poland 3 🇨🇭 Switzerland 2

Most common categories Brute-Force 5 Bad Web Bot 5 Web App Attack 2 Email Spam 2 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-11-09 23:40:40 UTC · (3 days ago)	NOQUEUE - IP: 103.137.160.113 - Nov 10 00:40:40 plesk postfix/smtpd[2489372]: NOQUEUE: reject: RCPT from unknown[103.137.160.113]: 554 5.7.1 Service unavailable; Client host [103.137.160.113] blocked using dnsbl-1.uceprotect.net; IP 103.137.160.113 ... show more NOQUEUE - IP: 103.137.160.113 - Nov 10 00:40:40 plesk postfix/smtpd[2489372]: NOQUEUE: reject: RCPT from unknown[103.137.160.113]: 554 5.7.1 Service unavailable; Client host [103.137.160.113] blocked using dnsbl-1.uceprotect.net; IP 103.137.160.113 is UCEPROTECT-Level 1 listed. See https://[site]/rblcheck.php?ipr=103.137.160.113; from=<REDACTED@REDACTED> to=<[customer]> proto=ESMTP helo=<103.137.160.114> show less	Email Spam
🇵🇱 Kolobrzeg	2026-11-07 02:45:09 UTC · (6 days ago)	Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense count: 3. Last seen 2026-11-07 02:45 UTC, first seen 2026-10-05 UTC. Automated detection. Follow-up: attacks continued after our previous reports (2 earl ... show more Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense count: 3. Last seen 2026-11-07 02:45 UTC, first seen 2026-10-05 UTC. Automated detection. Follow-up: attacks continued after our previous reports (2 earlier, latest 2026-10-26 23:43 UTC). AS138953 Top Network. show less	Brute-Force
Anonymous	2026-11-02 07:15:03 UTC · (1 week ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Attack Signature Blocked: /brands/shopby/manufacturer-gefen-rcf-dell-tv_one-lsi-brightline-ask_proxima-projectiondesign-xyz.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇵🇱 Kolobrzeg	2026-10-26 23:39:41 UTC · (2 weeks ago)	Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense count: 2. Last seen 2026-10-26 23:39 UTC, first seen 2026-10-05 UTC. Automated detection. Follow-up: attacks continued after our previous report (1 earli ... show more Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense count: 2. Last seen 2026-10-26 23:39 UTC, first seen 2026-10-05 UTC. Automated detection. Follow-up: attacks continued after our previous report (1 earlier, latest 2026-10-05 17:06 UTC). AS138953 Top Network. show less	Brute-Force
🇨🇭 Origon	2026-10-16 19:00:23 UTC · (3 weeks ago)	NOQUEUE - IP: 103.137.160.113 - Oct 16 21:00:23 plesk postfix/smtpd[3768666]: NOQUEUE: reject: RCPT from unknown[103.137.160.113]: 554 5.7.1 Service unavailable; Client host [103.137.160.113] blocked using dnsbl-1.uceprotect.net; IP 103.137.160.113 ... show more NOQUEUE - IP: 103.137.160.113 - Oct 16 21:00:23 plesk postfix/smtpd[3768666]: NOQUEUE: reject: RCPT from unknown[103.137.160.113]: 554 5.7.1 Service unavailable; Client host [103.137.160.113] blocked using dnsbl-1.uceprotect.net; IP 103.137.160.113 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=103.137.160.113; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<103.137.160.113> show less	Email Spam
🇵🇱 Kolobrzeg	2026-10-05 17:05:54 UTC · (1 month ago)	MikroTik RouterOS: single unauthorized login attempt (user 'dircreate') at 2026-10-05 17:05 UTC. Part of a distributed credential-stuffing campaign: 14 distinct source IPs attempted the same username against our infrastructure within the same hour. A ... show more MikroTik RouterOS: single unauthorized login attempt (user 'dircreate') at 2026-10-05 17:05 UTC. Part of a distributed credential-stuffing campaign: 14 distinct source IPs attempted the same username against our infrastructure within the same hour. Automated detection. AS138953 Top Network. show less	Brute-Force
🇺🇸 TPI-Abuse	2026-09-28 18:41:10 UTC · (1 month ago)	(mod_security) mod_security (id:210350) triggered by 103.137.160.113 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:41:06.439417 2026] [security2:error] [pid 997:tid 997] [client 103.137.160.113:38816] M ... show more (mod_security) mod_security (id:210350) triggered by 103.137.160.113 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:41:06.439417 2026] [security2:error] [pid 997:tid 997] [client 103.137.160.113:38816] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|arellasoc.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arellasoc.com"] [uri "/"] [unique_id "arq0wu9UxQrxuDRusTq2_gAAAAI"], referer: https://freesiteseochecker.store/dir/professional-link-building-12406 show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-25 02:28:51 UTC · (1 month ago)	denied traffic to a non-approved destination port. destination port 4225.	Port Scan
🇺🇸 TPI-Abuse	2026-09-22 04:30:40 UTC · (1 month ago)	(mod_security) mod_security (id:210350) triggered by 103.137.160.113 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:30:33.015651 2026] [security2:error] [pid 18068:tid 18068] [client 103.137.160.113:3984 ... show more (mod_security) mod_security (id:210350) triggered by 103.137.160.113 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:30:33.015651 2026] [security2:error] [pid 18068:tid 18068] [client 103.137.160.113:39842] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|opennatura.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "opennatura.com"] [uri "/"] [unique_id "arIEaZZPCvQJi0gHpREOBgAAAAs"], referer: https://mtbaventuraydiversion.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-21 06:15:27 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-09-17 19:00:39 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36	Bad Web Bot
🇮🇳 Mr.Singh	2026-09-09 12:30:02 UTC · (2 months ago)	NFT blocked 103.137.160.113 on 09-Sep-2026..	Port Scan Brute-Force
Anonymous	2026-09-08 04:43:12 UTC · (2 months ago)	denied traffic to a honeypot network. destination port 23641.	Port Scan Hacking
🇳🇱 maxxsense	2026-08-28 10:06:25 UTC · (2 months ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 103.137.160.113 (BD/Bangladesh/-)	Hacking
🇵🇱 UMP-PL	2026-08-28 07:04:58 UTC · (2 months ago)	SMTP bruteforce	Brute-Force

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 194.187.176.14

🇬🇧 35.203.210.245

🇵🇦 194.165.16.123

🇳🇱 193.47.62.99

🇷🇺 94.243.14.241

🇳🇱 77.239.124.41

🇨🇴 38.210.184.147

🇸🇬 34.21.241.247

🇻🇳 14.191.201.165

🇳🇱 193.47.62.98

🇫🇮 185.68.152.205

🇭🇰 165.154.41.6

🇺🇸 108.253.61.51

🇫🇮 104.28.157.8

🇷🇺 82.147.84.247

🇨🇳 59.45.17.50

🇳🇱 45.74.28.126

🇶🇦 34.18.220.131

🇬🇧 5.252.83.5

🇩🇪 2a00:20:1018:7b7d:d179:728a:a66e:c4b8