JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.140.205.178

103.140.205.178 was found in our database!

This IP was reported 95 times. Confidence of Abuse is 29%: ?

29%

ISP	Novus Network
Usage Type	Fixed Line ISP
ASN	AS139282
Domain Name	novusnetworkbd.com
Country	🇧🇩 Bangladesh
City	Hajiganj, Chittagong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.140.205.178

Whois 103.140.205.178

IP Abuse Reports for 103.140.205.178:

This IP address has been reported a total of 95 times from 40 distinct sources. 103.140.205.178 was first reported on July 26th 2021, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-25 23:24:06 (6 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-07-25 06:35:26 (6 days ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇫🇷 bigorre.org	2026-07-23 15:46:28 (1 week ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 gui-ying233	2026-07-14 00:07:06 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-11 05:14:07 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-07-09 15:02:16 (3 weeks ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 kosada.com	2026-06-29 05:59:10 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 mypatricks	2026-06-20 18:24:33 (1 month ago)	103.140.205.178 \| Port: 14167 \| DNS: 103.140.205.178 2026-06-21T02:24:32+08:00 Asia/Dhaka \| Fake HTT ... show more 103.140.205.178 \| Port: 14167 \| DNS: 103.140.205.178 2026-06-21T02:24:32+08:00 Asia/Dhaka \| Fake HTTP Protocol detected! \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: / \| Ref: - \| Country: BD/Bangladesh/+06:00 IP City: Hājīganj Windows a0eccf9afe74bb2f-DAC/Dhaka, Bangladesh 1 hits/0 secs Robots 0 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇦🇺 FireGuard Server	2026-06-12 04:35:10 (1 month ago)	Blocked by OPNsense firewall; 5 hits, proto=tcp, ports=443	Port Scan Hacking
🇮🇩 hermawan	2026-06-05 10:34:23 (1 month ago)	[Fri Jun 05 17:34:22.713765 2026] [security2:error] [pid 933354:tid 140021513254592] [client 103.140 ... show more [Fri Jun 05 17:34:22.713765 2026] [security2:error] [pid 933354:tid 140021513254592] [client 103.140.205.178:33332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin"] [unique_id "aiKmLtj0y3bURRj7msUubAABEA8"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[933370] [KoIuNP/8ZWY] [aiKmLtj0y3bURRj7msUubAABEA8] keep_alive=[1] [2026-06-05 17:34:22.713770] [R:aiKmLtj0y3bURRj7msUubAABEA8] ... show less	Email Spam Hacking
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇺🇸 TPI-Abuse	2026-05-23 00:05:00 (2 months ago)	(mod_security) mod_security (id:210381) triggered by 103.140.205.178 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210381) triggered by 103.140.205.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 20:04:55.489620 2026] [security2:error] [pid 11402:tid 11416] [client 103.140.205.178:37190] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.mentzlaw.com\|F\|4"] [data "REQUEST_URI=/louisianaweldingrodlawyer/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mentzlaw.com"] [uri "/louisianaweldingrodlawyer/%url%"] [unique_id "ahDvJxKFifu2_31HK74E7gAAAEs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-05-21 06:51:55 (2 months ago)	Web App Attack	Web App Attack
🇳🇱 trivox.sh	2026-05-14 14:49:06 (2 months ago)	2026-05-14T14:27:34.803550+00:00 ws1.trivox.sh sshd-session[1774663]: banner exchange: Connection fr ... show more 2026-05-14T14:27:34.803550+00:00 ws1.trivox.sh sshd-session[1774663]: banner exchange: Connection from 103.140.205.178 port 40924: invalid format 2026-05-14T14:35:08.096420+00:00 ws1.trivox.sh sshd-session[1787850]: banner exchange: Connection from 103.140.205.178 port 32930: invalid format 2026-05-14T14:36:41.056762+00:00 ws1.trivox.sh sshd-session[1791439]: banner exchange: Connection from 103.140.205.178 port 36718: invalid format 2026-05-14T14:38:15.702293+00:00 ws1.trivox.sh sshd-session[1794951]: banner exchange: Connection from 103.140.205.178 port 58918: invalid format ... show less	Brute-Force SSH
🇬🇧 PeravixGroup	2026-05-09 03:10:03 (2 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force

Showing 1 to 15 of 95 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 190.129.122.185

🇵🇦 190.34.240.197

🇵🇰 175.107.32.186

🇭🇰 154.221.20.92

🇮🇳 49.36.144.16

🇮🇹 31.59.89.180

🇳🇱 213.176.26.29

🇳🇱 192.42.116.101

🇦🇷 190.247.116.191

🇭🇰 154.221.17.42

🇳🇱 45.148.10.183

🇨🇦 20.104.18.253

🇵🇭 2001:4451:82af:1a00:1cb6:8158:2a1d:42eb

🇬🇧 213.166.84.56

🇳🇱 206.189.97.142

🇺🇸 154.219.125.194

🇭🇰 154.219.113.15

🇰🇷 119.200.229.33

🇺🇸 104.207.46.190

🇮🇳 103.137.48.26