JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.106.165.42

103.106.165.42 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 55%: ?

55%

ISP	U.B Online
Usage Type	Commercial
ASN	AS137274
Domain Name	ubonlinebd.com
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.106.165.42

Whois 103.106.165.42

IP Abuse Reports for 103.106.165.42:

This IP address has been reported a total of 39 times from 21 distinct sources. 103.106.165.42 was first reported on November 10th 2025, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 WeekendWeb	2026-07-19 11:08:40 (18 hours ago)	Wordpress Vunerability attack	Web App Attack
🇩🇪 ghostwarriors	2026-07-16 22:20:52 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-15 11:20:25 (4 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-15 10:56:17 (4 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 07:35:00 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 103.106.165.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.106.165.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 03:34:54.192822 2026] [security2:error] [pid 5814:tid 5814] [client 103.106.165.42:61876] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.106.165.42 (+1 hits since last alert)\|visionremota.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "visionremota.info"] [uri "/xmlrpc.php"] [unique_id "alSVHlJwrCvERz1LHeQSWAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-09 06:14:26 (1 week ago)	[redacted] 103.106.165.42 - - [09/Jul/2026:08:13:42 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 103.106.165.42 - - [09/Jul/2026:08:13:42 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" [redacted] 103.106.165.42 - - [09/Jul/2026:08:13:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 103.106.165.42 - - [09/Jul/2026:08:14:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 103.106.165.42 - - [09/Jul/2026:08:14:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 103.106.165.42 - - [09/Jul/2026:08:14:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-07-07 09:12:01 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 10:47:38 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.106.165.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.106.165.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:47:33.325277 2026] [security2:error] [pid 26611:tid 26611] [client 103.106.165.42:62379] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.106.165.42 (+1 hits since last alert)\|casaluzislamujeres.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "casaluzislamujeres.com"] [uri "/xmlrpc.php"] [unique_id "akuHxV1ASUJwDAHlUC6viAAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-05 14:44:54 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-04 07:49:05 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.106.165.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.106.165.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 03:48:58.622346 2026] [security2:error] [pid 27810:tid 27810] [client 103.106.165.42:60930] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.106.165.42 (+1 hits since last alert)\|mavikalem.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mavikalem.org"] [uri "/xmlrpc.php"] [unique_id "aki66jqnAwevuqlO6SHQ_wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-02 07:16:34 (2 weeks ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-06-30 06:27:28 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.106.165.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.106.165.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 02:27:23.932721 2026] [security2:error] [pid 32374:tid 32374] [client 103.106.165.42:52048] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.106.165.42 (+1 hits since last alert)\|kidswow.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kidswow.com"] [uri "/xmlrpc.php"] [unique_id "akNhyyWcss2rN4rMNUhfMwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-25 08:00:33 (3 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-06-25 05:35:22 (3 weeks ago)	[redacted] 103.106.165.42 - - [25/Jun/2026:07:34:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 103.106.165.42 - - [25/Jun/2026:07:34:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 103.106.165.42 - - [25/Jun/2026:07:34:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 103.106.165.42 - - [25/Jun/2026:07:35:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 103.106.165.42 - - [25/Jun/2026:07:35:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" [redacted] 103.106.165.42 - - [25/Jun/2026:07:35:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇪🇸 masterguru	2026-06-20 12:49:31 (4 weeks ago)	(xmlrpc) Failed xmlrpc access from 103.106.165.42 (BD/Bangladesh/-): 5 in the last 3600 secs (0-122)	Hacking

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.41

🇩🇪 195.230.103.249

🇳🇱 195.178.110.30

🇭🇰 162.211.183.224

🇨🇳 115.212.182.149

🇰🇷 115.68.226.19

🇯🇵 107.155.15.218

🇳🇱 85.11.167.7

🇺🇸 74.207.253.22

🇩🇪 69.5.169.77

🇺🇸 8.234.163.129

🇺🇸 205.210.31.92

🇧🇷 201.17.133.138

🇭🇰 199.45.154.149

🇮🇳 103.182.167.51

🇳🇬 102.88.137.145

🇫🇷 82.38.129.16

🇸🇬 68.178.165.65

🇨🇳 61.153.240.190

🇧🇷 20.206.105.145