JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.166.59.157

103.166.59.157 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 40%: ?

40%

ISP	Romance Cable Network
Usage Type	Fixed Line ISP
ASN	AS137213
Domain Name	rcnbd.net
Country	🇧🇩 Bangladesh
City	Jessore, Khulna Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.166.59.157

Whois 103.166.59.157

IP Abuse Reports for 103.166.59.157:

This IP address has been reported a total of 30 times from 19 distinct sources. 103.166.59.157 was first reported on August 2nd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-09-17 12:29:13 (2 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /sitemap.xml \| 2026-09-17 12:29 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-16 20:12:34 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 103.166.59.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 103.166.59.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 16:12:30.673598 2026] [security2:error] [pid 24329:tid 24329] [client 103.166.59.157:54760] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|urlpick.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "urlpick.com"] [uri "/"] [unique_id "aqr4LkD4FT3ifui5frXeAAAAAAQ"], referer: https://bulkdaandpachecker.website/dir/natural-seo-backlinks-222434 show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-09-16 11:08:51 (3 days ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 gui-ying233	2026-09-07 05:26:17 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-31 17:08:20 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 15:26:09 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-23 09:00:26 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-20 16:23:25 (4 weeks ago)	DDoS flood attack against 82.152.54.0 (2026-08-20 16:18:25 -> 2026-08-20 16:33:25 UTC) targeting AS2 ... show more DDoS flood attack against 82.152.54.0 (2026-08-20 16:18:25 -> 2026-08-20 16:33:25 UTC) targeting AS215599. This IP (AS137213) sent ~9893 packets (14.06 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇩🇪 Vegascosmetics	2026-08-14 11:25:34 (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): IP auto-blocked. Evidence: BlockedIPs list	Hacking Web App Attack
🇩🇪 Vegascosmetics	2026-07-21 16:28:26 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding / deep attack. Vegas ... show more (Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding / deep attack. Vegas Security show less	DDoS Attack Hacking Exploited Host
🇩🇪 EGP Abuse Dept	2026-07-14 01:54:44 (2 months ago)	Scanning for port/service exploits on tpc-036.mach3builders.nl	Port Scan Hacking
🇸🇬 mypatricks	2026-06-24 05:30:10 (2 months ago)	103.166.59.157 \| Port: 9809 \| DNS: 103.166.59.157 2026-06-24T13:30:09+08:00 Asia/Dhaka \| Fake HTTP P ... show more 103.166.59.157 \| Port: 9809 \| DNS: 103.166.59.157 2026-06-24T13:30:09+08:00 Asia/Dhaka \| Fake HTTP Protocol detected! \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: / \| Ref: - \| Country: BD/Bangladesh/+06:00 IP City: Jessore Windows a10956c0edec48ff-DAC/Dhaka, Bangladesh 1 hits/0 secs Robots 0 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇩🇪 milcraft.nl	2026-05-16 16:40:32 (4 months ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇮🇹 A000Z	2026-04-15 05:13:58 (5 months ago)	Fail2Ban: 103.166.59.157 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 103.166.59.157 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 show less	Bad Web Bot
🇨🇭 backslash	2026-04-02 00:42:06 (5 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.62.22.127

🇺🇸 99.115.38.74

🇳🇱 195.178.110.228

🇭🇰 168.76.20.229

🇺🇸 147.124.211.133

🇹🇼 123.58.205.100

🇭🇰 118.26.36.161

🇺🇸 108.61.218.246

🇳🇱 103.74.133.47

🇺🇸 96.78.177.249

🇳🇴 81.166.242.212

🇺🇸 40.27.111.137

🇩🇪 213.209.159.154

🇺🇸 143.42.1.71

🇵🇱 95.214.53.196

🇫🇷 91.231.89.155

🇱🇹 88.135.24.132

🇩🇪 45.135.193.63

🇺🇸 35.146.243.26

🇨🇳 8.152.169.47