JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.242.199.192

103.242.199.192 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 20%: ?

20%

ISP	Alliance Broadband Services Pvt. Ltd.
Usage Type	Fixed Line ISP
ASN	AS23860
Hostname(s)	node-103-242-199-192.alliancebroadband.in
Domain Name	alliancekolkata.com
Country	🇮🇳 India
City	Kolkata, West Bengal

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.242.199.192

Whois 103.242.199.192

IP Abuse Reports for 103.242.199.192:

This IP address has been reported a total of 147 times from 93 distinct sources. 103.242.199.192 was first reported on April 8th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-05 10:57:59 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.242.199.192 (node-103-242-199-192.allianceb ... show more (mod_security) mod_security (id:240335) triggered by 103.242.199.192 (node-103-242-199-192.alliancebroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 06:57:53.227756 2026] [security2:error] [pid 6393:tid 6393] [client 103.242.199.192:60612] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.242.199.192 (+1 hits since last alert)\|techsunlimited.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "techsunlimited.net"] [uri "/xmlrpc.php"] [unique_id "aiKrsQw0-0rr2xCa1J82AgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-06-05 10:56:13 (1 week ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 01:51:33 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.242.199.192 (node-103-242-199-192.allianceb ... show more (mod_security) mod_security (id:240335) triggered by 103.242.199.192 (node-103-242-199-192.alliancebroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 21:51:25.071774 2026] [security2:error] [pid 26252:tid 26252] [client 103.242.199.192:56622] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.242.199.192 (+1 hits since last alert)\|tomartsmedia.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tomartsmedia.org"] [uri "/xmlrpc.php"] [unique_id "aiIrnZ6r1YsRlRTZHGdEPAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-05 00:16:00 (1 week ago)	[redacted] 103.242.199.192 - - [05/Jun/2026:02:15:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ... show more [redacted] 103.242.199.192 - - [05/Jun/2026:02:15:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 103.242.199.192 - - [05/Jun/2026:02:15:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.2; http://site95442265.com" [redacted] 103.242.199.192 - - [05/Jun/2026:02:15:37 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.3; http://site36440782.com" [redacted] 103.242.199.192 - - [05/Jun/2026:02:15:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 103.242.199.192 - - [05/Jun/2026:02:15:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇮🇹 VHosting	2025-12-24 06:13:10 (5 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇯🇵 zwh	2024-05-09 22:00:13 (2 years ago)	SSH Brute-Force	Brute-Force SSH
🇩🇪 V	2024-05-09 07:03:52 (2 years ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2024-05-09T07:03:52Z	Brute-Force SSH
🇵🇱 axiomofchoice.xyz	2024-05-09 05:48:30 (2 years ago)	endlessh trap: attempts=1 total_time_stuck=540.533s	Port Scan Hacking SSH
🇵🇱 axiomofchoice.xyz	2024-05-09 05:48:30 (2 years ago)	endlessh trap: attempts=1 total_time_stuck=540.533s	Port Scan Hacking SSH
🇵🇱 axiomofchoice.xyz	2024-05-09 05:48:30 (2 years ago)	endlessh trap: attempts=1 total_time_stuck=540.533s	Port Scan Hacking SSH
Anonymous	2024-05-09 05:45:27 (2 years ago)	May 9 05:40:34 syslog-dus sshd[2136099]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more May 9 05:40:34 syslog-dus sshd[2136099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.242.199.192 May 9 05:40:37 syslog-dus sshd[2136099]: Failed password for invalid user test1 from 103.242.199.192 port 51288 ssh2 May 9 05:45:27 syslog-dus sshd[2136437]: Invalid user ftpadmin from 103.242.199.192 port 37952 ... show less	Brute-Force SSH
🇩🇪 blackpanther	2024-05-09 05:43:28 (2 years ago)	2024-05-09T07:43:27.607880+02:00 sshd[1251336]: Invalid user test1 from 103.242.199.192 port 40938 ... show more 2024-05-09T07:43:27.607880+02:00 sshd[1251336]: Invalid user test1 from 103.242.199.192 port 40938 2024-05-09T07:43:27.789317+02:00 sshd[1251336]: Disconnected from invalid user test1 103.242.199.192 port 40938 [preauth] show less	Brute-Force SSH
🇳🇱 mythicalkitten	2024-05-09 05:22:45 (2 years ago)	May 9 05:05:36 mk-bgp sshd[2887390]: Invalid user work from 103.242.199.192 port 52670 May 9 05:17 ... show more May 9 05:05:36 mk-bgp sshd[2887390]: Invalid user work from 103.242.199.192 port 52670 May 9 05:17:02 mk-bgp sshd[2890503]: Invalid user cu from 103.242.199.192 port 31843 May 9 05:18:10 mk-bgp sshd[2890835]: Invalid user user from 103.242.199.192 port 32600 May 9 05:20:28 mk-bgp sshd[2891477]: Invalid user ubuntu from 103.242.199.192 port 38744 May 9 05:22:45 mk-bgp sshd[2892086]: Invalid user songzhu from 103.242.199.192 port 35906 ... show less	Hacking Brute-Force
🇩🇪 Aaron Hirsch	2024-05-09 05:11:16 (2 years ago)	2024-05-09T07:05:30.966731+02:00 tuz sshd[278321]: Invalid user work from 103.242.199.192 port 24132 ... show more 2024-05-09T07:05:30.966731+02:00 tuz sshd[278321]: Invalid user work from 103.242.199.192 port 24132 2024-05-09T07:06:42.039442+02:00 tuz sshd[278372]: Invalid user frappe from 103.242.199.192 port 44228 2024-05-09T07:07:52.213262+02:00 tuz sshd[278432]: Invalid user elasticuser from 103.242.199.192 port 25276 2024-05-09T07:10:08.706614+02:00 tuz sshd[278877]: Invalid user sahar from 103.242.199.192 port 49694 2024-05-09T07:11:15.472202+02:00 tuz sshd[279045]: Invalid user user3 from 103.242.199.192 port 42108 ... show less	Brute-Force
🇩🇪 SnowBerryZ	2024-05-09 05:04:45 (2 years ago)	Rejected on AME-106	Brute-Force SSH

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a00:c380:c102:ec02:9999::243

🇰🇷 222.239.251.12

🇩🇪 159.26.104.43

🇻🇳 123.20.229.94

🇭🇰 103.52.153.215

🇺🇸 67.227.108.80

🇳🇱 45.148.10.152

🇪🇬 41.33.91.226

🇩🇪 213.209.159.56

🇺🇸 209.190.14.82

🇻🇳 125.212.244.35

🇬🇧 104.143.226.130

🇳🇱 85.11.167.46

🇹🇭 62.105.204.92

🇮🇩 34.128.117.203

🇻🇳 27.78.35.35

🇺🇸 199.195.254.215

🇧🇷 189.41.4.173

🇺🇸 162.216.149.196

🇬🇧 159.253.60.40