JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.42.199.126

103.42.199.126 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 18%: ?

18%

ISP	Kerala Vision Broad Band Private Limited
Usage Type	Fixed Line ISP
ASN	AS138754
Hostname(s)	keralavisionisp-dynamic-126.199.42.103.keralavisionisp.com
Domain Name	keralavisionisp.com
Country	🇮🇳 India
City	Thiruvananthapuram, Kerala

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.42.199.126

Whois 103.42.199.126

IP Abuse Reports for 103.42.199.126:

This IP address has been reported a total of 8 times from 4 distinct sources. 103.42.199.126 was first reported on January 13th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-07-23 06:24:03 (2 days ago)	cloudlinux2 fail2ban: 2026-07-23 08:18:46,336 fail2ban.filter [1589]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-23 08:18:46,336 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 103.42.199.126 - 2026-07-23 08:18:46cloudlinux2 fail2ban: 2026-07-23 08:20:10,420 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 103.42.199.126 - 2026-07-23 08:20:10cloudlinux2 fail2ban: 2026-07-23 08:20:53,259 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 103.42.199.126 - 2026-07-23 08:20:53cloudlinux2 fail2ban: 2026-07-23 08:20:53,326 fail2ban.actions [1589]: NOTICE [plesk-modsecurity] Ban 103.42.199.126cloudlinux2 fail2ban: 2026-07-23 08:20:53,334 fail2ban.filter [1589]: INFO [recidive] Found 103.42.199.126 - 2026-07-23 08:20:53cloudlinux2 fail2ban: 2026-07-23 08:21:28,373 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 179.6.6.35 - 2026-07-23 08:21:28cloudlinux2 fail2ban: 2026-07-23 08:23:01,489 fail2ban.actions [1589]: NOTICE [plesk-modsecurity] Unban 103.109.223.22cloudlinux2 fail2ban: 2026-07-23 08:23:33,505 f show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 06:19:08 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.42.199.126 (keralavisionisp-dynamic-126.199 ... show more (mod_security) mod_security (id:240335) triggered by 103.42.199.126 (keralavisionisp-dynamic-126.199.42.103.keralavisionisp.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 02:19:01.330148 2026] [security2:error] [pid 2561833:tid 2561867] [client 103.42.199.126:32787] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.42.199.126 (+1 hits since last alert)\|chelseyrae.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "chelseyrae.com"] [uri "/xmlrpc.php"] [unique_id "amGyVRIp_K5kWET2eXIxWwAAAUA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 synthient	2026-07-17 08:21:52 (1 week ago)	Earnify Botnet DDoS Attack July 17th. IOCs: https://github.com/deepfield/public-research/tree/main/m ... show more Earnify Botnet DDoS Attack July 17th. IOCs: https://github.com/deepfield/public-research/tree/main/maskify show less	Brute-Force DDoS Attack
🇩🇪 Nerdscave Hosting	2025-01-13 06:18:25 (1 year ago)	[SMB Honeypot Report] Timestamp: 2025-01-13 06:18:25 UTC Port: 25959 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2025-01-13 06:18:25 UTC Port: 25959 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Port Scan Hacking Brute-Force
🇩🇪 Nerdscave Hosting	2025-01-13 05:43:08 (1 year ago)	[SMB Honeypot Report] Timestamp: 2025-01-13 05:43:08 UTC Port: 25437 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2025-01-13 05:43:08 UTC Port: 25437 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Port Scan Hacking Brute-Force
🇩🇪 Nerdscave Hosting	2025-01-13 05:10:44 (1 year ago)	[SMB Honeypot Report] Timestamp: 2025-01-13 05:10:44 UTC Port: 25397 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2025-01-13 05:10:44 UTC Port: 25397 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Port Scan Hacking Brute-Force
🇩🇪 Nerdscave Hosting	2025-01-13 04:33:39 (1 year ago)	[SMB Honeypot Report] Timestamp: 2025-01-13 04:33:39 UTC Port: 25307 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2025-01-13 04:33:39 UTC Port: 25307 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Port Scan Hacking Brute-Force
🇩🇪 Nerdscave Hosting	2025-01-13 04:03:35 (1 year ago)	[SMB Honeypot Report] Timestamp: 2025-01-13 04:03:35 UTC Port: 25781 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2025-01-13 04:03:35 UTC Port: 25781 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Port Scan Hacking Brute-Force

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.93.89.72

🇫🇮 147.185.133.16

🇻🇳 103.90.227.203

🇺🇸 52.36.131.235

🇩🇪 49.51.141.174

🇨🇳 36.104.147.6

🇮🇩 36.66.16.233

🇯🇵 2402:6b00:e138:4900:a998:a2db:e01:44dd

🇩🇪 213.209.159.236

🇺🇸 205.210.31.111

🇳🇱 193.176.31.206

🇲🇽 187.133.180.151

🇺🇸 162.217.100.201

🇺🇸 162.216.149.45

🇺🇸 154.36.230.214

🇮🇳 122.166.49.42

🇬🇧 35.203.211.202

🇺🇸 199.195.254.215

🇧🇷 191.193.162.238

🇦🇷 190.183.194.163