JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.80.3.19

103.80.3.19 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 47%: ?

47%

ISP	Md. Soman t/a SS Online
Usage Type	Fixed Line ISP
ASN	AS136014
Domain Name	ssonline.com.bd
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.80.3.19

Whois 103.80.3.19

IP Abuse Reports for 103.80.3.19:

This IP address has been reported a total of 60 times from 26 distinct sources. 103.80.3.19 was first reported on September 30th 2024, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-26 20:31:14 (14 hours ago)	(mod_security) mod_security (id:210350) triggered by 103.80.3.19 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 103.80.3.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 16:31:11.163792 2026] [security2:error] [pid 24489:tid 24489] [client 103.80.3.19:44244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|schonuniverse.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "schonuniverse.com"] [uri "/"] [unique_id "at-4j2nP6ceCr_oNNYqqGAAAAAw"], referer: https://nealschon.global/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-10-25 04:19:03 (2 days ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇺🇸 TPI-Abuse	2026-10-23 16:37:39 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 103.80.3.19 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 103.80.3.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 12:37:34.158371 2026] [security2:error] [pid 5164:tid 5164] [client 103.80.3.19:43298] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cbcfargo.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "atuNTrW15OaQ3bczrZL1twAAAAc"], referer: https://cbcfargo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-23 15:33:08 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 103.80.3.19 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 103.80.3.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 11:33:05.173265 2026] [security2:error] [pid 7258:tid 7258] [client 103.80.3.19:47476] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.miranda-race-walks.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.miranda-race-walks.com"] [uri "/Pages/mail to:[email protected]"] [unique_id "att-MVuSST9op_MJkN0b5AAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-10-20 14:05:08 (6 days ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=43&topics%5B4%5D=34&topics%5B5%5D=35&topics%5B6%5D=39 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0") show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-13 14:13:30 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.80.3.19 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 103.80.3.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 10:13:23.175873 2026] [security2:error] [pid 23067:tid 23067] [client 103.80.3.19:43492] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|customhumanrobots.internetnameregistration.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "customhumanrobots.internetnameregistration.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as48g2N9i5GbJKECET7-5QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-10-11 11:41:05 (2 weeks ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇩🇪 jbcrn	2026-10-11 01:27:21 (2 weeks ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /blog/deflagration.xyloquinone-sinapine/fasher/hemoid-before/amphicarpium/prefator/ponder/chasing/ahum/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-10-08 14:06:46 (2 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=79&topics%5B3%5D=31&topics%5B4%5D=43&topics%5B5%5D=59 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:144.0) Gecko/20100101 Firefox/144.0") show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-30 15:25:01 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 103.80.3.19 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 103.80.3.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 11:24:55.810868 2026] [security2:error] [pid 25610:tid 25814] [client 103.80.3.19:57416] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|coloradospringsmohs.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "coloradospringsmohs.com"] [uri "/"] [unique_id "ar0px612ilDlav3IcOvVlAAAAEk"], referer: https://buildingbacklinks.site/dir/natural-link-building-services-43191 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2026-09-28 00:20:32 (4 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 103.80.3.19 2026-09-27T22:42:26+02:00 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 103.80.3.19 2026-09-27T22:42:26+02:00 vpn Access-Reject 'xkunl03' station: 103.80.3.19 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 鬼影233	2026-09-27 11:54:28 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-27 08:55:55 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 jbcrn	2026-09-25 04:32:58 (1 month ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /blog/deflagration.pyruvate-yaw/imprimitive-frettation/ungreat/triquetral-bursarial/manege/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-09-24 15:57:09 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.211.233

🇺🇸 129.121.136.201

🇮🇩 125.162.166.62

🇰🇷 121.184.128.107

🇨🇳 111.207.12.99

🇰🇿 89.218.69.66

🇷🇺 85.174.196.129

🇳🇱 45.148.10.12

🇬🇧 35.203.211.76

🇯🇵 216.226.78.20

🇺🇸 199.165.159.86

🇮🇷 171.22.25.214

🇧🇼 168.167.228.85

🇺🇸 129.121.123.80

🇰🇷 121.142.87.218

🇮🇳 103.237.58.80

🇮🇳 103.30.80.54

🇳🇱 86.38.187.133

🇵🇹 82.155.113.151

🇩🇪 80.91.223.120