JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.159.155.85

103.159.155.85

Neutral Activity

23 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

ELXIRE

Usage Type

Fixed Line ISP

ASN

AS153252

Domain Name

rgcommunications.in

Country

🇮🇳 India

City

Kushinagar, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.159.155.85 has been reported 23 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.159.155.85:

This IP address has been reported a total of 23 times from 13 distinct sources. 103.159.155.85 was first reported on June 13th 2022, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 schedules.run	2025-10-02 09:05:35 (11 months ago)		Web Spam
🇺🇸 TPI-Abuse	2025-09-22 18:35:59 (11 months ago)	(mod_security) mod_security (id:225170) triggered by 103.159.155.85 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.159.155.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 14:35:55.746586 2025] [security2:error] [pid 13407:tid 13407] [client 103.159.155.85:44547] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNGXC5KxTeYyyYIyvNwm8AAAAAw"], referer: https://jolankagroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-09-10 19:11:09 (1 year ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 nowyouknow	2025-08-26 15:49:21 (1 year ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-08-21 07:27:33 (1 year ago)	(From [email protected])	Phishing Web Spam
🇷🇴 StarTech Team	2025-07-06 20:28:59 (1 year ago)	Bruteforce Attempt	Brute-Force
🇦🇺 AWW-Admin	2025-07-03 12:04:39 (1 year ago)	(smtpauth) Failed SMTP AUTH login from 103.159.155.85 (IN/India/-)	Brute-Force
🇺🇸 nowyouknow	2025-06-14 06:35:38 (1 year ago)	(From [email protected])	Phishing Web Spam
🇨🇳 ThreatBook.io	2025-05-02 01:31:04 (1 year ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/103.159.155.85	Brute-Force
🇺🇸 TPI-Abuse	2025-05-01 19:56:34 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 103.159.155.85 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.159.155.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 01 15:56:26.217152 2025] [security2:error] [pid 1035991:tid 1035991] [client 103.159.155.85:33076] [client 103.159.155.85] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|neconebooks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "neconebooks.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBPR6rUS6cKJVist1Vbm0AAAAAg"], referer: https://neconebooks.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 unhfree.net	2025-04-29 09:36:22 (1 year ago)	Apr 29 09:11:47 canopus postfix/smtpd[1872309]: too many errors after RCPT from unknown[103.159.155. ... show more Apr 29 09:11:47 canopus postfix/smtpd[1872309]: too many errors after RCPT from unknown[103.159.155.85] Apr 29 09:49:29 canopus postfix/smtpd[1872487]: NOQUEUE: reject: RCPT from unknown[103.159.155.85]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 29 09:49:29 canopus postfix/smtpd[1872487]: too many errors after RCPT from unknown[103.159.155.85] Apr 29 11:36:21 canopus postfix/smtpd[1895291]: NOQUEUE: reject: RCPT from unknown[103.159.155.85]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 29 11:36:21 canopus postfix/smtpd[1895291]: too many errors after RCPT from unknown[103.159.155.85] ... show less	Brute-Force Exploited Host
🇺🇸 nowyouknow	2025-04-19 23:14:09 (1 year ago)	(From [email protected])	Phishing Web Spam
🇨🇿 unhfree.net	2025-03-24 23:19:21 (1 year ago)	Mar 24 22:52:53 canopus postfix/smtpd[2444018]: NOQUEUE: reject: RCPT from unknown[103.159.155.85]: ... show more Mar 24 22:52:53 canopus postfix/smtpd[2444018]: NOQUEUE: reject: RCPT from unknown[103.159.155.85]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 24 22:52:53 canopus postfix/smtpd[2444018]: NOQUEUE: reject: RCPT from unknown[103.159.155.85]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 24 22:52:53 canopus postfix/smtpd[2444018]: NOQUEUE: reject: RCPT from unknown[103.159.155.85]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 24 22:52:53 canopus postfix/smtpd[2444018]: NOQUEUE: reject: RCPT from unknown[103.159.155.85]: 554 5. ... show less	Brute-Force Exploited Host
🇺🇸 TPI-Abuse	2025-03-21 03:46:28 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 103.159.155.85 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.159.155.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 20 23:46:25.398076 2025] [security2:error] [pid 32383:tid 32383] [client 103.159.155.85:47428] [client 103.159.155.85] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|staben.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z9zhEeiqWPt2LgjEKg8F0QAAAA4"], referer: https://staben.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 unhfree.net	2025-03-17 00:21:08 (1 year ago)	Mar 17 00:19:49 canopus postfix/smtpd[1543330]: 4B340DC02BE: reject: RCPT from unknown[103.159.155.8 ... show more Mar 17 00:19:49 canopus postfix/smtpd[1543330]: 4B340DC02BE: reject: RCPT from unknown[103.159.155.85]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 17 00:19:49 canopus postfix/smtpd[1543330]: too many errors after RCPT from unknown[103.159.155.85] Mar 17 00:46:18 canopus postfix/smtpd[1543225]: NOQUEUE: reject: RCPT from unknown[103.159.155.85]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 17 00:46:18 canopus postfix/smtpd[1543225]: too many errors after RCPT from unknown[103.159.155.85] Mar 17 01:21:08 canopus postfix/smtpd[1555569]: NOQUEUE: reject: RCPT from unknown[103.159.155.85]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages ... show less	Brute-Force Exploited Host

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 119.45.42.34

🇧🇬 79.124.62.134

🇬🇧 31.171.130.56

🇳🇱 193.176.31.207

🇨🇱 191.116.14.138

🇫🇮 147.185.133.227

🇺🇸 147.185.132.180

🇺🇸 137.184.179.158

🇺🇸 67.205.160.204

🇱🇺 64.89.161.90

🇬🇧 51.89.129.146

🇳🇱 45.148.10.157

🇨🇮 160.154.41.184

🇫🇷 85.217.140.4

🇸🇬 84.75.155.132

🇬🇧 35.203.211.27

🇯🇵 34.97.204.216

🇷🇺 31.173.2.33

🇭🇰 199.45.154.181

🇩🇪 194.88.98.104