JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.189.134.220

103.189.134.220 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 18%: ?

18%

ISP	CLASSIC COMMUNICATION
Usage Type	Fixed Line ISP
ASN	AS141329
Domain Name	classic-communication.eu
Country	🇮🇳 India
City	Pangala, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.189.134.220

Whois 103.189.134.220

IP Abuse Reports for 103.189.134.220:

This IP address has been reported a total of 15 times from 11 distinct sources. 103.189.134.220 was first reported on September 1st 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-26 03:35:17 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.189.134.220 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.189.134.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 23:35:12.792415 2026] [security2:error] [pid 10041:tid 10041] [client 103.189.134.220:54696] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.189.134.220 (+1 hits since last alert)\|thepercussionworks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thepercussionworks.com"] [uri "/xmlrpc.php"] [unique_id "aj3zcB9QmMpg-eqGKHFpiwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 04:08:58 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.189.134.220 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.189.134.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 00:08:53.500039 2026] [security2:error] [pid 25552:tid 25625] [client 103.189.134.220:55696] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.189.134.220 (+1 hits since last alert)\|vancekelly.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vancekelly.com"] [uri "/xmlrpc.php"] [unique_id "ajdj1Wj6OoGkNQsglMe9ugAAAIU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 bigwavedave	2026-06-20 06:41:54 (2 weeks ago)	Wordpress Attack	Web App Attack
Anonymous	2026-06-20 04:06:49 (2 weeks ago)	Trying to access config files	Web App Attack
Anonymous	2026-06-19 02:06:05 (2 weeks ago)	Trying to access config files	Web App Attack
🇺🇸 Psycho Solutions LLC	2026-01-15 09:55:26 (5 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-admin/ - User Agent: N/A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-admin/ - User Agent: N/A - Timestamp: 1/15/2026 9:55 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-01-15 07:38:57 (5 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
Anonymous	2025-12-31 08:02:30 (6 months ago)	(pop3d) Failed POP3 login from 103.189.134.220 (IN/India/-)	Brute-Force
🇮🇩 aaKenshin	2025-12-24 12:12:08 (6 months ago)	Suspicious activity detected from IP 103.189.134.220 based on mailserver logs. Sample logs: 2025-12- ... show more Suspicious activity detected from IP 103.189.134.220 based on mailserver logs. Sample logs: 2025-12-24 20:08:27,346 INFO [qtp267400033-24688] [name=*@.id;ip=172.16.0.182;oip=103.189.134.220;oport=61822;oproto=smtp;port=47114;soapId=4be0bfeb;] SoapEngine - handler exception: authentication failed for [], LDAP error: - unable to ldap authenticate: invalid credentials 2025-12-24 20:08:27,346 INFO [qtp267400033-24688] [name=@.id;ip=172.16.0.182;oip=103.189.134.220;oport=61822;oproto=smtp;port=47114;soapId=4be0bfeb;] soap - AuthRequest elapsed=119 2025-12-24 20:08:27,416 INFO [Pop3Server-9] [ip=172.16.0.182;oip=103.189.134.220;cid=2581;] account - Error occurred during authentication: authentication failed for []. Reason: LDAP error: - unable to ldap authenticate: invalid credentials. 2025-12-24 20:08:27,497 INFO [qtp267400033-24688] [name=@.id;ip=172.16.0.182;oip=103.189.134.220;oport=61823;oproto=smtp;port=47126;soapId=4be0bfec;] SoapEngine - handler exception: authentic show less	Brute-Force
🇺🇸 bigscoots.com	2025-11-19 06:50:24 (7 months ago)	(smtpauth) Failed SMTP AUTH login from 103.189.134.220 (IN/India/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 103.189.134.220 (IN/India/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2025-11-19 01:46:59 dovecot_plain authenticator failed for (DESKTOP-CMQOIUS) [103.189.134.220]:53923: 535 Incorrect authentication data 2025-11-19 01:47:01 SMTP call from [103.189.134.220]:63996 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f? ?", NULL) 2025-11-19 01:47:09 dovecot_plain authenticator failed for (DESKTOP-CMQOIUS) [103.189.134.220]:63332: 535 Incorrect authentication data 2025-11-19 01:50:15 dovecot_plain authenticator failed for (DESKTOP-CMQOIUS) [103.189.134.220]:54043: 535 Incorrect authentication data ([email protected]) 2025-11-19 01:50:22 dovecot_plain authenticator failed for (DESKTOP-CMQOIUS) [103.189.134.220]:56105: 535 Incorrect authentication data (set_id=os96697635) show less	Brute-Force SSH
🇺🇸 Psycho Solutions LLC	2025-11-18 12:12:59 (7 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 11/18/2025 12:12 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-10-20 07:10:49 (8 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2025-10-07 04:30:57 (9 months ago)	wordpress-trap	Web App Attack
🇳🇱 lid3rc	2025-09-01 12:22:58 (10 months ago)	/phpmyadmin/	Web App Attack
Anonymous	2025-09-01 12:20:24 (10 months ago)	wordpress-trap	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 103.43.191.43

🇷🇴 92.118.39.14

🇨🇳 222.186.13.130

🇫🇮 178.20.210.151

🇫🇮 144.31.156.154

🇨🇳 121.204.171.7

🇺🇸 96.78.175.36

🇺🇸 74.7.230.36

🇳🇱 45.148.10.151

🇸🇳 41.208.141.231

🇺🇸 20.85.246.45

🇺🇸 3.142.170.60

🇸🇬 203.116.129.55

🇧🇷 201.77.144.241

🇧🇪 198.235.24.216

🇺🇸 195.184.76.171

🇺🇸 195.184.76.138

🇧🇬 193.24.211.107

🇦🇷 181.189.208.36

🇵🇱 143.20.97.31