JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.189.220.42

103.189.220.42 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 4%: ?

ISP	Om-Asha Net Private Limited
Usage Type	Fixed Line ISP
ASN	AS149587
Domain Name	omashanet.in
Country	🇮🇳 India
City	Virar, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.189.220.42

Whois 103.189.220.42

IP Abuse Reports for 103.189.220.42:

This IP address has been reported a total of 39 times from 33 distinct sources. 103.189.220.42 was first reported on October 9th 2022, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-08-26 00:06:00 (23 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇹🇷 kuru.bbs067	2026-06-24 06:23:21 (2 months ago)	Sign-in and MFA DDoS Attack Detected	Brute-Force
Anonymous	2026-03-09 20:44:41 (5 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇫🇷 Teor Logico	2023-01-01 21:48:20 (3 years ago)	Jan 2 03:48:17 host-134-119-215-243 sshd[16456]: pam_unix(sshd:auth): authentication failure; logna ... show more Jan 2 03:48:17 host-134-119-215-243 sshd[16456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.189.220.42 Jan 2 03:48:19 host-134-119-215-243 sshd[16456]: Failed password for invalid user admin from 103.189.220.42 port 44555 ssh2 show less	Brute-Force SSH
🇨🇭 Xenic	2023-01-01 20:17:33 (3 years ago)	Jan 2 02:17:31 zurich-2 sshd[2342520]: Invalid user ftp from 103.189.220.42 port 55652 Jan 2 02:17 ... show more Jan 2 02:17:31 zurich-2 sshd[2342520]: Invalid user ftp from 103.189.220.42 port 55652 Jan 2 02:17:31 zurich-2 sshd[2342520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.189.220.42 Jan 2 02:17:33 zurich-2 sshd[2342520]: Failed password for invalid user ftp from 103.189.220.42 port 55652 ssh2 ... show less	Brute-Force SSH
🇺🇸 LotusDragon	2023-01-01 18:41:57 (3 years ago)	Jan 1 15:41:54 ds13592 sshd[31444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Jan 1 15:41:54 ds13592 sshd[31444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.189.220.42 user=root Jan 1 15:41:54 ds13592 sshd[31444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.189.220.42 user=root Jan 1 15:41:56 ds13592 sshd[31444]: Failed password for root from 103.189.220.42 port 42013 ssh2 Jan 1 15:41:56 ds13592 sshd[31444]: Failed password for root from 103.189.220.42 port 42013 ssh2 show less	Brute-Force SSH
🇪🇸 10dencehispahard SL	2023-01-01 08:25:38 (3 years ago)	Unauthorized login attempts [ sshd]	Brute-Force SSH
🇨🇳 ThreatBook.io	2022-12-30 18:31:47 (3 years ago)	ThreatBook Intelligence: Zombie,HTTP Proxy more details on https://threatbook.io/ip/103.189.220.42	SSH
🇨🇳 ThreatBook.io	2022-12-28 18:32:06 (3 years ago)	ThreatBook Intelligence: Zombie,HTTP Proxy more details on https://threatbook.io/ip/103.189.220.42	SSH
🇺🇸 wap.dynu.net	2022-12-25 05:25:26 (3 years ago)	Malicious logon attempt on port 143, EHLO:	Brute-Force
🇲🇾 syokadmin	2022-12-25 04:36:22 (3 years ago)	(imapd) Failed IMAP login from 103.189.220.42 (IN/India/103.189.220.42.airnetnetworks.com): 5 in the ... show more (imapd) Failed IMAP login from 103.189.220.42 (IN/India/103.189.220.42.airnetnetworks.com): 5 in the last 3600 secs show less	Brute-Force
🇺🇸 xd_mau5	2022-12-24 22:46:00 (3 years ago)	Dec 24 22:45:59 panel sshd[3360167]: Invalid user user from 103.189.220.42 port 41315 ...	Port Scan Brute-Force SSH
🇺🇸 NXTwoThou	2022-12-20 15:10:48 (3 years ago)	IMAP	Brute-Force
🇩🇪 Bernhard Fürst	2022-12-17 09:40:51 (3 years ago)	Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 103.189.220.42, Reason:[ ... show more Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 103.189.220.42, Reason:[103.189.220.42 (IN/India/103.189.220.42.airnetnetworks.com), 5 distributed sshd attacks on account [root] in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇩🇪 nicosqc	2022-12-13 15:28:12 (3 years ago)	Invalid user user from 103.189.220.42 port 55776	Brute-Force SSH

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2606:4700:20::ac43:464a

🇺🇸 34.186.22.218

🇺🇸 34.106.116.154

🇩🇪 193.124.20.248

🇺🇸 173.255.221.22

🇺🇸 136.113.253.182

🇨🇦 85.217.149.67

🇳🇱 77.239.124.251

🇿🇼 74.244.95.20

🇺🇦 37.53.46.121

🇨🇳 222.186.135.8

🇳🇱 91.92.42.81

🇳🇱 45.148.10.152

🇦🇲 5.77.138.229

🇧🇪 198.235.24.183

🇻🇳 123.58.198.35

🇺🇸 100.29.63.24

🇱🇹 62.60.130.242

🇺🇸 38.133.189.67

🇺🇸 2607:f8b0:4001:c58::123