JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.21.165.26

103.21.165.26 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 0%: ?

ISP	234, Galle Road, Colombo 4
Usage Type	Mobile ISP
ASN	AS132447
Domain Name	hutchison.lk
Country	🇱🇰 Sri Lanka
City	Negombo, Western Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.21.165.26

Whois 103.21.165.26

IP Abuse Reports for 103.21.165.26:

This IP address has been reported a total of 3 times from 3 distinct sources. 103.21.165.26 was first reported on November 23rd 2020, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-13 22:50:54 (3 months ago)	[Sun Jun 14 05:50:51.370951 2026] [security2:error] [pid 1326324:tid 139664375563968] [client 103.21 ... show more [Sun Jun 14 05:50:51.370951 2026] [security2:error] [pid 1326324:tid 139664375563968] [client 103.21.165.26:35410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558584-poster-skala-gempa-mmi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558584-poster-skala-gempa-mmi"] [unique_id "ai3ey6MEeKr2dzzkdNNFQAABRRg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1326349] [V73DbKpS31w] [ai3ey6MEeKr2dzzkdNNFQAABRRg] keep_alive=[1] [2026-06-14 05:50:51.370955] [R:ai3ey6MEeKr2dzzkdNNFQAABRRg] UA:'Mozilla/5.0 (Linux; Android 9; ... show less	Email Spam Hacking
🇺🇸 antbr.com	2026-04-13 07:25:23 (5 months ago)	AntBR.com: [Repeated Attack]==> /xmlrpc.php	Web App Attack
🇰🇬 dos5n	2020-11-23 00:20:47 (5 years ago)	Nov 23 05:48:07 mail postfix/smtpd\[30126\]: NOQUEUE: reject: RCPT from unknown\[103.21.165.26\]: 55 ... show more Nov 23 05:48:07 mail postfix/smtpd\[30126\]: NOQUEUE: reject: RCPT from unknown\[103.21.165.26\]: 550 5.1.1 \<[email protected]\>: Recipient address rejected: mega.kg\; from=\<[email protected]\> to=\<[email protected]\> proto=ESMTP helo=\<\[103.21.165.26\]\> Nov 23 05:51:16 mail postfix/smtpd\[25493\]: NOQUEUE: reject: RCPT from unknown\[103.21.165.26\]: 550 5.1.1 \<[email protected]\>: Recipient address rejected: mega.kg\; from=\<[email protected]\> to=\<[email protected]\> proto=ESMTP helo=\<\[103.21.165.26\]\> Nov 23 05:53:48 mail postfix/smtpd\[5518\]: NOQUEUE: reject: RCPT from unknown\[103.21.165.26\]: 550 5.1.1 \<[email protected]\>: Recipient address rejected: mega.kg\; from=\<[email protected]\> to=\<[email protected]\> proto=ESMTP helo=\<\[103.21.165.26\]\> Nov 23 05:55:59 mail postfix/smtpd\[8661\]: NOQUEUE: reject: RCPT from unknown\[103.21.165.26\]: 550 5.1.1 \<[email protected]\>: Recipient address rejected: mega.kg\; from=\<iain.cran@scot ... show less	Brute-Force

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.74

🇺🇸 207.45.31.222

🇷🇴 2.57.122.150

🇷🇴 2.57.121.25

🇩🇪 2a01:7e01::2000:adff:fe03:3c9f

🇮🇷 185.226.116.36

🇺🇸 152.232.187.223

🇬🇧 141.101.98.191

🇮🇳 122.168.123.73

🇷🇺 95.71.64.219

🇨🇦 85.217.149.57

🇨🇦 51.222.12.127

🇹🇭 203.150.107.244

🇺🇸 192.151.148.106

🇺🇸 150.107.36.82

🇬🇧 141.101.98.116

🇬🇧 141.101.98.84

🇧🇷 131.161.249.165

🇨🇳 122.194.13.133

🇰🇷 112.184.42.193