JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.252.168.136

103.252.168.136 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 60%: ?

60%

ISP	UCN CABLE NETWORK PVT. LTD.
Usage Type	Fixed Line ISP
ASN	AS133007
Domain Name	ucnindia.com
Country	🇮🇳 India
City	Nagpur, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.252.168.136

Whois 103.252.168.136

IP Abuse Reports for 103.252.168.136:

This IP address has been reported a total of 22 times from 17 distinct sources. 103.252.168.136 was first reported on March 14th 2021, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 stroytrest	2026-10-22 22:08:56 (15 hours ago)	2026-10-23T01:08:55.923333+03:00 gate kernel: [1769225.812988] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-10-23T01:08:55.923333+03:00 gate kernel: [1769225.812988] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=103.252.168.136 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=61286 DF PROTO=TCP SPT=52982 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇾 stroytrest	2026-10-22 14:46:19 (22 hours ago)	2026-10-22T17:46:18.806263+03:00 gate kernel: [1742668.695922] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-10-22T17:46:18.806263+03:00 gate kernel: [1742668.695922] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=103.252.168.136 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=34964 DF PROTO=TCP SPT=41090 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇾 stroytrest	2026-10-22 04:18:18 (1 day ago)	2026-10-22T07:18:17.312273+03:00 gate kernel: [1704987.201932] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-10-22T07:18:17.312273+03:00 gate kernel: [1704987.201932] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=103.252.168.136 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=9017 DF PROTO=TCP SPT=46075 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇳 shax	2026-10-21 04:29:30 (2 days ago)	Honeypot observed completed TCP application interaction; target=tcp/23; service=cowrie-telnet; metho ... show more Honeypot observed completed TCP application interaction; target=tcp/23; service=cowrie-telnet; method=SESSION; route=cowrie.login.success; classification=honeypot-login; UTC=2026-10-21T04:29:30.589+00:00; payload_sha256=3fa2342c01566f4499264ececa9e9919a5f2c9409d98425e19a96bf1e41a7f40. Raw payload, credentials, prompts, and URL query omitted. show less	Brute-Force
🇺🇸 xmission.com	2026-10-21 01:17:54 (2 days ago)	Blocked by UFW (TCP on 23) Source port: 52442 TTL: 54 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 52442 TTL: 54 Packet length: 60 TOS: 0x00 This report (for 103.252.168.136) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇧🇾 sashan	2026-10-16 19:51:52 (6 days ago)	2026-10-16T22:51:51.883267+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=103.252.168 ... show more 2026-10-16T22:51:51.883267+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=103.252.168.136 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=16905 DF PROTO=TCP SPT=35144 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 NetGuard	2026-10-14 00:31:51 (1 week ago)	#honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard2 ... show more #honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-14T00:22:39.564+00:00 Attacker IP: 103.252.168.136 \| Port: 23 \| Country: India Honeypot: cowrie \| Attack: ssh_telnet_probe Activity: 2 hits on port 23 between 2026-10-14T00:22:39.564+00:00 and 2026-10-14T00:22:55.3+00:00 (6h window 2026-10-14T00:00:00.000Z) Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force SSH
Anonymous	2026-10-13 23:10:00 (1 week ago)	Hit honeypot r.	Port Scan Hacking Exploited Host
🇩🇪 iNetWorker	2026-10-12 13:00:35 (1 week ago)	firewall-block, port(s): 23/tcp	Port Scan
🇫🇷 security.rdmc.fr	2026-10-12 05:11:29 (1 week ago)	Port Scan Attack proto:TCP src:46549 dst:23	Port Scan
Anonymous	2026-10-12 02:55:46 (1 week ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇺🇸 cybsecaoccol	2026-10-11 21:48:20 (1 week ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇦🇷 Bruno	2026-10-11 21:47:31 (1 week ago)	Port Scanner: 103.252.168.136	Port Scan
🇮🇷 ModiranHost.com	2021-07-05 17:24:16 (5 years ago)	(smtpauth) Failed SMTP AUTH login from 103.252.168.136 (Unknown): 1 in the last 3600 secs; Ports: ; ... show more (smtpauth) Failed SMTP AUTH login from 103.252.168.136 (Unknown): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 2021-07-06 01:54:11 plain authenticator failed for (127.0.0.1) [103.252.168.136]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇹🇭 Sawasdee	2021-04-02 19:48:05 (5 years ago)	Port Scan ...	Port Scan

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.190.186

🇫🇷 185.177.72.70

🇮🇳 223.185.47.226

🇰🇷 221.162.218.85

🇨🇱 216.155.93.75

🇲🇾 202.165.14.135

🇦🇷 190.179.194.32

🇳🇮 190.143.254.41

🇧🇷 177.138.120.137

🇨🇳 120.48.132.230

🇺🇦 91.228.217.204

🇩🇪 91.92.43.221

🇫🇷 85.217.140.22

🇮🇩 43.129.56.70

🇧🇷 16.5.0.214

🇵🇪 200.37.103.36

🇰🇷 199.241.120.131

🇺🇸 199.165.159.20

🇪🇬 197.199.224.52

🇨🇳 180.153.236.168