JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.3.220.252

103.3.220.252 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	PT XLSMART Telecom Sejahtera Tbk
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xlsmart.co.id
Country	🇮🇩 Indonesia
City	Soreang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.3.220.252

Whois 103.3.220.252

IP Abuse Reports for 103.3.220.252:

This IP address has been reported a total of 13 times from 9 distinct sources. 103.3.220.252 was first reported on February 22nd 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-04-13 16:00:32 (2 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
Anonymous	2026-03-13 00:57:47 (3 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2026-03-12 18:28:50 (3 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-03-03 13:37:23 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 103.3.220.252 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 103.3.220.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 08:37:15.582508 2026] [security2:error] [pid 23656:tid 23656] [client 103.3.220.252:11463] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|truewaveboards.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "truewaveboards.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aabkC0pAslAYzUdmBFBSWQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-03 03:15:58 (6 months ago)	botnet	DDoS Attack
🇮🇩 sockominfo	2025-11-25 01:23:27 (6 months ago)	[WAZUH] User login attempt during non-business hours.	Hacking Web App Attack
🇺🇸 hostseries	2025-06-29 12:02:00 (11 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇺🇸 mawan	2024-10-18 14:19:10 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇬🇧 Arjan_S	2024-07-24 10:58:47 (1 year ago)	Found in DMARC reports	Spoofing
🇩🇪 IP Analyzer	2022-09-24 14:01:41 (3 years ago)	Unauthorized connection attempt from IP address 103.3.220.252 on Port 445(SMB)	Port Scan
🇵🇱 fripers.pl	2022-03-28 08:13:38 (4 years ago)	2022-02-22 09:00:49 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:21564 I=\[193.107.88.166\]:25 F=\<zdtp ... show more 2022-02-22 09:00:49 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:21564 I=\[193.107.88.166\]:25 F=\<[email protected]\> rejected RCPT \<[email protected]\>: Sender verify failed 2022-02-22 09:01:40 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:9931 I=\[193.107.88.166\]:25 F=\<[email protected]\> rejected RCPT \<[email protected]\>: Sender verify failed 2022-02-22 09:02:09 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:8328 I=\[193.107.88.166\]:25 F=\<[email protected]\> rejected RCPT \<[email protected]\>: Sender verify failed ... show less	Brute-Force
🇵🇱 fripers.pl	2022-03-08 05:38:19 (4 years ago)	2022-02-22 09:00:49 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:21564 I=\[193.107.88.166\]:25 F=\<zdtp ... show more 2022-02-22 09:00:49 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:21564 I=\[193.107.88.166\]:25 F=\<[email protected]\> rejected RCPT \<[email protected]\>: Sender verify failed 2022-02-22 09:01:40 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:9931 I=\[193.107.88.166\]:25 F=\<[email protected]\> rejected RCPT \<[email protected]\>: Sender verify failed 2022-02-22 09:02:09 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:8328 I=\[193.107.88.166\]:25 F=\<[email protected]\> rejected RCPT \<[email protected]\>: Sender verify failed ... show less	Brute-Force
🇵🇱 fripers.pl	2022-02-22 03:02:10 (4 years ago)	2022-02-22 09:00:49 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:21564 I=\[193.107.88.166\]:25 F=\<zdtp ... show more 2022-02-22 09:00:49 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:21564 I=\[193.107.88.166\]:25 F=\<[email protected]\> rejected RCPT \<[email protected]\>: Sender verify failed 2022-02-22 09:01:40 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:9931 I=\[193.107.88.166\]:25 F=\<[email protected]\> rejected RCPT \<[email protected]\>: Sender verify failed 2022-02-22 09:02:09 H=\(\[103.3.220.252\]\) \[103.3.220.252\]:8328 I=\[193.107.88.166\]:25 F=\<[email protected]\> rejected RCPT \<[email protected]\>: Sender verify failed ... show less	Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.246

🇩🇪 164.90.236.107

🇺🇸 162.216.150.38

🇳🇬 152.32.141.172

🇨🇳 115.231.78.11

🇺🇸 64.62.197.148

🇬🇧 35.203.211.143

🇩🇪 23.230.104.201

🇨🇳 1.86.233.5

🇧🇷 187.108.86.225

🇨🇳 182.140.209.41

🇨🇳 121.56.215.200

🇹🇭 119.42.108.132

🇩🇪 104.207.54.15

🇺🇸 35.236.193.185

🇮🇹 34.17.30.249

🇯🇵 203.25.124.28

🇺🇸 192.155.81.124

🇫🇮 147.185.133.168

🇮🇪 130.195.213.122