JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.203.110.136

152.203.110.136 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 87%: ?

87%

ISP	COLOMBIA TELECOMUNICACIONES S.A. ESP
Usage Type	Fixed Line ISP
ASN	AS3816
Domain Name	telefonica.co
Country	🇨🇴 Colombia
City	Medellin, Antioquia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.203.110.136

Whois 152.203.110.136

IP Abuse Reports for 152.203.110.136:

This IP address has been reported a total of 18 times from 15 distinct sources. 152.203.110.136 was first reported on June 12th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-12 22:45:00 (2 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-06-12 18:33:46 (2 days ago)	Jun 12 20:33:04 paris sshd[590488]: Invalid user [redacted] from 152.203.110.136 port 53244 Jun 12 2 ... show more Jun 12 20:33:04 paris sshd[590488]: Invalid user [redacted] from 152.203.110.136 port 53244 Jun 12 20:33:04 paris sshd[590488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.203.110.136 Jun 12 20:33:06 paris sshd[590488]: Failed password for [redacted] from 152.203.110.136 port 53244 ssh2 Jun 12 20:33:44 paris sshd[590530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.203.110.136 user=[redacted] Jun 12 20:33:45 paris sshd[590530]: Failed password for [redacted] from 152.203.110.136 port 43898 ssh2 ... show less	Brute-Force SSH
🇳🇱 Futunk	2026-06-12 17:48:15 (2 days ago)	2026-06-12T19:47:35.192982+02:00 ezri sshd[1488042]: Invalid user admin from 152.203.110.136 port 37 ... show more 2026-06-12T19:47:35.192982+02:00 ezri sshd[1488042]: Invalid user admin from 152.203.110.136 port 37962 2026-06-12T19:47:36.210323+02:00 ezri sshd[1488042]: Connection closed by invalid user admin 152.203.110.136 port 37962 [preauth] 2026-06-12T19:48:14.309263+02:00 ezri sshd[1488110]: Invalid user orangepi from 152.203.110.136 port 52008 ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-12 17:34:33 (2 days ago)	(mod_security) mod_security (id:218420) triggered by 152.203.110.136 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:218420) triggered by 152.203.110.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 13:34:26.098823 2026] [security2:error] [pid 24355:tid 24355] [client 152.203.110.136:51694] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.222:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.222"] [uri "/hello.world"] [unique_id "aixDIr_hrLTtlwOJYXybBAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-06-12 17:04:13 (2 days ago)	tcp/22	Port Scan
🇩🇪 actuallyreliable	2026-06-12 16:42:06 (2 days ago)	2026-06-12T16:40:51.849079+00:00 sector-1 sshd-session[1777624]: Invalid user admin from 152.203.110 ... show more 2026-06-12T16:40:51.849079+00:00 sector-1 sshd-session[1777624]: Invalid user admin from 152.203.110.136 port 49300 2026-06-12T16:41:29.276867+00:00 sector-1 sshd-session[1777682]: Invalid user orangepi from 152.203.110.136 port 50954 2026-06-12T16:42:06.321595+00:00 sector-1 sshd-session[1777825]: User root from 152.203.110.136 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
Anonymous	2026-06-12 12:32:59 (3 days ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-06-12 11:43:34 (3 days ago)	(mod_security) mod_security (id:218420) triggered by 152.203.110.136 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:218420) triggered by 152.203.110.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 07:43:29.860159 2026] [security2:error] [pid 27864:tid 27864] [client 152.203.110.136:47464] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.64:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.64"] [uri "/hello.world"] [unique_id "aivw4eF80dy654_SlFf9TwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 omartin	2026-06-12 10:22:24 (3 days ago)	Exploit Attempt (Path Traversal/SQLi/XSS)	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 Axel	2026-06-12 09:16:45 (3 days ago)	Blocked by UFW on MVI [23/tcp] \| SPT: 63807 \| TTL: 51 \| LEN: 44 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on MVI [23/tcp] \| SPT: 63807 \| TTL: 51 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇺🇸 xmission.com	2026-06-12 09:09:11 (3 days ago)	Blocked by UFW (TCP on 2375) Source port: 53557 TTL: 49 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2375) Source port: 53557 TTL: 49 Packet length: 44 TOS: 0x08 This report (for 152.203.110.136) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cybsecaoccol	2026-06-12 08:53:32 (3 days ago)	unauthorized connection or malicious port scan attempted on tcp port 22 - dr	Port Scan Hacking
🇧🇷 SOC PR	2026-06-12 07:53:08 (3 days ago)	IPS: Apache HTTP Server Directory Traversal.	Web App Attack
🇺🇸 MPL	2026-06-12 07:03:32 (3 days ago)	tcp/2222 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-06-12 06:49:06 (3 days ago)	tcp/2375	Port Scan

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.74.93.184

🇩🇪 95.90.13.168

🇳🇱 91.92.42.227

🇳🇱 91.92.40.5

🇱🇹 62.60.130.59

🇺🇸 192.185.4.61

🇺🇸 170.187.165.139

🇭🇰 154.221.23.232

🇨🇳 118.145.246.44

🇧🇷 45.164.251.67

🇮🇩 103.29.185.162

🇲🇾 47.250.54.161

🇫🇮 46.62.145.7

🇨🇱 34.176.213.180

🇨🇳 14.116.172.24

🇰🇷 14.39.99.2

🇨🇳 144.123.76.81

🇻🇳 116.96.77.113

🇮🇪 108.130.154.69

🇷🇴 80.94.92.165