JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.189.159.21

203.189.159.21 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 0%: ?

ISP	Cogetel Ltd, Online ISP, Cambodia
Usage Type	Fixed Line ISP
ASN	AS23673
Hostname(s)	headquarter.online.com.kh
Domain Name	online.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.189.159.21

Whois 203.189.159.21

IP Abuse Reports for 203.189.159.21:

This IP address has been reported a total of 31 times from 11 distinct sources. 203.189.159.21 was first reported on July 12th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 unhfree.net	2025-04-10 16:12:37 (1 year ago)	Apr 10 12:44:12 canopus postfix/smtpd[4156843]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: ... show more Apr 10 12:44:12 canopus postfix/smtpd[4156843]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 10 12:44:12 canopus postfix/smtpd[4156843]: too many errors after RCPT from unknown[203.189.159.21] Apr 10 13:31:49 canopus postfix/smtpd[4164980]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 10 13:31:49 canopus postfix/smtpd[4164980]: too many errors after RCPT from unknown[203.189.159.21] Apr 10 18:12:36 canopus postfix/smtpd[4182841]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minut ... show less	Brute-Force Exploited Host
🇺🇸 TPI-Abuse	2025-03-25 15:33:41 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 203.189.159.21 (headquarter.online.com.kh): 1 i ... show more (mod_security) mod_security (id:225170) triggered by 203.189.159.21 (headquarter.online.com.kh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 11:33:36.385065 2025] [security2:error] [pid 3313762:tid 3313762] [client 203.189.159.21:60568] [client 203.189.159.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|arriagarealestate.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arriagarealestate.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z-LM0LcgpoaMC8EXwOjhFQAAAA8"], referer: https://arriagarealestate.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 unhfree.net	2025-03-25 11:13:12 (1 year ago)	Mar 25 09:52:53 canopus postfix/smtpd[2508217]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: ... show more Mar 25 09:52:53 canopus postfix/smtpd[2508217]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 25 09:52:53 canopus postfix/smtpd[2508217]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 25 09:52:53 canopus postfix/smtpd[2508217]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 25 09:52:53 canopus postfix/smtpd[2508217]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <kubakre ... show less	Brute-Force Exploited Host
🇳🇱 Savvii	2025-03-20 22:23:33 (1 year ago)	20 attempts against mh_ha-misbehave-ban on thyme	Brute-Force Bad Web Bot Web App Attack
🇨🇿 unhfree.net	2025-03-17 02:00:00 (1 year ago)	Mar 17 01:20:55 canopus postfix/smtpd[1555361]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: ... show more Mar 17 01:20:55 canopus postfix/smtpd[1555361]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 17 01:20:55 canopus postfix/smtpd[1555361]: too many errors after RCPT from unknown[203.189.159.21] Mar 17 01:21:06 canopus postfix/smtpd[1555337]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 17 01:21:06 canopus postfix/smtpd[1555337]: too many errors after RCPT from unknown[203.189.159.21] Mar 17 02:59:59 canopus postfix/smtpd[1566445]: 98B0FDC030F: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minu ... show less	Brute-Force Exploited Host
🇷🇺 nyuuzyou	2025-03-13 23:01:51 (1 year ago)	{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "22", "server": "ssh_server", "src_ip": ... show more {"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "22", "server": "ssh_server", "src_ip": "203.189.159.21", "src_port": "51093", "timestamp": "2025-03-13T23:01:44.820019"} show less	Brute-Force SSH
🇺🇸 DVLLC hostmaster	2025-03-08 20:27:00 (1 year ago)	It's been 364 days since you registered on our platform for automatic cloud Bitcoin mining. Your dev ... show more It's been 364 days since you registered on our platform for automatic cloud Bitcoin mining. Your devices were linked to our platform by IP address You were inactive, but cryptocurrency continued to be collected automatically from your device. You accumulated assets through cloud mining during your absence. Your balance: show less	Phishing Email Spam
🇨🇿 unhfree.net	2025-03-08 19:36:58 (1 year ago)	Mar 8 19:12:57 canopus postfix/smtpd[709103]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 5 ... show more Mar 8 19:12:57 canopus postfix/smtpd[709103]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 8 19:12:57 canopus postfix/smtpd[709103]: too many errors after RCPT from unknown[203.189.159.21] Mar 8 20:25:06 canopus postfix/smtpd[709103]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 8 20:25:06 canopus postfix/smtpd[709103]: too many errors after RCPT from unknown[203.189.159.21] Mar 8 20:36:57 canopus postfix/smtpd[709219]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit re ... show less	Brute-Force Exploited Host
🇹🇷 rtbh.com.tr	2025-02-28 20:49:23 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-02-28 00:49:24 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-02-27 20:49:25 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇲🇾 syokadmin	2025-02-24 15:08:59 (1 year ago)	203.189.159.21 (KH/Cambodia/headquarter.online.com.kh), 6 distributed SMTP Logins on account [hello@ ... show more 203.189.159.21 (KH/Cambodia/headquarter.online.com.kh), 6 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
Anonymous	2025-02-21 09:43:38 (1 year ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇳🇱 Savvii	2025-02-21 08:53:52 (1 year ago)	20 attempts against mh_ha-misbehave-ban on thyme	Brute-Force Bad Web Bot Web App Attack
🇨🇿 unhfree.net	2025-02-20 01:40:02 (1 year ago)	Feb 19 19:13:00 canopus postfix/smtpd[1291866]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: ... show more Feb 19 19:13:00 canopus postfix/smtpd[1291866]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Feb 19 19:13:00 canopus postfix/smtpd[1291866]: too many errors after RCPT from unknown[203.189.159.21] Feb 19 21:33:34 canopus postfix/smtpd[1299980]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Feb 19 21:33:34 canopus postfix/smtpd[1299980]: too many errors after RCPT from unknown[203.189.159.21] Feb 20 02:40:01 canopus postfix/smtpd[1335066]: NOQUEUE: reject: RCPT from unknown[203.189.159.21]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes ... show less	Brute-Force Exploited Host

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇨🇳 144.123.78.70

🇨🇳 60.166.82.191

🇺🇸 2604:a880:800:14::5633:b000

🇺🇸 216.180.246.133

🇧🇷 187.16.96.250

🇳🇱 176.65.139.181

🇨🇳 117.29.104.227

🇭🇰 101.36.117.15

🇺🇸 3.129.187.38

🇨🇳 1.24.16.227

🇺🇸 172.253.242.49

🇺🇸 162.216.149.190

🇺🇸 158.94.187.51

🇷🇺 152.32.227.252

🇱🇹 141.98.9.66

🇩🇪 104.164.106.35

🇧🇬 91.191.209.46

🇧🇷 45.205.1.245

🇨🇳 183.230.155.13