JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.102.228.216

103.102.228.216 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 0%: ?

ISP	Individual Entrepreneur Anton Levin
Usage Type	Data Center/Web Hosting/Transit
ASN	AS50053
Domain Name	vdska.online
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.102.228.216

Whois 103.102.228.216

IP Abuse Reports for 103.102.228.216:

This IP address has been reported a total of 58 times from 22 distinct sources. 103.102.228.216 was first reported on December 13th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-01-10 18:30:13 (2 years ago)	HACK	Brute-Force
🇺🇸 TPI-Abuse	2024-01-10 17:39:07 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 10 12:39:00.783127 2024] [security2:error] [pid 20544] [client 103.102.228.216:61589] [client 103.102.228.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|w-c-p-m.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "w-c-p-m.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZZ7WNDyNfrnNX8ubtbVyCAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2024-01-10 09:58:38 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-01-10 06:25:44 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 10 01:25:40.306257 2024] [security2:error] [pid 31858] [client 103.102.228.216:62564] [client 103.102.228.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|swaincustomdesigns.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "swaincustomdesigns.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZZ44ZCvJh8pQs_NH_owNMgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 AFRICARGUS	2024-01-09 20:51:47 (2 years ago)	Sent around 85 unsuccessful malicious GET requests in 2m:53s via HTTP/1.1, including: 103.102.228 ... show more Sent around 85 unsuccessful malicious GET requests in 2m:53s via HTTP/1.1, including: 103.102.228.216 [09/Jan/2024:20:40:43 +0000] GET "/about.php" HTTP/1.1 301 103.102.228.216 [09/Jan/2024:20:41:19 +0000] GET "/wp-content/upload.php" HTTP/1.1 301 103.102.228.216 [09/Jan/2024:20:41:21 +0000] GET "/wp-admin/includes/about.php" HTTP/1.1 301 103.102.228.216 [09/Jan/2024:20:41:45 +0000] GET "/wp-content/up.php" HTTP/1.1 301 103.102.228.216 [09/Jan/2024:20:42:53 +0000] GET "/Admin/uploads/" HTTP/1.1 301 103.102.228.216 [09/Jan/2024:20:43:38 +0000] GET "/wp-content/plugins/zaen/includes/" HTTP/1.1 301 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-01-09 13:39:22 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 09 08:39:17.773460 2024] [security2:error] [pid 12006] [client 103.102.228.216:62388] [client 103.102.228.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bonito.alessiaalessandra.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bonito.alessiaalessandra.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZZ1MhYa2VSIkpiwj6S_OBgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-09 06:28:26 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 09 01:28:21.122624 2024] [security2:error] [pid 32516] [client 103.102.228.216:55267] [client 103.102.228.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|iyp-home.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "iyp-home.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZZznhXt52WKit_4CmD_N6AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-09 05:09:50 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 09 00:09:45.360822 2024] [security2:error] [pid 22886] [client 103.102.228.216:51517] [client 103.102.228.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|viptulumresorts.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "viptulumresorts.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZZzVGftIkAirbVa-luxKWAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-08 14:12:41 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 08 09:12:36.547992 2024] [security2:error] [pid 5608:tid 47760130361088] [client 103.102.228.216:49465] [client 103.102.228.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|newleafpro.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "newleafpro.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZZwC1EE3zhE_oyAoGIZ6QQAAAMI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-08 13:07:00 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 08 08:06:53.691293 2024] [security2:error] [pid 27694] [client 103.102.228.216:61864] [client 103.102.228.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.sparemediagroup.pixelspective.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.sparemediagroup.pixelspective.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZZvzbWYcBeASA_ETA2Hc8gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-08 12:47:22 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 08 07:47:19.237612 2024] [security2:error] [pid 24418:tid 47346549331712] [client 103.102.228.216:53028] [client 103.102.228.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ahsdistance.org\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ahsdistance.org"] [uri "/site/default/settings.php.BAK"] [unique_id "ZZvu1yWu53eT-lifvei4jAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-08 06:07:00 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 08 01:06:56.242094 2024] [security2:error] [pid 7912] [client 103.102.228.216:57134] [client 103.102.228.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|chronoton.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chronoton.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZZuRAPtiuFO7UpwGBZpNCwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-08 03:56:36 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 07 22:56:30.173328 2024] [security2:error] [pid 22692] [client 103.102.228.216:55921] [client 103.102.228.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|michaelsabbey.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "michaelsabbey.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZZtybpPmtD9_5riylllQ9AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2024-01-08 03:09:41 (2 years ago)	Scanning/Probing (33) Request Overload (763)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-01-08 00:50:42 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.102.228.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 07 19:50:36.958216 2024] [security2:error] [pid 15230] [client 103.102.228.216:53299] [client 103.102.228.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|virginians.com.johnpritchett.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "virginians.com.johnpritchett.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZZtG3Jx9vIU-aPAtdy-39gAAACA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a02:842b:5f42:6601:78ba:edac:3530:751e

🇷🇺 194.87.213.30

🇺🇸 147.185.132.206

🇵🇰 119.157.78.24

🇮🇳 103.185.100.196

🇵🇰 103.174.195.62

🇫🇷 89.92.72.149

🇺🇦 85.137.57.233

🇸🇬 84.75.148.50

🇺🇸 76.192.155.18

🇺🇸 64.23.132.216

🇸🇬 47.84.49.122

🇪🇬 41.236.232.31

🇺🇸 34.199.198.213

🇺🇸 34.102.1.47

🇧🇪 34.62.33.213

🇺🇸 18.218.118.203

🇧🇷 16.5.0.245

🇮🇷 2.180.36.41

🇳🇱 193.47.62.69