JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.139.202.221

103.139.202.221 was found in our database!

This IP was reported 184 times. Confidence of Abuse is 0%: ?

ISP	Sea Gem Company Limited
Usage Type	Fixed Line ISP
ASN	AS135905
Domain Name	seagem.vn
Country	🇻🇳 Viet Nam
City	Ho Chi Minh City, Ho Chi Minh City (HCMC)

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.139.202.221

Whois 103.139.202.221

IP Abuse Reports for 103.139.202.221:

This IP address has been reported a total of 184 times from 64 distinct sources. 103.139.202.221 was first reported on December 24th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-03-21 03:31:03 (1 year ago)	Portscan: TCP/4443 (8x)	Port Scan
🇳🇱 ATV	2025-03-21 03:12:04 (1 year ago)	Unsolicited connection attempts to port 4443	Port Scan
🇫🇷 IRISIO	2025-03-20 14:08:30 (1 year ago)	scans/SQL injection/spam posts : 2 queries	SQL Injection Web App Attack
🇩🇪 marzzzello	2025-03-20 13:47:21 (1 year ago)	Ports: 5x 4443	Port Scan
🇹🇭 Sawasdee	2025-03-20 08:15:07 (1 year ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
Anonymous	2025-03-19 11:06:26 (1 year ago)	Excessive crawling/scraping	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-03-19 09:04:51 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.139.202.221 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.139.202.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 19 05:04:44.050764 2025] [security2:error] [pid 15477:tid 15477] [client 103.139.202.221:53910] [client 103.139.202.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guthrieclan.us"] [uri "/.env"] [unique_id "Z9qIrCStOyep5kBzKrIuzwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 penjaga BRIN	2025-03-19 07:19:03 (1 year ago)	apache-alfa-111	Web App Attack
🇬🇧 openstrike.co.uk	2025-03-19 06:13:05 (1 year ago)	5 attacks on env grabbing URLs: GET /.env.example HTTP/1.1	Hacking
🇩🇪 Hary74656	2025-03-19 01:22:57 (1 year ago)	[Wed Mar 19 02:22:39.809172 2025] [:error] [pid 814350:tid 814446] [client 103.139.202.221:50932] [c ... show more [Wed Mar 19 02:22:39.809172 2025] [:error] [pid 814350:tid 814446] [client 103.139.202.221:50932] [client 103.139.202.221] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "piwik.weavernet.at"] [uri "/.env"] [unique_id "Z9ocXz8D-z6gYl4EuRtRQwAABCY"] [Wed Mar 19 02:22:43.557423 2025] [:error] [pid 814302:tid 814407] [client 103.139.202.221:51254] [client 103.139.202.221] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-c ... show less	Web App Attack
Anonymous	2025-03-18 04:11:24 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-03-18 02:21:53 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.139.202.221 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.139.202.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 22:21:46.772440 2025] [security2:error] [pid 875:tid 875] [client 103.139.202.221:42296] [client 103.139.202.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelholdawayvideos.info"] [uri "/.env"] [unique_id "Z9jYuk-2RngHyDPiyKpZdwAAAFU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-17 23:23:05 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.139.202.221 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.139.202.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 19:22:57.622155 2025] [security2:error] [pid 11357:tid 11357] [client 103.139.202.221:49140] [client 103.139.202.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wandathelittlestwizard.com"] [uri "/.env"] [unique_id "Z9iu0T83p1bbaRC9Vo7fyAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-17 21:33:51 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.139.202.221 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.139.202.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 17:33:47.436291 2025] [security2:error] [pid 1360276:tid 1360276] [client 103.139.202.221:41148] [client 103.139.202.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "troop42sm.thelowensteinfamily.com"] [uri "/.env"] [unique_id "Z9iVO9bY9tfescUzEKLW6AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-17 20:21:47 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.139.202.221 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.139.202.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 16:21:39.965934 2025] [security2:error] [pid 32151:tid 32151] [client 103.139.202.221:39924] [client 103.139.202.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thongbikini.teenyb.com.models.teenyb.com"] [uri "/.env"] [unique_id "Z9iEU4hvyptWmcC5MODrWQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 184 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇴 193.163.125.218

🇨🇳 171.104.143.176

🇪🇸 82.223.202.174

🇯🇵 161.33.14.212

🇨🇳 120.48.39.220

🇳🇱 87.199.203.219

🇷🇴 80.94.92.120

🇩🇪 69.5.169.233

🇺🇸 34.206.212.24

🇳🇱 5.61.209.224

🇺🇦 178.136.105.16

🇭🇰 172.253.5.30

🇫🇷 91.231.89.209

🇵🇱 74.248.33.65

🇺🇸 216.73.216.69

🇷🇴 193.32.162.203

🇧🇷 189.90.55.243

🇧🇷 177.42.100.180

🇧🇷 170.0.62.165

🇩🇪 167.94.146.41