JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.142.140.154

103.142.140.154 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 7%: ?

ISP	Kirino LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41378
Domain Name	as41378.net
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.142.140.154

Whois 103.142.140.154

IP Abuse Reports for 103.142.140.154:

This IP address has been reported a total of 10 times from 4 distinct sources. 103.142.140.154 was first reported on September 15th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-13 05:56:10 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-05 18:10:00 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 14:09:53.457086 2026] [security2:error] [pid 27432:tid 27432] [client 103.142.140.154:17164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grandpont-house.org"] [uri "/.env.local"] [unique_id "akqd8cPGPemt-9nrYlwilgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 17:04:26 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 13:04:22.995630 2026] [security2:error] [pid 27898:tid 27923] [client 103.142.140.154:41120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "giere.org"] [uri "/.env"] [unique_id "akqOlu55iUL4gZqG85Y4rAAAAVY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 15:26:30 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 11:26:25.820524 2026] [security2:error] [pid 26034:tid 26034] [client 103.142.140.154:39950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.goldcountrygermanamericanclub.org"] [uri "/.env.local"] [unique_id "akp3odnH6GdWY7cmqS_lUQAAAAI"], referer: https://goldcountrygermanamericanclub.org/.env.local show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 23:30:50 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 19:30:44.198691 2026] [security2:error] [pid 4722:tid 4722] [client 103.142.140.154:14080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forerunnersjazz.org"] [uri "/.env.production"] [unique_id "akmXpDwj9N2P28bIsPiKlwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 02:15:56 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 22:15:51.655822 2026] [security2:error] [pid 29731:tid 29731] [client 103.142.140.154:57130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cosmicdebris.org"] [uri "/wp-config.php.old"] [unique_id "akcbVyeC9NC8E3zFF7E5GAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 14:32:35 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 10:32:27.239269 2026] [security2:error] [pid 12520:tid 12520] [client 103.142.140.154:25964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boens.org"] [uri "/.env.production"] [unique_id "akUk-72f7HxfPtE2mCuhdQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 23:50:05 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.142.140.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 19:49:59.926485 2026] [security2:error] [pid 2527:tid 2527] [client 103.142.140.154:58224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "al-bukhari.org"] [uri "/wp-config.php.bak"] [unique_id "akMEpxXKiCUCp6XAvvAUAQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-01-02 07:08:13 (7 months ago)	IM360 WAF: Improper Privilege Management vulnerability in HasThemes HT Mega <= 2.2.0 (CVE-2023-37999 ... show more IM360 WAF: Improper Privilege Management vulnerability in HasThemes HT Mega <= 2.2.0 (CVE-2023-37999) MV:administrator show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-09-15 23:53:23 (11 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400c:c0d::122

🇳🇱 195.178.110.217

🇦🇷 186.19.123.93

🇩🇪 167.94.146.39

🇧🇷 45.205.1.246

🇳🇱 195.178.110.218

🇧🇷 178.95.47.1

🇹🇼 124.9.95.37

🇷🇺 92.126.223.175

🇵🇰 39.34.189.58

🇺🇸 23.94.102.136

🇩🇪 213.209.159.230

🇵🇱 194.180.48.39

🇨🇳 115.190.166.75

🇺🇸 96.231.180.100

🇺🇸 85.239.151.10

🇮🇩 36.95.221.140

🇬🇧 35.203.211.212

🇺🇸 162.252.52.192

🇺🇸 162.216.150.216