JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.142.140.155

103.142.140.155

Neutral Activity

76 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Kirino LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS41378

Domain Name

as41378.net

Country

🇸🇬 Singapore

City

Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.142.140.155 has been reported 76 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.142.140.155:

This IP address has been reported a total of 76 times from 54 distinct sources. 103.142.140.155 was first reported on June 23rd 2021, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-05 08:45:13 (2 months ago)	(mod_security) mod_security (id:949110) triggered by 103.142.140.155 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:949110) triggered by 103.142.140.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 04:45:06.652684 2026] [security2:error] [pid 4201:tid 4201] [client 103.142.140.155:62348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "geelhoed.org"] [uri "/.git/config"] [unique_id "akoZkku0fH1Tp_y_K7IYkQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 11:52:31 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 103.142.140.155 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.142.140.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 07:52:23.851218 2026] [security2:error] [pid 29240:tid 29293] [client 103.142.140.155:22176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daviscountyossr.org"] [uri "/.env"] [unique_id "akeid8rHode-q78m6acS1AAAAEs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 08:15:56 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 103.142.140.155 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.142.140.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 04:15:45.098057 2026] [security2:error] [pid 27514:tid 27532] [client 103.142.140.155:39242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedfinancialanalyst.org"] [uri "/.env.local"] [unique_id "akYeMRd831zKtU2pwfDD0AAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 JA	2023-07-12 14:00:37 (3 years ago)	ssh login attempt	Brute-Force SSH
🇮🇹 Dario B.	2022-10-13 12:51:12 (3 years ago)	DATE:2022-10-13 18:51:11, IP:103.142.140.155, PORT:ssh SSH brute force auth on honeypot server (epe- ... show more DATE:2022-10-13 18:51:11, IP:103.142.140.155, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq) show less	Brute-Force SSH
🇿🇦 IrisFlower	2022-10-13 03:57:14 (3 years ago)	Unauthorized connection attempt detected from IP address 103.142.140.155 to port 22 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2022-10-12 01:45:37 (3 years ago)	Unauthorized connection attempt detected from IP address 103.142.140.155 to port 22 [J]	Port Scan Hacking
🇩🇪 muety	2022-10-07 09:24:21 (3 years ago)	Banned after 3 attempts against sshd	Brute-Force SSH
🇧🇪 sid3windr	2022-10-06 15:24:58 (3 years ago)	sshd[3480597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho ... show more sshd[3480597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.140.155 user=root sshd[3480597]: Failed password for root from 103.142.140.155 port 51682 ssh2 sshd[3480620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.140.155 user=root sshd[3480620]: Failed password for root from 103.142.140.155 port 51684 ssh2 sshd[3480625]: Invalid user ubnt from 103.142.140.155 port 45166 show less	Brute-Force SSH
🇳🇱 nfrelink	2022-10-03 14:24:55 (3 years ago)	SSH login attempts (endlessh): Oct 03 18:24:54 xxxx.1rs.eu endlessh[764]: 2022-10-03T18:24:54.824Z A ... show more SSH login attempts (endlessh): Oct 03 18:24:54 xxxx.1rs.eu endlessh[764]: 2022-10-03T18:24:54.824Z ACCEPT host=::ffff:103.142.140.155 port=37840 fd=5 n=2/1020 show less	Brute-Force SSH
Anonymous	2022-10-02 18:14:24 (3 years ago)	port scan and connect, tcp 22 (ssh)	Port Scan
🇫🇷 security.rdmc.fr	2022-10-01 11:40:15 (3 years ago)	Automatic report - Banned IP Access	Web App Attack
🇨🇿 jaj.cz	2022-09-30 13:13:01 (3 years ago)	Sep 30 19:12:56 web sshd[1963984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Sep 30 19:12:56 web sshd[1963984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.140.155 user=root Sep 30 19:12:58 web sshd[1963984]: Failed password for root from 103.142.140.155 port 37054 ssh2 Sep 30 19:13:00 web sshd[1963986]: Invalid user ubnt from 103.142.140.155 port 37056 ... show less	Brute-Force SSH
🇫🇷 Max la Menace	2022-09-27 18:41:01 (3 years ago)	ssh brute force (P)	Brute-Force SSH
🇩🇪 marcel-knorr.de	2022-09-27 07:03:27 (3 years ago)	[MK-VM6] SSH login failed	Brute-Force SSH

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.236.112.131

🇺🇸 50.84.211.204

🇩🇪 43.228.157.8

🇦🇷 2800:110:3e00:100:250:56ff:fe8b:ed8

🇵🇾 200.61.51.82

🇹🇹 200.1.109.122

🇹🇼 198.235.24.49

🇯🇵 172.217.109.210

🇩🇪 167.94.146.53

🇭🇰 104.208.72.93

🇰🇷 222.239.251.12

🇬🇧 193.163.125.121

🇲🇴 125.31.2.160

🇸🇬 56.10.64.60

🇺🇸 35.236.70.74

🇷🇴 193.32.162.84

🇮🇶 185.158.22.150

🇺🇸 147.185.132.25

🇨🇳 111.19.212.140

🇷🇴 92.118.39.50