JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.145.254.196

103.145.254.196 was found in our database!

This IP was reported 215 times. Confidence of Abuse is 0%: ?

ISP	E-solutions Company Limited
Usage Type	Fixed Line ISP
ASN	AS135905
Domain Name	vietserver.vn
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.145.254.196

Whois 103.145.254.196

IP Abuse Reports for 103.145.254.196:

This IP address has been reported a total of 215 times from 68 distinct sources. 103.145.254.196 was first reported on November 5th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-06-17 21:43:51 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.145.254.196 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.145.254.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 17 17:43:44.778008 2025] [security2:error] [pid 3812847:tid 3812847] [client 103.145.254.196:60393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radtraininginc.com"] [uri "/.env"] [unique_id "aFHhkEmTIama1Xm3kB5g4gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-17 21:03:44 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.145.254.196 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.145.254.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 17 17:03:40.584433 2025] [security2:error] [pid 3135103:tid 3135103] [client 103.145.254.196:53202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "franklinheatandair.com"] [uri "/.env"] [unique_id "aFHYLKg-xTpvSgnbUrIlAAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-15 01:27:36 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2025-06-13 07:26:20 (1 year ago)	Excessive 404 Traffic Wordpress	Web App Attack
Anonymous	2025-06-12 09:36:40 (1 year ago)	Restricted File Access Requests	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-06-11 11:34:15 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.145.254.196 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.145.254.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 11 07:34:09.769873 2025] [security2:error] [pid 3195943:tid 3195943] [client 103.145.254.196:58230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "biorregulador.com"] [uri "/.env"] [unique_id "aElpscZwJR-rLrAAazIXfgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-11 11:06:09 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.145.254.196 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.145.254.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 11 07:06:04.426192 2025] [security2:error] [pid 804809:tid 804809] [client 103.145.254.196:62498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asociacioncopan.org"] [uri "/.env"] [unique_id "aEljHOGfgc1k3gRz6ZPOcQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2025-06-08 01:34:49 (1 year ago)	Multiple WAF Violations	Web App Attack
🇫🇮 as211431.net	2025-06-05 01:27:17 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 LRob	2025-06-03 07:30:15 (1 year ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇩🇪 LRob	2025-06-03 07:00:23 (1 year ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇪 LRob	2025-06-03 06:45:12 (1 year ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 paissangroup	2025-06-01 22:38:30 (1 year ago)	Multiple WAF Violations	Web App Attack
Anonymous	2025-06-01 10:44:47 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2025-06-01 04:30:14 (1 year ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host

Showing 1 to 15 of 215 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.145

🇺🇸 205.210.31.74

🇺🇸 195.184.76.175

🇦🇷 179.60.253.209

🇩🇪 159.100.20.23

🇬🇧 138.68.131.103

🇺🇸 130.131.219.188

🇨🇳 120.48.44.93

🇮🇹 79.3.96.178

🇩🇪 69.5.169.218

🇺🇸 65.49.1.32

🇺🇸 64.62.197.146

🇳🇱 45.148.10.141

🇮🇩 45.126.43.37

🇺🇸 216.218.206.98

🇺🇸 205.210.31.110

🇺🇸 205.210.31.101

🇹🇼 198.235.24.104

🇩🇪 194.88.98.102

🇨🇳 182.140.218.228