JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.156.242.198

103.156.242.198 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	Kirino LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41378
Domain Name	as41378.net
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.156.242.198

Whois 103.156.242.198

IP Abuse Reports for 103.156.242.198:

This IP address has been reported a total of 30 times from 7 distinct sources. 103.156.242.198 was first reported on September 13th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-04 17:08:29 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.156.242.198 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.156.242.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 13:08:24.893992 2026] [security2:error] [pid 32754:tid 32754] [client 103.156.242.198:3052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exhaustthelimits.org"] [uri "/.env.staging"] [unique_id "akk-CJNXkf0rYpywAGTQxwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 08:15:52 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.156.242.198 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.156.242.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 04:15:45.006363 2026] [security2:error] [pid 1144:tid 1144] [client 103.156.242.198:33354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedfarmersmarkets.org"] [uri "/.env.staging"] [unique_id "akYeMUcOojlX6UTEYm_JmgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 05:26:01 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.156.242.198 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.156.242.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 01:25:54.716853 2026] [security2:error] [pid 27276:tid 27276] [client 103.156.242.198:4674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cherith-bible-inst.org"] [uri "/.env.staging"] [unique_id "akX2Ysuxqdh6CxGbdJ_mCAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 20:09:29 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 103.156.242.198 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.156.242.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 16:09:23.846283 2026] [security2:error] [pid 29027:tid 29027] [client 103.156.242.198:26072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "budinger.org"] [uri "/.env.production"] [unique_id "akVz84ntA5DFp_eHxGl6yAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 pingusurmars	2026-03-09 06:21:21 (5 months ago)	Blocked by UFW on amperetwo [443/tcp] Source port: 57528 TTL: 53 Packet length: 60 TOS: 0x00 This r ... show more Blocked by UFW on amperetwo [443/tcp] Source port: 57528 TTL: 53 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 marzzzello	2025-12-16 02:57:14 (8 months ago)	Ports: 196x 20485	Port Scan
🇩🇪 marzzzello	2025-12-16 01:04:22 (8 months ago)	Ports: 224x 20485	Port Scan
🇩🇪 marzzzello	2025-12-15 04:02:43 (8 months ago)	Ports: 217x 20485	Port Scan
🇩🇪 marzzzello	2025-12-15 00:03:54 (8 months ago)	Ports: 224x 20485	Port Scan
🇩🇪 marzzzello	2025-12-14 01:02:53 (8 months ago)	Ports: 217x 20485	Port Scan
🇩🇪 marzzzello	2025-12-14 00:03:31 (8 months ago)	Ports: 224x 20485	Port Scan
🇩🇪 marzzzello	2025-12-13 08:02:32 (8 months ago)	Ports: 215x 20485	Port Scan
🇩🇪 marzzzello	2025-12-13 07:03:21 (8 months ago)	Ports: 222x 20485	Port Scan
🇩🇪 marzzzello	2025-12-13 05:02:54 (8 months ago)	Ports: 216x 20485	Port Scan
🇩🇪 marzzzello	2025-12-13 01:04:13 (8 months ago)	Ports: 223x 20485	Port Scan

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 211.20.14.156

🇫🇷 185.217.155.54

🇮🇳 115.245.111.246

🇩🇪 82.115.26.111

🇵🇪 38.56.214.27

🇲🇽 202.5.99.28

🇪🇨 200.93.248.58

🇵🇱 185.233.25.226

🇨🇳 122.97.212.157

🇮🇳 115.244.164.14

🇨🇦 50.92.235.230

🇯🇵 34.97.247.83

🇺🇸 18.221.219.149

🇮🇷 217.60.255.130

🇲🇽 189.203.207.162

🇺🇦 185.250.21.217

🇻🇳 160.30.157.211

🇦🇷 152.170.92.139

🇺🇸 151.101.65.229

🇺🇸 136.115.194.137