JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.246.160.142

Neutral Activity

Abuse confidence score ?

0% Low Risk

35 reports

20 reporters · latest 2 years ago

ISP	HKBN Enterprise Solutions HK Limited
Usage Type	Fixed Line ISP
ASN	AS9381
Domain Name	hkbnes.com
Country	🇭🇰 Hong Kong
City	Tung Chung, Islands

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.246.160.142 has been reported 35 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.246.160.142

Export CSV

This IP address has been reported a total of 35 times from 20 distinct sources. 103.246.160.142 was first reported on June 29th 2022, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 kaCza	2023-10-25 19:50:34 (2 years ago)	Brute-Force WEB App Attack. Failed to log in via user account "admin".	Hacking Brute-Force Web App Attack
🇷🇴 INTEQ	2023-10-09 23:02:15 (2 years ago)	Web attack from 103.246.160.142	Web App Attack
🇩🇪 ut-addicted.com	2023-10-09 14:32:40 (2 years ago)	\[Mon Oct 09 16:32:39.766243 2023\] \[:error\] \[pid 17493:tid 140497293088512\] \[client 103.246.16 ... show more \[Mon Oct 09 16:32:39.766243 2023\] \[:error\] \[pid 17493:tid 140497293088512\] \[client 103.246.160.142:46603\] \[client 103.246.160.142\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/maggie.sql"\] \[unique_id "ZSQPBwYcCSrphHgUQE9V9wAAANA"\] show less	Brute-Force Web App Attack
🇧🇬 pa4080	2023-10-06 16:59:41 (2 years ago)	Detected by ModSecurity. Request URI: //tigger.sql	Hacking Web App Attack
🇷🇴 INTEQ	2023-10-06 10:18:45 (2 years ago)	Web attack from 103.246.160.142	Web App Attack
🇦🇺 MAGIC	2023-10-06 08:04:34 (2 years ago)	VM2 Bad user agents ignoring web crawling rules. Draining bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2023-10-06 07:05:01 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2023-10-06 05:29:01 (2 years ago)	Malicious activity detected	Hacking Brute-Force
🇨🇳 ThreatBook.io	2023-07-27 22:14:56 (3 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-27 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-27 05:44:33 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=amerika 2023-07-27 04:08:26 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=campos 2023-07-27 01:16:09 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=diamante show less	Web App Attack
🇨🇳 ThreatBook.io	2023-07-26 22:15:26 (3 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-26 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-26 09:16:30 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=baby14 2023-07-26 02:18:27 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=angel5 show less	Web App Attack
🇨🇳 ThreatBook.io	2023-07-23 22:15:58 (3 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-23 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-23 12:12:48 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=jacob 2023-07-23 10:47:12 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=maxwell 2023-07-23 12:42:23 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=papito show less	Web App Attack
🇨🇳 ThreatBook.io	2023-07-22 22:20:49 (3 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-22 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-22 00:38:19 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=qwerty1 2023-07-22 03:02:45 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=splinter 2023-07-22 08:10:07 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=monkey show less	Web App Attack
🇨🇳 ThreatBook.io	2023-07-21 22:17:13 (3 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-21 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-21 09:26:23 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=anfield 2023-07-21 09:51:15 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=asd123 2023-07-21 06:04:57 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=1q1q1q1q show less	Web App Attack
🇨🇳 ThreatBook.io	2023-07-20 22:18:00 (3 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-20 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/103.246.160.142 2023-07-20 01:06:10 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=carolina 2023-07-20 04:34:56 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=fredfred 2023-07-20 00:40:28 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=buddha show less	Web App Attack
🇬🇧 ubul	2023-06-13 14:59:36 (3 years ago)	2023-06-13T02:09:21 User [admin] from [103.246.160.142] failed to sign in to [DSM] via [password] du ... show more 2023-06-13T02:09:21 User [admin] from [103.246.160.142] failed to sign in to [DSM] via [password] due to authorization failure. show less	Brute-Force Exploited Host

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 164.92.128.240

🇮🇩 160.187.174.22

🇺🇸 137.184.183.204

🇨🇳 125.122.39.116

🇮🇳 122.183.45.171

🇰🇷 119.192.128.163

🇨🇳 101.204.251.231

🇳🇱 91.92.243.72

🇩🇪 69.5.169.58

🇺🇸 45.79.115.59

🇧🇪 34.62.133.61

🇺🇸 20.65.200.197

🇬🇧 3.8.201.123

🇰🇷 218.149.228.151

🇧🇪 198.235.24.252

🇺🇸 198.44.87.36

🇳🇱 192.253.248.226

🇺🇦 178.151.116.252

🇲🇽 172.195.104.24

🇺🇸 154.54.100.190