JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.162.103.4

139.162.103.4 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	139.162.0.0/16
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Domain Name	linode.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.162.103.4

Whois 139.162.103.4

IP Abuse Reports for 139.162.103.4:

This IP address has been reported a total of 27 times from 24 distinct sources. 139.162.103.4 was first reported on November 17th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 AutosOnShow	2026-06-19 17:30:07 (2 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-19 17:29:32.346 \|	Web App Attack
🇭🇺 whitehoodie	2026-06-19 14:55:08 (2 days ago)	AUTOMATED REPORT: Tried to access .env file	Hacking Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-06-19 09:01:04 (3 days ago)	Unauthorized access to webpage admin	Web App Attack
🇫🇮 oh.mg	2026-06-19 03:19:18 (3 days ago)	[Fri Jun 19 05:19:17.097657 2026] [security2:error] [pid 3938383:tid 3938386] [client 139.162.103.4: ... show more [Fri Jun 19 05:19:17.097657 2026] [security2:error] [pid 3938383:tid 3938386] [client 139.162.103.4:48590] [client 139.162.103.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/dump.sql"] [unique_id "ajS1NWIBNJrWEinMSqmT-QAAAIE"] [Fri Jun 19 05:19:17.410853 2026] [security2:error] [pid 3935222:tid 3935237] [client 139.162.103.4:48606] [client 139.162.103.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [t ... show less	Web App Attack Bad Web Bot
🇮🇪 AutosOnShow	2026-06-18 18:13:04 (3 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-18 18:12:24.579 \|	Web App Attack
🇩🇪 IloGus	2026-06-18 15:30:21 (3 days ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇦🇺 FEWA	2026-06-18 11:56:49 (4 days ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-06-18 08:04:05 (4 days ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-06-18 08:03:47.753 \|	Web App Attack
🇺🇸 jcbriar	2026-06-18 00:59:24 (4 days ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇫🇷 Campus France	2026-06-17 20:29:35 (4 days ago)	[Wed Jun 17 22:28:47.505232 2026] [php:error] [pid 136840] [client 139.162.103.4:49410] script '/var ... show more [Wed Jun 17 22:28:47.505232 2026] [php:error] [pid 136840] [client 139.162.103.4:49410] script '/var/www/html/config.php' not found or unable to stat [Wed Jun 17 22:28:54.942701 2026] [php:error] [pid 136835] [client 139.162.103.4:49702] script '/var/www/html/aws_config.php' not found or unable to stat [Wed Jun 17 22:29:10.940312 2026] [php:error] [pid 136855] [client 139.162.103.4:37040] script '/var/www/html/wp-config.php' not found or unable to stat [Wed Jun 17 22:29:29.986954 2026] [php:error] [pid 136840] [client 139.162.103.4:40586] script '/var/www/html/local.php' not found or unable to stat [Wed Jun 17 22:29:34.670978 2026] [php:error] [pid 137255] [client 139.162.103.4:40754] script '/var/www/html/secrets.php' not found or unable to stat ... show less	Brute-Force Web App Attack
Anonymous	2026-06-17 03:39:48 (5 days ago)	139.162.103.4 - - [17/Jun/2026:03:39:47 +0000] "GET /deploy/settings.prod.env/v1/secrets.json HTTP/1 ... show more 139.162.103.4 - - [17/Jun/2026:03:39:47 +0000] "GET /deploy/settings.prod.env/v1/secrets.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" "91.98.135.170" ... show less	Hacking Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-06-17 00:29:05 (5 days ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-06-17 00:28:18.819 \|	Web App Attack
🇺🇸 i553041	2026-06-16 22:34:13 (5 days ago)	139.162.103.4 - - [16/Jun/2026:22:34:10 +0000] "GET / HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT ... show more 139.162.103.4 - - [16/Jun/2026:22:34:10 +0000] "GET / HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 139.162.103.4 - - [16/Jun/2026:22:34:10 +0000] "GET / HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 139.162.103.4 - - [16/Jun/2026:22:34:10 +0000] "GET /config/secrets.yaml/staging/secrets.json HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 139.162.103.4 - - [16/Jun/2026:22:34:11 +0000] "GET /configs/application.ini HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 139.162.103.4 - - [16/Jun/2026:22:34:11 +0000] "GET /terraform/environments/prod/v2/service.yaml HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ... show less	Brute-Force SSH
🇫🇷 Flo Flo	2026-06-16 21:01:58 (5 days ago)	139.162.103.4 - - - [16/Jun/2026:23:01:57 +0200] "82.66.117.16" "GET / HTTP/1.1" 444 0 "-" "Mozilla/ ... show more 139.162.103.4 - - - [16/Jun/2026:23:01:57 +0200] "82.66.117.16" "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 0.000 ... show less	Web App Attack
🇬🇧 relianoid.com	2026-06-16 20:20:31 (5 days ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 152.32.233.100

🇩🇪 139.59.146.150

🇨🇳 120.194.50.39

🇺🇸 64.62.156.104

🇺🇸 50.6.228.32

🇸🇨 45.194.67.146

🇸🇪 45.159.12.190

🇳🇱 45.148.10.152

🇫🇷 37.59.204.154

🇮🇩 203.175.125.194

🇺🇸 150.136.214.177

🇩🇪 139.59.150.41

🇺🇸 135.222.40.118

🇨🇳 117.50.218.37

🇺🇸 74.235.100.130

🇺🇸 66.249.79.161

🇨🇦 15.235.96.7

🇬🇧 193.163.125.165

🇨🇳 183.221.20.155

🇰🇷 112.171.133.147