JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 207.148.122.103

207.148.122.103 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 62%: ?

62%

ISP	The Constant Company, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Hostname(s)	207.148.122.103.vultrusercontent.com
Domain Name	constant.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 207.148.122.103

Whois 207.148.122.103

IP Abuse Reports for 207.148.122.103:

This IP address has been reported a total of 23 times from 10 distinct sources. 207.148.122.103 was first reported on July 25th 2026, and the most recent report was 18 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 WebNiraj	2026-07-25 13:52:02 (18 minutes ago)	(mod_security) mod_security (id:949110) triggered by 207.148.122.103 (SG/Singapore/207.148.122.103.v ... show more (mod_security) mod_security (id:949110) triggered by 207.148.122.103 (SG/Singapore/207.148.122.103.vultrusercontent.com): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-25 13:12:24 (57 minutes ago)	(mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultruserconte ... show more (mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 09:12:20.312215 2026] [security2:error] [pid 1837535:tid 1837535] [client 207.148.122.103:57398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yareblooms.click"] [uri "/sftp-config.json"] [unique_id "amS2NHtFHnnxWuiCzuxFGAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 12:43:05 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultruserconte ... show more (mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 08:43:00.634543 2026] [security2:error] [pid 1042320:tid 1042320] [client 207.148.122.103:56245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xplustchad.com"] [uri "/sftp-config.json"] [unique_id "amSvVC10sU1sO2JZxdKxjgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 12:07:59 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultruserconte ... show more (mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 08:07:52.808376 2026] [security2:error] [pid 1264447:tid 1264447] [client 207.148.122.103:59219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yankeetownfishing.com"] [uri "/sftp-config.json"] [unique_id "amSnGMo7CdVGbqc8hiGKrQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xserverx.ru	2026-07-25 12:02:45 (2 hours ago)	Honeypot triggered: IP: 207.148.122.103 Request to: https://xserverx.ru/sftp-config.json Method: GET ... show more Honeypot triggered: IP: 207.148.122.103 Request to: https://xserverx.ru/sftp-config.json Method: GET Host: xserverx.ru User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 Referer: Direct Country: SG ASN: Unknown Triggered rules: (/sftp-config\.json\|/sftp\.json), (/config\.\|config\.\|/configuration\.)js Timestamp: 2026-07-25T12:02:44.369Z show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-07-25 11:28:38 (2 hours ago)		Web App Attack
🇪🇸 alferez	2026-07-25 11:27:55 (2 hours ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 11:20:21 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultruserconte ... show more (mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 07:20:05.481346 2026] [security2:error] [pid 2243493:tid 2243493] [client 207.148.122.103:64697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xtcdesigns.com"] [uri "/sftp-config.json"] [unique_id "amSb5f5n22n06RAnG-ZjrwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RamSet	2026-07-25 11:18:22 (2 hours ago)	[ycr] HTTP-Probe on port 443 (via domain). 2 distinct paths probed in 5s. Sustained 4 req/min. Paths ... show more [ycr] HTTP-Probe on port 443 (via domain). 2 distinct paths probed in 5s. Sustained 4 req/min. Paths: /.vscode/sftp.json, /sftp-config.json show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-07-25 10:58:00 (3 hours ago)	Web exploit or injection attempt blocked by ModSecurity WAF.	SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 10:46:18 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultruserconte ... show more (mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 06:46:11.628117 2026] [security2:error] [pid 2343928:tid 2343928] [client 207.148.122.103:65048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yacht-register-holland.com"] [uri "/sftp-config.json"] [unique_id "amST87LLv0kZQ1xlgYVPhwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 10:19:49 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultruserconte ... show more (mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 06:19:42.294611 2026] [security2:error] [pid 31086:tid 31177] [client 207.148.122.103:49589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.helppeopleshare.net"] [uri "/y/yesnet.html/sftp-config.json"] [unique_id "amSNvsvcIHO5NtxwfD1WuwAAAQs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 YF	2026-07-25 10:00:16 (4 hours ago)	Distributed subnet attack — coordinated scanning from multiple IPs in the same /24	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 09:58:16 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultruserconte ... show more (mod_security) mod_security (id:210492) triggered by 207.148.122.103 (207.148.122.103.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:58:10.432591 2026] [security2:error] [pid 3956:tid 3956] [client 207.148.122.103:64734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xpd.us"] [uri "/sftp-config.json"] [unique_id "amSIsvGYybW6c46WD3c9EQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-25 09:42:03 (4 hours ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 123.56.7.43

🇺🇸 85.8.151.146

🇺🇸 66.132.195.65

🇳🇱 45.156.87.93

🇬🇧 35.203.210.152

🇨🇭 209.99.190.99

🇺🇸 206.189.209.165

🇳🇱 195.178.110.227

🇳🇱 195.178.110.100

🇪🇨 194.31.106.24

🇭🇰 152.32.185.95

🇫🇮 147.185.133.190

🇫🇮 147.185.133.24

🇩🇪 130.12.180.174

🇸🇬 114.119.144.143

🇷🇴 92.118.39.205

🇺🇸 65.111.9.209

🇫🇷 51.159.149.103

🇳🇱 45.148.10.204

🇷🇴 2.57.122.238