JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.117.95.119

103.117.95.119 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 68%: ?

68%

ISP	HostRoyale Technologies Pvt Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203020
Domain Name	hostroyale.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.117.95.119

Whois 103.117.95.119

IP Abuse Reports for 103.117.95.119:

This IP address has been reported a total of 15 times from 12 distinct sources. 103.117.95.119 was first reported on July 3rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-12 00:22:44 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
Anonymous	2026-07-09 21:23:31 (3 days ago)	Malicious activity	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-07-09 19:12:42 (3 days ago)	[redacted] 103.117.95.119 - - [09/Jul/2026:20:12:39 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 68 ... show more [redacted] 103.117.95.119 - - [09/Jul/2026:20:12:39 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 6848 0/59645 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 103.117.95.119 - - [09/Jul/2026:20:12:40 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 1539 0/58772 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇪🇸 pipeline.es	2026-07-09 15:21:02 (3 days ago)	Web scanning / probing for vulnerable paths \| URL: /.vscode/sftp.json \| Evidence: jelouuholidays.com ... show more Web scanning / probing for vulnerable paths \| URL: /.vscode/sftp.json \| Evidence: jelouuholidays.com 103.117.95.119 - - [09/Jul/2026:17:18:06 +0200] \"GET /.vscode/sftp.json HTTP/1.1\" 404 33175 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=IN \| ASN: HostRoyale Technologies Pvt Ltd \| Country: IN show less	Port Scan Web App Attack
Anonymous	2026-07-09 07:00:15 (3 days ago)	\| [Dangerous/Nepal] Aggressive IP 103.117.95.119 (~30 hits). Type: DoS Defender- Web server 400 erro ... show more \| [Dangerous/Nepal] Aggressive IP 103.117.95.119 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇧🇪 cmbplf	2026-07-08 03:43:57 (5 days ago)	218 requests with url.path *sftp.json	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-07-08 01:12:32 (5 days ago)	Restricted File Access Attempt. Matched phrase ".vscode" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 22:12:12 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 103.117.95.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.117.95.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 18:11:53.531842 2026] [security2:error] [pid 14982:tid 14982] [client 103.117.95.119:44742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acworthga.us"] [uri "/sftp-config.json"] [unique_id "ak15qbhbLMNulFF1k21U3wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-07 20:13:42 (5 days ago)	(caddyscan) Scanner path probe from 103.117.95.119 (IN/India/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 103.117.95.119 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 404 223 103.117.95.119 - - [07/Jul/2026:20:13:41 +0000] "GET /.vscode/sftp.json HTTP/1.1" [REDACTED] 200 2627 103.117.95.119 - - [07/Jul/2026:20:13:41 +0000] "GET /.vscode/sftp.json HTTP/1.1" [REDACTED] 200 2627 103.117.95.119 - - [07/Jul/2026:20:13:41 +0000] "GET /.vscode/sftp.json HTTP/1.1" [REDACTED] 404 219 103.117.95.119 - - [07/Jul/2026:20:13:41 +0000] "GET /.vscode/sftp.json HTTP/1.1" [REDACTED] 200 2627 103.117.95.119 - - [07/Jul/2026:20:13:41 +0000] "GET /.vscode/sftp.json HTTP/1.1" show less	Port Scan
Anonymous	2026-07-06 07:19:50 (6 days ago)	PSCSERV WPSCAN 103.117.95.119	Bad Web Bot Web App Attack
🇫🇷 Savoie	2026-07-05 16:43:00 (1 week ago)	103.117.95.119 *.* - [05/Jul/2026:18:43:21 +0200] "GET /sftp-config.json HTTP/1.1" 302 250 "-" " ... show more 103.117.95.119 *.* - [05/Jul/2026:18:43:21 +0200] "GET /sftp-config.json HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 22:27:06 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 103.117.95.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.117.95.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 18:26:58.146394 2026] [security2:error] [pid 16559:tid 16574] [client 103.117.95.119:20728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ceresfund.com"] [uri "/sftp-config.json"] [unique_id "akmIsgGTlCC_YvAz_LYchwAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:16:27 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 103.117.95.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.117.95.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:16:21.965493 2026] [security2:error] [pid 1831:tid 1831] [client 103.117.95.119:37090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oceanicpier.com"] [uri "/sftp-config.json"] [unique_id "akhQ1RX0-NMi4WBbTQHKbgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 16:52:17 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 103.117.95.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.117.95.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 12:52:01.972679 2026] [security2:error] [pid 32357:tid 32357] [client 103.117.95.119:3396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "obfetal.com"] [uri "/sftp-config.json"] [unique_id "akfoseao5EoanjfGEICDdQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 omc	2026-07-03 11:42:17 (1 week ago)	AH01630: Client denied by server config	Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇴 185.12.59.118

🇲🇾 47.254.231.20

🇭🇰 218.103.36.176

🇺🇸 172.236.123.208

🇺🇸 172.200.228.35

🇨🇱 136.248.247.188

🇫🇷 89.93.27.75

🇺🇸 81.30.98.92

🇺🇸 47.251.9.231

🇺🇸 35.243.243.53

🇳🇱 195.178.110.228

🇦🇴 193.163.125.167

🇲🇴 182.93.7.194

🇮🇩 163.7.11.155

🇩🇪 82.165.175.206

🇱🇹 81.30.98.142

🇺🇸 64.62.156.10

🇮🇳 61.2.212.194

🇰🇷 220.86.191.141

🇺🇸 205.210.31.73