JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.53.36.68

Activity Trending Down

Abuse confidence score ?

1% Caution

8 reports

7 reporters · latest 3 weeks ago

ISP	IN
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203020
Domain Name	hostroyale.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 103.53.36.68

This IP address has been reported a total of 8 times from 7 distinct sources. 103.53.36.68 was first reported on May 21st 2024, and the most recent report was 3 weeks ago. In the last 60 days, the only reporter location was: United States of America with 1 report. The most common categories in these recent reports were: Exploited Host 1 time; DDoS Attack 1 time; Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 SX Communications	2026-08-29 13:39:07 (3 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 103.53.36.68: traffic from this add ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 103.53.36.68: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 MPL	2026-04-28 08:16:56 (4 months ago)	tcp/443 (8 or more attempts)	Port Scan
Anonymous	2026-02-18 11:04:07 (7 months ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2026-02-03 19:13:00 (7 months ago)	wordpress-trap	Web App Attack
🇮🇳 adamblack	2026-01-11 07:01:59 (8 months ago)	Automated WordPress probing attempt targeting /2019/wp-includes/wlwmanifest.xml	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-11-16 10:23:52 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 103.53.36.68 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 103.53.36.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 05:23:49.559539 2025] [security2:error] [pid 19687:tid 19698] [client 103.53.36.68:40100] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gafm.org\|F\|2"] [data ".gafm.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gafm.org"] [uri "/www.gafm.com"] [unique_id "aRmmNSjJv3BhcK1R8DrIOAAAAUk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-27 04:34:37 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 103.53.36.68 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 103.53.36.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 00:34:34.009001 2024] [security2:error] [pid 28087:tid 47852549490432] [client 103.53.36.68:57155] [client 103.53.36.68] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gafm.org\|F\|2"] [data ".gafm.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gafm.org"] [uri "/www.gafm.com"] [unique_id "Znzr2rcSJttoDrEzfDhU6AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-05-21 19:19:59 (2 years ago)	GET http://nzb.cloud.marche-be.com/ * statusCode: 503 * user-agent:Mozilla/5.0 (Windows NT 10.0; Win ... show more GET http://nzb.cloud.marche-be.com/ * statusCode: 503 * user-agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.92 Safari/537.36 show less	Web Spam Hacking Bad Web Bot

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 217.182.253.249

🇰🇷 211.105.71.4

🇧🇪 198.235.24.217

🇧🇪 198.235.24.216

🇳🇱 195.178.110.217

🇺🇸 159.89.139.75

🇨🇳 111.26.101.77

🇰🇷 106.243.155.71

🇺🇸 103.4.251.92

🇧🇪 34.156.119.43

🇧🇪 34.38.65.12

🇸🇬 8.219.188.175

🇷🇴 2.57.122.168

🇺🇸 212.32.69.220

🇮🇩 202.51.214.98

🇺🇸 192.169.232.223

🇳🇱 174.138.12.72

🇺🇸 162.216.149.244

🇺🇸 147.185.132.168

🇨🇳 124.31.104.115