JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.65.237.153

Neutral Activity

Abuse confidence score ?

0% Low Risk

74 reports

31 reporters · latest 9 months ago

ISP	PT Berkah Solusi Teknologi Informasi
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135450
Domain Name	ptbsti.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.65.237.153 has been reported 74 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.65.237.153

Export CSV

This IP address has been reported a total of 74 times from 31 distinct sources. 103.65.237.153 was first reported on October 15th 2024, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-12-25 19:40:54 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 103.65.237.153 (vps-ddns.fanure.com): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 103.65.237.153 (vps-ddns.fanure.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 14:40:47.705004 2025] [security2:error] [pid 12945:tid 12945] [client 103.65.237.153:51538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.teenybikini.com"] [uri "/sftp-config.json"] [unique_id "aU2TPyYvUL5_o4zf911yRQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-25 18:52:20 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 103.65.237.153 (vps-ddns.fanure.com): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 103.65.237.153 (vps-ddns.fanure.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 13:52:13.417828 2025] [security2:error] [pid 24684:tid 24789] [client 103.65.237.153:56991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.adprospb.com"] [uri "/made-in-usa-promotional-items.html/sftp-config.json"] [unique_id "aU2H3RauszB6EX2Lljl47QAAAFY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Bensay	2025-12-25 10:17:26 (9 months ago)	[Thu Dec 25 11:17:26.148452 2025] [authz_core:error] [pid 412369:tid 412369] [client 103.65.237.153: ... show more [Thu Dec 25 11:17:26.148452 2025] [authz_core:error] [pid 412369:tid 412369] [client 103.65.237.153:64727] AH01630: client denied by server configuration: /var/www/empty/sftp-config.json [Thu Dec 25 11:17:26.536560 2025] [authz_core:error] [pid 407690:tid 407690] [client 103.65.237.153:64739] AH01630: client denied by server configuration: /var/www/empty/.vscode ... show less	Hacking Bad Web Bot Web App Attack
🇳🇱 ParaBug	2025-12-25 06:29:41 (9 months ago)	103.65.237.153 - - [25/Dec/2025:07:29:40 +0100] "GET /sftp-config.json HTTP/1.1" 301 517 "-" "Mozill ... show more 103.65.237.153 - - [25/Dec/2025:07:29:40 +0100] "GET /sftp-config.json HTTP/1.1" 301 517 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Phishing Brute-Force Web App Attack
🇩🇪 Vegascosmetics	2025-12-15 22:50:43 (9 months ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
Anonymous	2025-12-15 05:49:47 (9 months ago)	Malicious activity	Bad Web Bot Web App Attack
🇨🇴 directorioeducativo.com	2025-12-15 02:56:12 (9 months ago)	GET URL: "/sftp-config.json"Agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/201 ... show more GET URL: "/sftp-config.json"Agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Web App Attack
Anonymous	2025-12-14 22:26:03 (9 months ago)	Automated report (2025-12-14T17:26:03-05:00). Caught probing for exposed FTP credentials.	Hacking
🇩🇪 big-cloud.nl	2025-12-14 19:10:03 (9 months ago)	Try to access /.vscode/sftp.json	Web App Attack
🇺🇸 TPI-Abuse	2025-12-14 18:33:22 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 103.65.237.153 (vps-ddns.fanure.com): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 103.65.237.153 (vps-ddns.fanure.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 13:33:17.332053 2025] [security2:error] [pid 4628:tid 4628] [client 103.65.237.153:57492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quantamnomad.com"] [uri "/sftp-config.json"] [unique_id "aT8C7S-pLwBT2al50TciXAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-14 04:23:01 (9 months ago)	Infected user bad webscan	Exploited Host
🇧🇪 cmbplf	2025-12-13 19:25:41 (9 months ago)	238 requests with url.path *config.json	Brute-Force Bad Web Bot
🇩🇪 MarkGGN	2025-12-13 16:58:46 (9 months ago)	Webexploits. 103.65.237.153 - - [13/Dec/2025:17:58:45 +0100] "GET /sftp-config.json HTTP/1.1" 404 14 ... show more Webexploits. 103.65.237.153 - - [13/Dec/2025:17:58:45 +0100] "GET /sftp-config.json HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.65.237.153 - - [13/Dec/2025:17:58:46 +0100] "GET /.vscode/sftp.json HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-13 16:40:18 (9 months ago)	Malicious activity detected	Hacking Web App Attack
🇱🇻 garmtech.com	2025-12-13 12:58:42 (9 months ago)	Attempted access to sensitive endpoint (/.vscode/sftp.json) detected. Automated scan or unauthorized ... show more Attempted access to sensitive endpoint (/.vscode/sftp.json) detected. Automated scan or unauthorized probing. show less	Web App Attack

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.227.178.112

🇺🇸 142.93.241.223

🇨🇳 111.26.62.39

🇳🇱 104.23.170.100

🇻🇳 171.236.58.34

🇺🇸 142.93.199.12

🇸🇬 136.85.46.54

🇻🇳 103.48.192.48

🇮🇷 85.185.201.10

🇳🇱 81.19.216.93

🇺🇸 35.188.69.123

🇦🇪 2001:8f8:1c6d:42f4:9538:dc76:be7f:ca3f

🇮🇸 185.40.122.250

🇨🇳 180.153.236.117

🇧🇷 177.85.31.40

🇺🇸 162.216.150.119

🇺🇸 142.93.192.66

🇺🇸 142.93.115.5

🇭🇰 118.193.47.92

🇨🇦 85.217.149.63