JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.65.237.55

Activity Trending Down

Abuse Confidence Score

47% Elevated

195 reports

86 reporters · latest 2 weeks ago

ISP: PT Berkah Solusi Teknologi Informasi
Usage Type: Data Center/Web Hosting/Transit
ASN: AS135450
Domain Name: ptbsti.com
Country: 🇮🇩 Indonesia
City: Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

195 from 86 distinct reporters

First reported

September 4th 2024

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 14 🇳🇱 Netherlands 7 🇩🇪 Germany 5

Most common categories Web App Attack 41 Bad Web Bot 26 Brute-Force 17 Hacking 7 SQL Injection 1

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-28 20:01:30 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:01:25.189627 2026] [security2:error] [pid 13969:tid 13969] [client 1 ... show more (mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:01:25.189627 2026] [security2:error] [pid 13969:tid 13969] [client 103.65.237.55:54771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rosawallas.com"] [uri "/.env"] [unique_id "arrHlW6EhxTbV1TvxP24VAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 19:37:08 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:37:04.417236 2026] [security2:error] [pid 11598:tid 11598] [client 1 ... show more (mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:37:04.417236 2026] [security2:error] [pid 11598:tid 11598] [client 103.65.237.55:57823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.recorplast.com"] [uri "/.env"] [unique_id "arrB4Kt9WfVx7mchIOXoLAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 19:20:36 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:20:32.921804 2026] [security2:error] [pid 27660:tid 27660] [client 1 ... show more (mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:20:32.921804 2026] [security2:error] [pid 27660:tid 27660] [client 103.65.237.55:56368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.qovintheloop.org"] [uri "/.env"] [unique_id "arq-AKwKY0whDzcZcdj5_QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-09-28 18:44:22 UTC · (1 month ago)	[redacted] 103.65.237.55 - - [28/Sep/2026:19:15:55 +0100] "GET /.env HTTP/1.1" 302 1558 0/107939 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 80 [redacted] 103.65.237.55 - - [28/Sep/2026: ... show more [redacted] 103.65.237.55 - - [28/Sep/2026:19:15:55 +0100] "GET /.env HTTP/1.1" 302 1558 0/107939 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 80 [redacted] 103.65.237.55 - - [28/Sep/2026:19:44:20 +0100] "GET /.env HTTP/1.1" 302 6818 0/72459 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 443 show less	Bad Web Bot Web App Attack
Anonymous	2026-09-28 18:20:25 UTC · (1 month ago)	103.65.237.55 www.patrz.eu - [28/Sep/2026:20:20:23 +0200] "GET /.env HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ...	Hacking Web App Attack
🇧🇪 voormedia	2026-09-28 17:50:45 UTC · (1 month ago)	Accessed trap at '/.env'	Web App Attack
🇩🇰 HostingGroup	2026-09-28 17:36:54 UTC · (1 month ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 1. First blocked: 2026-09-28.	Bad Web Bot Web App Attack
🇳🇱 MyGlobalFlowers	2026-09-28 17:05:15 UTC · (1 month ago)	Multiple WAF Violations	Web App Attack
🇩🇪 kkw	2026-09-28 15:31:13 UTC · (1 month ago)	[REDACTED] 103.65.237.55 - - [28/Sep/2026:17:31:12 +0200] "GET /.env HTTP/1.1" 302 4873 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... (mode: searching http-sensitive-files)	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 13:21:49 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 09:21:44.315267 2026] [security2:error] [pid 14010:tid 14010] [client 1 ... show more (mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 09:21:44.315267 2026] [security2:error] [pid 14010:tid 14010] [client 103.65.237.55:54456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.humans2humans.org"] [uri "/.env"] [unique_id "arpp6GGEnVWhy8C_NEv3vgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-09-28 13:18:14 UTC · (1 month ago)	[redacted] 103.65.237.55 - - [28/Sep/2026:13:58:21 +0100] "GET /.env HTTP/1.1" 302 6817 0/44712 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 103.65.237.55 - - [28/Sep/2026:14:1 ... show more [redacted] 103.65.237.55 - - [28/Sep/2026:13:58:21 +0100] "GET /.env HTTP/1.1" 302 6817 0/44712 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 103.65.237.55 - - [28/Sep/2026:14:18:12 +0100] "GET /.env HTTP/1.1" 302 6783 0/61384 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 443 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 12:57:48 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 08:57:43.782222 2026] [security2:error] [pid 24134:tid 24134] [client 1 ... show more (mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 08:57:43.782222 2026] [security2:error] [pid 24134:tid 24134] [client 103.65.237.55:55059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.headcount.dev"] [uri "/.env"] [unique_id "arpkR-_l_RBDgHLxIuzUsQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 12:04:50 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 08:04:44.072764 2026] [security2:error] [pid 13967:tid 13967] [client 1 ... show more (mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 08:04:44.072764 2026] [security2:error] [pid 13967:tid 13967] [client 103.65.237.55:64328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.freightmotivity.com"] [uri "/.env"] [unique_id "arpX3GckKH7-v4oNr91pjAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 11:41:40 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 07:41:37.117687 2026] [security2:error] [pid 1002:tid 1002] [client 103 ... show more (mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 07:41:37.117687 2026] [security2:error] [pid 1002:tid 1002] [client 103.65.237.55:59091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fccemetery.org"] [uri "/.env"] [unique_id "arpSca1Kx5agtbnYAtzEiQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 11:24:09 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 07:24:02.650935 2026] [security2:error] [pid 12602:tid 12602] [client 1 ... show more (mod_security) mod_security (id:210492) triggered by 103.65.237.55 (55.237.65.in-addr.arpa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 07:24:02.650935 2026] [security2:error] [pid 12602:tid 12602] [client 103.65.237.55:50140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.esendeniz.net"] [uri "/.env"] [unique_id "arpOUtkReMjBSR0C4WZb5gAAABY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 16 to 30 of 195 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 194.104.11.177

🇺🇸 107.0.200.227

🇺🇸 104.153.208.101

🇮🇳 103.86.68.221

🇮🇩 103.24.212.42

🇵🇹 94.62.129.190

🇵🇱 74.248.37.250

🇺🇸 73.169.136.62

🇺🇸 64.138.229.66

🇳🇱 204.76.203.53

🇨🇭 170.231.237.214

🇰🇷 121.133.167.123

🇺🇸 89.19.34.245

🇷🇺 80.68.4.83

🇸🇬 67.213.122.211

🇺🇸 57.141.4.65

🇺🇸 2604:a880:400:d1:0:5:5fca:1

🇲🇾 219.95.152.105

🇺🇸 217.217.45.38

🇻🇪 190.97.229.111