AbuseIPDB » 108.165.75.16
108.165.75.16
This IP was reported 7 times. Confidence of
Abuse
is 30% : ?
ISP
Ace Data Centers, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS197450
Hostname(s)
108-165-75-16.ips.acedatacenter.com
Domain Name
acedatacenter.com
Country
🇹🇷
Turkey
City
Istanbul, Istanbul
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 108.165.75.16 :
This IP address has been reported a total of
7
times from
4 distinct
sources.
108.165.75.16 was first reported on
October 17th 2026 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇸🇬
spydithreatintel
2026-10-20 19:28:27
(2 days ago)
Web honeypot: 1 HTTP request(s) incl. secret-probe. Example: GET /.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 18:32:50
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.16 (108-165-75-16.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.16 (108-165-75-16.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:32:45.847334 2026] [security2:error] [pid 4544:tid 4544] [client 108.165.75.16:46794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bonegym.com"] [uri "/sftp-config.json"] [unique_id "atezzSQdi1bpB7EwBvg9RAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-20 09:01:36
(2 days ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇩🇪
pltcldvlpr
2026-10-19 08:26:54
(3 days ago)
CMS/framework probe: 108.165.75.16 - - [19/Oct/2026:10:26:53 +0200] "GET /.vscode/sftp.json HTTP/1.1 ...
show more
CMS/framework probe: 108.165.75.16 - - [19/Oct/2026:10:26:53 +0200] "GET /.vscode/sftp.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" asn=197450 org="Sunucun Bilgi Iletisim Teknolojileri ve Ticaret Ltd. Sti." country=TR
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 06:31:50
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.16 (108-165-75-16.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.16 (108-165-75-16.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:31:45.798187 2026] [security2:error] [pid 32342:tid 32342] [client 108.165.75.16:56768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capitalacc.com"] [uri "/sftp-config.json"] [unique_id "atRn0cdIWGFEPtJdIgUd-AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 20:39:03
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.16 (108-165-75-16.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.16 (108-165-75-16.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 16:38:55.810584 2026] [security2:error] [pid 22732:tid 22732] [client 108.165.75.16:21436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amlanddgtours.com"] [uri "/sftp-config.json"] [unique_id "atPc37IkDbOJJFyGC1n-lQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 11:11:41
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.16 (108-165-75-16.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.16 (108-165-75-16.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 07:11:33.604526 2026] [security2:error] [pid 9547:tid 9547] [client 108.165.75.16:63162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kimmimorikawa.com"] [uri "/sftp-config.json"] [unique_id "atNX5aToYKGzNI5jK0i66QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: