JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.153.108.123

203.153.108.123 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 100%: ?

100%

ISP	Infrastruktur N2C
Usage Type	Fixed Line ISP
ASN	AS24207
Domain Name	express.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.153.108.123

Whois 203.153.108.123

IP Abuse Reports for 203.153.108.123:

This IP address has been reported a total of 54 times from 43 distinct sources. 203.153.108.123 was first reported on June 1st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 femboy.cat	2026-07-10 19:09:26 (1 day ago)	Port scan to tcp/2375 from 203.153.108.123	Brute-Force
🇩🇪 ValtonTahiri	2026-07-10 03:45:01 (1 day ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=203.153.108.123; proto=TCP; source_port=41414; target_port=4243; flags=SYN show less	Port Scan
Anonymous	2026-07-08 00:30:06 (3 days ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 sthoyer.de	2026-07-07 23:45:39 (3 days ago)	Jul 8 01:45:36 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jul 8 01:45:36 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=203.153.108.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7554 DF PROTO=TCP SPT=45296 DPT=2375 WINDOW=64240 RES=0x00 SYN URGP=0 Jul 8 01:45:37 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=203.153.108.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7555 DF PROTO=TCP SPT=45296 DPT=2375 WINDOW=64240 RES=0x00 SYN URGP=0 Jul 8 01:45:37 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=203.153.108.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7555 DF PROTO=TCP SPT=45296 DPT=2375 WINDOW=64240 RES=0x00 SYN URGP=0 Jul 8 01:45:38 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=203.153.108.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7556 DF PROTO=TCP SPT=45296 DPT=2375 WI ... show less	Port Scan
🇮🇩 soc-yk	2026-07-05 22:30:11 (5 days ago)	Type: suspicious_network_activity Risk: 74 Events: 258 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 74 Events: 258 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇨🇦 Blinker73	2026-07-05 09:04:31 (6 days ago)	2026-07-05T05:04 kernel: OUT= SRC=203.153.108.123 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=11743 DF ... show more 2026-07-05T05:04 kernel: OUT= SRC=203.153.108.123 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=11743 DF PROTO=TCP SPT=44112 DPT=2375 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-05T05:04 kernel: OUT= SRC=203.153.108.123 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=11744 DF PROTO=TCP SPT=44112 DPT=2375 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-05T05:04 kernel: OUT= SRC=203.153.108.123 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=11745 DF PROTO=TCP SPT=44112 DPT=2375 WINDOW=64240 RES=0x00 SYN URGP= show less	Port Scan
Anonymous	2026-07-04 17:30:06 (1 week ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 sthoyer.de	2026-07-04 17:02:31 (1 week ago)	Jul 4 19:02:26 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jul 4 19:02:26 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=203.153.108.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=5017 DF PROTO=TCP SPT=58996 DPT=2375 WINDOW=64240 RES=0x00 SYN URGP=0 Jul 4 19:02:27 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=203.153.108.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=5018 DF PROTO=TCP SPT=58996 DPT=2375 WINDOW=64240 RES=0x00 SYN URGP=0 Jul 4 19:02:28 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=203.153.108.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=5019 DF PROTO=TCP SPT=58996 DPT=2375 WINDOW=64240 RES=0x00 SYN URGP=0 Jul 4 19:02:29 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=203.153.108.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=4327 DF PROTO=TCP SPT=37372 DPT=2376 WI ... show less	Port Scan
🇬🇧 andypiper	2026-07-04 01:03:03 (1 week ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇦🇺 LiftUp Hosting	2026-07-04 00:10:05 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 2375 [1], 2376 [1], 4243 [1] TCP	Port Scan
🇫🇷 matthieul.dev	2026-07-03 22:05:48 (1 week ago)	Blocked by os-abuseipdb; 9 hits, proto=tcp, ports=2375,2376,4243	Port Scan Brute-Force
Anonymous	2026-07-03 16:25:18 (1 week ago)	Blocked by UFW (TCP on 2375) Source port: 54842 TTL: 45 Packet length: 60 TOS: 0x14 This report (fo ... show more Blocked by UFW (TCP on 2375) Source port: 54842 TTL: 45 Packet length: 60 TOS: 0x14 This report (for 203.153.108.123) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 zulzeen	2026-07-02 03:29:13 (1 week ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Infra/DevOps Attack)	Hacking Web App Attack
🇩🇪 london2038.com	2026-07-01 13:55:29 (1 week ago)	Connection atttempts against closed TCP ports Jul 1 15:55:26 BLOCK SRC=203.153.108.123 LEN=60 TOS=0 ... show more Connection atttempts against closed TCP ports Jul 1 15:55:26 BLOCK SRC=203.153.108.123 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=50792 DF PROTO=TCP SPT=50488 DPT=2375 WINDOW=64240 RES=0x00 SYN Jul 1 15:55:27 BLOCK SRC=203.153.108.123 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=50793 DF PROTO=TCP SPT=50488 DPT=2375 WINDOW=64240 RES=0x00 SYN Jul 1 15:55:28 BLOCK SRC=203.153.108.123 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=50794 DF PROTO=TCP SPT=50488 DPT=2375 WINDOW=64240 RES=0x00 SYN show less	Port Scan
🇩🇪 David Ferneding	2026-07-01 13:55:22 (1 week ago)	Blocked by UFW (TCP on 2376) Source port: 48130 TTL: 55 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2376) Source port: 48130 TTL: 55 Packet length: 60 TOS: 0x00 This report (for 203.153.108.123) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇪 197.232.159.7

🇮🇳 139.59.36.109

🇮🇩 103.59.160.248

🇺🇸 64.227.25.120

🇸🇬 43.173.178.210

🇨🇳 14.18.41.55

🇲🇳 203.21.120.126

🇮🇳 124.253.224.173

🇨🇳 111.225.214.154

🇮🇳 106.51.132.108

🇳🇱 45.148.10.147

🇧🇪 34.77.236.193

🇺🇸 209.85.214.173

🇺🇸 205.210.31.94

🇸🇬 172.253.236.215

🇨🇳 110.179.80.229

🇳🇱 45.148.10.62

🇺🇸 45.79.143.222

🇹🇼 45.43.37.254

🇺🇸 5.78.177.0