JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

70.153.25.65

Neutral Activity

Abuse Confidence Score

0% Low Risk

37 reports

23 reporters · latest 7 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇮🇩 Indonesia
City: Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

70.153.25.65 has been reported 37 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

37 from 23 distinct reporters

First reported

March 30th 2026

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-06 09:23:52 UTC · (7 months ago)	FortiWeb WAF: 40 attacks detected. Threat Score: 9200. Types: Client Management(20), Block IP List(20). Origin: Indonesia.	Web App Attack
🇺🇸 entangled_mongoose	2026-04-06 01:00:07 UTC · (7 months ago)	Probed /.vscode/sftp.json.	Web App Attack
Anonymous	2026-04-05 23:23:02 UTC · (7 months ago)	T: f2b 404 5x	Web App Attack
🇺🇸 TPI-Abuse	2026-04-05 12:59:27 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 70.153.25.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 08:59:24.096641 2026] [security2:error] [pid 5541:tid 5541] [client 70.153.25.65:0] ModSecuri ... show more (mod_security) mod_security (id:210492) triggered by 70.153.25.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 08:59:24.096641 2026] [security2:error] [pid 5541:tid 5541] [client 70.153.25.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextmoon.com"] [uri "/sftp-config.json"] [unique_id "adJcrKphJ_02roMbzoj78AAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-05 12:20:03 UTC · (7 months ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇩🇪 london2038.com	2026-04-05 12:04:02 UTC · (7 months ago)	Probing for exploits 70.153.25.65 - - [05/Apr/2026:14:03:58 +0200] "GET /sftp-config.json HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" 70.153.25.65 - - [ ... show more Probing for exploits 70.153.25.65 - - [05/Apr/2026:14:03:58 +0200] "GET /sftp-config.json HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" 70.153.25.65 - - [05/Apr/2026:14:03:58 +0200] "GET /.vscode/sftp.json HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" show less	Hacking Web App Attack
🇳🇿 Antinson	2026-04-05 05:00:10 UTC · (7 months ago)	High error rate and elevated request volume targeting cPanel servers	Bad Web Bot
🇺🇸 Rip	2026-04-05 04:06:57 UTC · (7 months ago)	Automated recon attempt targeting restricted and sensitive paths.	Web App Attack
🇳🇱 DrLex0	2026-04-05 03:15:17 UTC · (7 months ago)	Poking for config files 70.153.25.65 80 - [05/Apr/2026:03:15:07 +0000] "GET / HTTP/1.1" 301 604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" 70.153.25.65 443 - [05/Apr/ ... show more Poking for config files 70.153.25.65 80 - [05/Apr/2026:03:15:07 +0000] "GET / HTTP/1.1" 301 604 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" 70.153.25.65 443 - [05/Apr/2026:03:15:08 +0000] "GET / HTTP/1.1" 200 7797 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" 70.153.25.65 80 - [05/Apr/2026:03:15:09 +0000] "GET /ftpsync.settings HTTP/1.1" 404 2439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" 70.153.25.65 80 - [05/Apr/2026:03:15:17 +0000] "GET /.vscode/sftp.json HTTP/1.1" 404 2439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-04 21:22:57 UTC · (7 months ago)	70.153.25.65 - - [04/Apr/2026:23:22:57 +0200] "GET /sftp-config.json HTTP/1.1" 403 4048 ...	Web App Attack
Anonymous	2026-04-04 20:35:03 UTC · (7 months ago)	PSCSERV WPSCAN 70.153.25.65	Bad Web Bot Web App Attack
🇦🇺 nzhost.co.nz	2026-04-04 13:09:46 UTC · (7 months ago)	$f2bV_matches	Hacking Brute-Force
Anonymous	2026-04-04 09:24:59 UTC · (7 months ago)	FortiWeb WAF: 10 attacks detected. Threat Score: 7100. Types: Client Management(5), Block IP List(5). Origin: Indonesia.	Web App Attack
🇯🇵 Valhalla	2026-04-04 04:57:47 UTC · (7 months ago)	/ftpsync.settings	Hacking Web App Attack
🇫🇮 oh.mg	2026-04-03 16:42:48 UTC · (7 months ago)	[Fri Apr 03 18:42:46.392643 2026] [security2:error] [pid 4035171:tid 4035174] [client 70.153.25.65:55528] [client 70.153.25.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/us ... show more [Fri Apr 03 18:42:46.392643 2026] [security2:error] [pid 4035171:tid 4035174] [client 70.153.25.65:55528] [client 70.153.25.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.cat"] [uri "/sftp-config.json"] [unique_id "ac_uBlVysBJNButwC-r9hwAAAYE"] [Fri Apr 03 18:42:47.880465 2026] [security2:error] [pid 4035143:tid 4035162] [client 70.153.25.65:57012] [client 70.153.25.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag ... show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 195.66.192.18

🇳🇱 193.176.31.203

🇳🇱 193.47.62.69

🇬🇧 192.248.150.180

🇺🇸 162.158.91.99

🇩🇪 144.31.25.162

🇧🇬 79.124.40.150

🇺🇸 73.34.204.194

🇺🇸 66.80.39.103

🇻🇪 190.72.87.237

🇨🇦 174.89.224.10

🇧🇷 128.201.0.208

🇵🇰 124.29.214.132

🇲🇩 92.115.29.111

🇮🇳 45.120.57.50

🇻🇪 38.188.232.126

🇸🇪 13.49.243.151

🇰🇷 222.97.112.179

🇳🇱 185.223.235.62

🇨🇳 119.166.29.95