JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.165.1.152

102.165.1.152 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 15%: ?

15%

ISP	Internet Utilities Africa (PTY) LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61317
Domain Name	hivelocity.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.165.1.152

Whois 102.165.1.152

IP Abuse Reports for 102.165.1.152:

This IP address has been reported a total of 62 times from 21 distinct sources. 102.165.1.152 was first reported on January 14th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-12 22:39:58 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 102.165.1.152 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.165.1.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 18:39:54.060527 2026] [security2:error] [pid 17957:tid 17957] [client 102.165.1.152:32139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.creertest.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.creertest.com"] [uri "/"] [unique_id "anz2Oj8u2YkceCLRM-uqUwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-09 21:17:53 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 102.165.1.152 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.165.1.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 17:17:47.340827 2026] [security2:error] [pid 1849053:tid 1849053] [client 102.165.1.152:40003] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.register-yacht-dubai.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.register-yacht-dubai.com"] [uri "/"] [unique_id "anjuexSv-JK9SlaA1mxh0gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-08 22:44:13 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247	Exploited Host Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-08-06 19:08:01 (1 month ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 puddleduck	2026-07-30 02:06:00 (1 month ago)	Login attack	Spoofing Brute-Force Hacking
🇺🇸 TPI-Abuse	2026-07-13 19:46:42 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 102.165.1.152 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.165.1.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 15:46:35.631284 2026] [security2:error] [pid 20072:tid 20072] [client 102.165.1.152:28241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|oweng.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "oweng.com"] [uri "/"] [unique_id "alVAmwj5Nc-enTavvm9qKQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-03 07:39:32 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-39.102.165.1.152.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-39.102.165.1.152.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇬🇧 Oakley	2026-06-30 19:37:11 (2 months ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇺🇸 TPI-Abuse	2026-06-24 16:54:21 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 102.165.1.152 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.165.1.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 12:54:10.267164 2026] [security2:error] [pid 317:tid 317] [client 102.165.1.152:60377] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jeffjastro.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jeffjastro.com"] [uri "/"] [unique_id "ajwLsq4vEcrmf2RBu7c2jAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-06-10 14:31:40 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-31.102.165.1.152.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-31.102.165.1.152.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 ipblock.com	2026-06-01 08:57:00 (3 months ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-30 13:50:00 (3 months ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-30 05:05:10 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 102.165.1.152 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.165.1.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 01:05:06.570915 2026] [security2:error] [pid 7359:tid 7359] [client 102.165.1.152:37989] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.cybersoftware.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cybersoftware.org"] [uri "/"] [unique_id "ahpwAo8rXxtzuvk0FUgePQAAAAk"], referer: http://primepartners.globalprime.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-29 08:07:00 (3 months ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-28 05:02:00 (3 months ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.43.120.138

🇧🇪 207.175.240.36

🇺🇸 147.185.132.163

🇮🇳 103.190.7.147

🇬🇧 89.37.172.137

🇫🇷 85.69.240.210

🇫🇷 79.137.73.214

🇳🇱 45.148.10.151

🇺🇸 4.148.8.97

🇬🇧 193.32.209.237

🇨🇳 180.153.236.134

🇺🇦 176.120.110.159

🇺🇸 162.216.150.211

🇸🇬 157.230.40.249

🇺🇸 143.110.232.88

🇨🇳 139.198.29.172

🇸🇬 136.110.11.47

🇳🇱 109.160.32.217

🇺🇸 104.248.237.145

🇸🇪 84.32.50.30