JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.165.1.241

102.165.1.241 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 7%: ?

ISP	Internet Utilities Africa (PTY) LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61317
Domain Name	hivelocity.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.165.1.241

Whois 102.165.1.241

IP Abuse Reports for 102.165.1.241:

This IP address has been reported a total of 51 times from 12 distinct sources. 102.165.1.241 was first reported on April 28th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-25 10:48:53 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 102.165.1.241 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.165.1.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 06:48:43.875053 2026] [security2:error] [pid 2335:tid 2335] [client 102.165.1.241:59077] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jeffjastro.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jeffjastro.com"] [uri "/equip/"] [unique_id "aj0Hi0uyfJ_tqFSEfNv0MAAAAAs"], referer: http://jeffjastro.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 04:06:13 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 102.165.1.241 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.165.1.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 00:06:05.115789 2026] [security2:error] [pid 15578:tid 15578] [client 102.165.1.241:40637] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.alexgitlin.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/"] [unique_id "ajypLRRdtZx59XEPcru4iwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-06-08 21:40:00 (1 month ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-31 12:26:00 (2 months ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-29 22:47:00 (2 months ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-28 18:25:00 (2 months ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-26 15:26:00 (2 months ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-25 14:06:00 (2 months ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-24 08:15:00 (2 months ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-23 05:31:00 (2 months ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-22 03:40:00 (2 months ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 13:58:10 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 102.165.1.241 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.165.1.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 09:58:03.143097 2026] [security2:error] [pid 7610:tid 7610] [client 102.165.1.241:38891] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.techlinks.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.techlinks.com"] [uri "/"] [unique_id "ag296337aA8_hn1IiH0rlQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-17 19:44:00 (2 months ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 21:50:50 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 102.165.1.241 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.165.1.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 17:50:42.604867 2026] [security2:error] [pid 27133:tid 27133] [client 102.165.1.241:60889] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.glassicannex.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.glassicannex.org"] [uri "/owners.htm"] [unique_id "agTyMlbXPo7SvWj6qxvdywAAAAs"], referer: http://www.glassicannex.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-09 15:01:00 (2 months ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 141.11.32.150

🇺🇸 104.248.63.144

🇲🇦 81.192.46.32

🇩🇪 213.209.159.238

🇰🇷 152.32.243.245

🇧🇷 152.32.200.213

🇺🇸 147.185.132.81

🇻🇳 116.110.151.49

🇬🇧 80.40.235.62

🇯🇵 34.146.102.11

🇮🇩 34.101.152.138

🇧🇪 34.76.141.16

🇰🇷 8.230.26.171

🇳🇱 216.173.88.226

🇳🇱 213.176.26.122

🇺🇸 173.231.200.81

🇯🇵 161.33.167.35

🇺🇸 147.185.132.137

🇮🇳 117.192.110.137

🇨🇳 106.13.48.117