JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.165.1.245

102.165.1.245 was found in our database!

This IP was reported 143 times. Confidence of Abuse is 12%: ?

12%

ISP	Internet Utilities Africa (PTY) LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61317
Domain Name	hivelocity.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.165.1.245

Whois 102.165.1.245

IP Abuse Reports for 102.165.1.245:

This IP address has been reported a total of 143 times from 24 distinct sources. 102.165.1.245 was first reported on September 17th 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ipblock.com	2026-06-03 05:22:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-06-01 14:13:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-30 15:13:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-29 14:41:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-28 09:24:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-27 01:26:00 (3 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-25 20:34:00 (3 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-24 19:01:00 (3 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-23 18:18:00 (3 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-22 11:23:00 (3 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 10:41:02 (4 weeks ago)	(mod_security) mod_security (id:210350) triggered by 102.165.1.245 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.165.1.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 06:40:56.130442 2026] [security2:error] [pid 9238:tid 9238] [client 102.165.1.245:56537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.techlinks.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.techlinks.com"] [uri "/"] [unique_id "ag2PuMlw-T_8qlr0sw2QxQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 02:32:28 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 102.165.1.245 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.165.1.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 22:32:18.138920 2026] [security2:error] [pid 9153:tid 9153] [client 102.165.1.245:44919] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|infraredcoatings.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "infraredcoatings.com"] [uri "/itar_regulations.pdf"] [unique_id "agaFsv2zOrhUZuUnsZUCHwAAAAo"], referer: http://infraredcoatings.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-10 05:10:00 (1 month ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-09 02:09:00 (1 month ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-07 10:51:00 (1 month ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 143 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.136.15.11

🇳🇱 176.65.149.236

🇵🇰 175.107.214.219

🇨🇦 159.203.44.105

🇸🇬 128.199.64.40

🇺🇸 108.167.175.44

🇲🇽 47.87.11.165

🇺🇸 205.210.31.68

🇨🇳 125.36.255.167

🇨🇳 123.245.84.157

🇺🇸 100.37.159.10

🇷🇺 91.79.175.5

🇱🇹 81.30.98.44

🇺🇸 48.214.144.195

🇹🇷 46.20.146.46

🇳🇱 45.148.10.151

🇬🇧 35.203.211.161

🇩🇪 213.209.159.56

🇺🇸 205.210.31.102

🇹🇼 198.235.24.35