JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.164.218.32

202.164.218.32 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 11%: ?

11%

ISP	PT Indonesia Comnets Plus
Usage Type	Fixed Line ISP
ASN	AS9341
Domain Name	iconpln.net.id
Country	🇮🇩 Indonesia
City	Terbanggi Besar, Lampung

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.164.218.32

Whois 202.164.218.32

IP Abuse Reports for 202.164.218.32:

This IP address has been reported a total of 48 times from 3 distinct sources. 202.164.218.32 was first reported on July 3rd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-10-20 23:00:30 (1 day ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-10-20 22:00:09 (1 day ago)	CRITICAL: Privileged access during non-business hours - Jakarta timezone (WIB). Threat Score: 8.6/10 ... show more CRITICAL: Privileged access during non-business hours - Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-10-19 23:00:30 (2 days ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-10-19 22:00:09 (2 days ago)	CRITICAL: Privileged access during non-business hours - Jakarta timezone (WIB). Threat Score: 8.6/10 ... show more CRITICAL: Privileged access during non-business hours - Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-10-18 22:00:30 (3 days ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 hermawan	2026-09-21 02:21:32 (1 month ago)	[Mon Sep 21 09:20:41.283427 2026] [security2:error] [pid 66460:tid 139824631621312] [client 202.164. ... show more [Mon Sep 21 09:20:41.283427 2026] [security2:error] [pid 66460:tid 139824631621312] [client 202.164.218.32:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "207"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 20% found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Prakiraan/Peringatan_Dini/2025/10_Oktober_2025/20-29/Press_Release_Kewaspadaan_Cuaca_Ekstrim_di_Jawa_Timur_20%E2%80%9329_Oktober_2025_e_B_ME_02_04_052_KSUB_X_2025.pdf HTTP/1.1 Request URI RAW = /pdfjs/web/viewer.html?file=/images/Klimatologi/Prakiraan/Peringatan_Dini/2025/10_Oktob..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "arCUeeaeLhZ4w4nARbYCl ... show less	Email Spam Hacking
🇮🇩 sockominfo	2026-08-28 05:00:56 (1 month ago)	WP2Shell activity detected (Success: 200)., Active Response: IP 202.164.218.32 Blocked via Firewall ... show more WP2Shell activity detected (Success: 200)., Active Response: IP 202.164.218.32 Blocked via Firewall Drop, Webshell discovery success (Response: 200). Threat Score: 9.3/10 (CRITICAL). Confidence: 85%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 99%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-08-28 04:00:29 (1 month ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇮🇩 sockominfo	2026-08-28 02:00:09 (1 month ago)	Webshell discovery success (Response: 200). Threat Score: 7.6/10 (HIGH). Reported by TangerangKota-C ... show more Webshell discovery success (Response: 200). Threat Score: 7.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-08-28 01:00:12 (1 month ago)	Webshell discovery success (Response: 200). Threat Score: 8.9/10 (HIGH). Reported by TangerangKota-C ... show more Webshell discovery success (Response: 200). Threat Score: 8.9/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-08-22 21:00:53 (1 month ago)	Weekend login - Suspicious for Government. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS v3.1: ... show more Weekend login - Suspicious for Government. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS v3.1: 6.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-20 16:00:53 (2 months ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL). ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1078 (Valid Accounts). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-19 17:00:56 (2 months ago)	Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). Conf ... show more Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1210 (Exploitation of Remote Services). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-19 16:00:08 (2 months ago)	Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported ... show more Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-18 18:00:33 (2 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.105

🇹🇼 60.249.251.88

🇺🇸 204.48.16.172

🇷🇴 193.46.255.86

🇨🇱 186.189.96.153

🇫🇮 147.185.133.12

🇰🇷 115.95.23.226

🇨🇳 110.41.146.172

🇨🇳 106.59.139.119

🇫🇷 88.169.120.138

🇧🇬 79.124.56.214

🇺🇸 64.62.197.204

🇺🇸 45.79.98.252

🇹🇳 41.225.70.135

🇬🇭 41.204.63.118

🇬🇧 35.177.128.32

🇺🇸 4.148.240.217

🇮🇪 3.252.87.198

🇫🇮 2.29.44.73

🇿🇦 197.184.124.176