AbuseIPDB » 202.165.42.251
202.165.42.251
This IP was reported 8 times. Confidence of
Abuse
is 19% : ?
ISP
PT. Circlecom Nusantara Indonesia
Usage Type
Fixed Line ISP
ASN
AS17538
Hostname(s)
ip-251-42.circlecom.net.id
Domain Name
circlecom.net.id
Country
🇮🇩
Indonesia
City
Pasarkemis, West Java
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 202.165.42.251 :
This IP address has been reported a total of
8
times from
3 distinct
sources.
202.165.42.251 was first reported on
May 12th 2026 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-07-15 21:56:59
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 202.165.42.251 (ip-251-42.circlecom.net.id): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 202.165.42.251 (ip-251-42.circlecom.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 17:56:54.490802 2026] [security2:error] [pid 8160:tid 8160] [client 202.165.42.251:21673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alkahf.xyz"] [uri "/sftp-config.json"] [unique_id "algCJnZIB81IUhwqUKUovwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 21:20:37
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 202.165.42.251 (ip-251-42.circlecom.net.id): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 202.165.42.251 (ip-251-42.circlecom.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 17:20:29.710703 2026] [security2:error] [pid 8495:tid 8495] [client 202.165.42.251:21874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barkan.us"] [uri "/sftp-config.json"] [unique_id "alf5new4MupGLZKVC0reAgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-07-15 19:39:32
(3 days ago)
[redacted] 202.165.42.251 - - [15/Jul/2026:20:39:28 +0100] "GET /[redacted] HTTP/1.1" 302 6773 0/722 ...
show more
[redacted] 202.165.42.251 - - [15/Jul/2026:20:39:28 +0100] "GET /[redacted] HTTP/1.1" 302 6773 0/72208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" [redacted] 202.165.42.251 - - [15/Jul/2026:20:39:29 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 6773 0/88353 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 12:16:46
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 202.165.42.251 (ip-251-42.circlecom.net.id): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 202.165.42.251 (ip-251-42.circlecom.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 08:16:40.928529 2026] [security2:error] [pid 12765:tid 12765] [client 202.165.42.251:12543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "actionplanner.xyz"] [uri "/sftp-config.json"] [unique_id "ald6KHDEeiwelG6TtGPkPQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-20 21:49:18
(1 month ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2026-05-16 09:32:35
(2 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2026-05-15 07:25:13
(2 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2026-05-12 23:57:12
(2 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: