JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.165.90.220

202.165.90.220 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 26%: ?

26%

ISP	Mytel
Usage Type	Mobile ISP
ASN	AS136255
Domain Name	mytel.com.mm
Country	🇲🇲 Myanmar
City	Taunggyi, Shan State

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.165.90.220

Whois 202.165.90.220

IP Abuse Reports for 202.165.90.220:

This IP address has been reported a total of 10 times from 8 distinct sources. 202.165.90.220 was first reported on August 10th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-12 14:34:28 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 202.165.90.220 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 202.165.90.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:34:23.997128 2026] [security2:error] [pid 807:tid 807] [client 202.165.90.220:17943] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.165.90.220 (+1 hits since last alert)\|beirutbazar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "beirutbazar.com"] [uri "/xmlrpc.php"] [unique_id "aiwY7zdqpFSXYjg2zX2CLwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-12 06:47:45 (3 days ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-06-11 06:43:35 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 202.165.90.220 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 202.165.90.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 02:43:27.041829 2026] [security2:error] [pid 29992:tid 29992] [client 202.165.90.220:42466] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.165.90.220 (+1 hits since last alert)\|zoesaadeh.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "zoesaadeh.com"] [uri "/xmlrpc.php"] [unique_id "aipZD-aGbJvfr6xLD0SAYgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2026-06-11 06:11:43 (4 days ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 01:40:26 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 202.165.90.220 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 202.165.90.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 21:40:21.872899 2026] [security2:error] [pid 14418:tid 14418] [client 202.165.90.220:64239] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.165.90.220 (+1 hits since last alert)\|appalachianfolkmagician.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "appalachianfolkmagician.com"] [uri "/xmlrpc.php"] [unique_id "aioSBUe-FLvQEdpaqJmysQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-05-05 08:30:13 (1 month ago)	Blocked by UFW (TCP on 9101) Source port: 4584 TTL: 111 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 4584 TTL: 111 Packet length: 40 TOS: 0x00 This report (for 202.165.90.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 hermawan	2025-10-23 11:37:21 (7 months ago)	[Thu Oct 23 18:23:19.862201 2025] [security2:error] [pid 1033732:tid 140157322778304] [client 202.16 ... show more [Thu Oct 23 18:23:19.862201 2025] [security2:error] [pid 1033732:tid 140157322778304] [client 202.165.90.220:50056] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=472&id=760%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-13-oktober-19-oktober-2015&start=40 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=472&id=760%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-13-oktober-19-oktober-2..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aPoQJ2wxaKu ... show less	Hacking Web App Attack
🇦🇺 MAGIC	2023-12-02 20:00:33 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2023-11-30 20:22:13 (2 years ago)	Malicious activity detected Trawling for 3rd-party CMS installations	Hacking Brute-Force Web App Attack
Anonymous	2023-08-10 15:15:24 (2 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.58.109.91

🇪🇬 197.47.152.141

🇮🇳 117.202.47.203

🇺🇸 43.159.177.40

🇰🇪 41.215.125.250

🇺🇸 34.82.187.19

🇺🇸 18.117.109.14

🇺🇸 198.23.174.169

🇺🇸 198.23.174.141

🇲🇿 197.219.212.30

🇺🇸 192.111.135.19

🇱🇹 141.98.10.196

🇷🇺 82.204.185.138

🇺🇸 62.132.18.142

🇫🇷 51.68.34.131

🇧🇷 43.157.151.226

🇩🇿 41.110.4.106

🇨🇳 14.22.82.116

🇲🇿 197.219.228.242

🇲🇿 197.219.208.58