JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.169.225.156

202.169.225.156 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 0%: ?

ISP	LIFEMEDIA
Usage Type	Fixed Line ISP
ASN	AS23671
Domain Name	lifemedia.id
Country	🇮🇩 Indonesia
City	Yogyakarta, Yogyakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.169.225.156

Whois 202.169.225.156

IP Abuse Reports for 202.169.225.156:

This IP address has been reported a total of 54 times from 14 distinct sources. 202.169.225.156 was first reported on October 28th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 penjaga BRIN	2026-05-30 04:09:18 (3 months ago)	Web application attack	Web App Attack
🇮🇩 penjaga BRIN	2026-05-27 00:47:17 (3 months ago)	Suspicious malicious activity	Hacking
🇺🇸 TPI-Abuse	2026-05-23 07:02:34 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 202.169.225.156 (host-202-169-225-156.lifemedia ... show more (mod_security) mod_security (id:210492) triggered by 202.169.225.156 (host-202-169-225-156.lifemedia.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 03:02:26.017152 2026] [security2:error] [pid 17167:tid 17167] [client 202.169.225.156:34104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "angove.biz"] [uri "/.env"] [unique_id "ahFRAgHRc3RXrKLe9ohybAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 TTIS Kota Mataram	2026-05-22 01:08:00 (3 months ago)	Backdoor File uploading attempt detect by SOC Kota Mataram	Web App Attack Hacking
🇮🇩 penjaga BRIN	2026-05-10 23:21:40 (3 months ago)	Suspicious malicious activity	Hacking
🇮🇩 sockominfo	2026-05-06 08:00:39 (3 months ago)	Suspicious user agent detected python-requests/2.32.4. Threat Score: 3.8/10 (LOW). Confidence: 30%. ... show more Suspicious user agent detected python-requests/2.32.4. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-06 04:00:13 (3 months ago)	Suspicious user agent detected python-requests/2.32.4. Threat Score: 0/10 (INFORMATIONAL). Reported ... show more Suspicious user agent detected python-requests/2.32.4. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-04-26 23:27:16 (4 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 25	Exploited Host Web App Attack
🇩🇪 FeG Deutschland	2026-04-26 09:11:15 (4 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 245	Exploited Host Web App Attack
🇮🇩 sockominfo	2026-04-16 17:01:20 (4 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇮🇩 Burayot	2026-04-16 16:17:12 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 202.169.225.156 (ID/Indonesia/host- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 202.169.225.156 (ID/Indonesia/host-202-169-225-156.lifemedia.id): 1 in the last 3600 secs show less	Web App Attack
🇮🇩 sockominfo	2026-01-29 03:00:03 (7 months ago)	Access to sensitive configuration files detected., Access to sensitive files detected w/ specific bo ... show more Access to sensitive configuration files detected., Access to sensitive files detected w/ specific boundary.. Threat Score: 4.3/10 (MEDIUM). CVSS: 2.7/10 (Low). Bayesian: 68%. MITRE: T1016. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-29 02:00:21 (7 months ago)	Access to sensitive configuration files detected.. Threat Score: 0/10 (INFORMATIONAL). Reported by T ... show more Access to sensitive configuration files detected.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-29 01:00:03 (7 months ago)	Access to sensitive configuration files detected., Access to sensitive files detected w/ specific bo ... show more Access to sensitive configuration files detected., Access to sensitive files detected w/ specific boundary.. Threat Score: 4.5/10 (MEDIUM). CVSS: 2.7/10 (Low). Bayesian: 80%. MITRE: T1016. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-25 06:00:22 (7 months ago)	Suspicious user agent detected python-requests/2.32.5. Threat Score: 0/10 (INFORMATIONAL). Reported ... show more Suspicious user agent detected python-requests/2.32.5. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.20

🇳🇱 195.178.110.70

🇻🇳 165.101.40.180

🇺🇸 34.173.33.63

🇷🇺 188.130.129.62

🇧🇩 114.130.98.181

🇨🇳 112.6.11.184

🇳🇱 85.11.167.132

🇳🇱 45.148.10.157

🇧🇷 205.210.31.132

🇳🇱 195.178.110.218

🇨🇳 183.250.89.44

🇻🇳 104.218.166.62

🇨🇳 60.216.89.122

🇺🇸 34.148.85.10

🇺🇸 207.90.244.26

🇳🇱 195.178.110.30

🇳🇱 156.241.0.249

🇺🇸 136.144.43.70

🇬🇭 102.223.92.101