JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.65.225.205

202.65.225.205 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 14%: ?

14%

ISP	PT Global Telecom Utama
Usage Type	Fixed Line ISP
ASN	AS45700
Hostname(s)	customer.jtnaidn2.pop.starlinkisp.net
Domain Name	apjii.or.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.65.225.205

Whois 202.65.225.205

IP Abuse Reports for 202.65.225.205:

This IP address has been reported a total of 8 times from 7 distinct sources. 202.65.225.205 was first reported on January 29th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 prologic	2026-06-13 21:36:35 (1 week ago)	Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ... show more Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC. show less	DDoS Attack Web App Attack
🇮🇩 hermawan	2026-06-10 10:30:51 (1 week ago)	[Wed Jun 10 17:30:47.835072 2026] [security2:error] [pid 425280:tid 140689881941696] [client 202.65. ... show more [Wed Jun 10 17:30:47.835072 2026] [security2:error] [pid 425280:tid 140689881941696] [client 202.65.225.205:51423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "aik813xqfmfwowPIm_2KlwABQQU"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[425289] [/+KfvCNCsAU] [aik813xqfmfwowPIm_2KlwABQQU] keep_alive=[1] [2026-06-10 17:30:47.835075] [R:aik813xqfmfwowPIm_2KlwABQQU] UA:'Mozilla/5.0 ( ... show less	Email Spam Hacking
🇬🇧 PeravixGroup	2026-05-07 06:46:28 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇸🇬 schedules.run	2026-01-15 06:49:22 (5 months ago)		Web Spam
🇺🇸 xmission.com	2025-12-17 01:05:08 (6 months ago)	Blocked by UFW (TCP on 9101) Source port: 52250 TTL: 103 Packet length: 48 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 52250 TTL: 103 Packet length: 48 TOS: 0x08 This report (for 202.65.225.205) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-12-15 06:39:48 (6 months ago)	Blocked by UFW (TCP on 9101) Source port: 18609 TTL: 105 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 18609 TTL: 105 Packet length: 52 TOS: 0x08 This report (for 202.65.225.205) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 ᴀʀᴛ	2025-08-02 20:57:20 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. ASN: 45700 (IDNIC-STARLINK-AS-ID PT Starlink Services Ind ... show more Triggered Cloudflare WAF (l7ddos) from ID. ASN: 45700 (IDNIC-STARLINK-AS-ID PT Starlink Services Indonesia) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇧🇷 OuverneY	2025-01-29 07:04:47 (1 year ago)	FW-PortScan: Traffic Blocked (Port=1433 <- 188 attempts), (Port=3306 <- 141 attempts), Total connec ... show more FW-PortScan: Traffic Blocked (Port=1433 <- 188 attempts), (Port=3306 <- 141 attempts), Total connections: 661, Total destination IPs: 214 show less	Port Scan

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.124.20.235

🇲🇽 187.198.187.129

🇷🇴 151.242.191.232

🇲🇾 115.135.25.162

🇸🇬 98.159.43.148

🇩🇪 85.208.139.201

🇪🇸 78.136.111.50

🇺🇸 69.10.195.67

🇸🇪 52.101.83.129

🇺🇸 47.234.138.49

🇸🇬 43.156.82.40

🇬🇧 35.203.210.52

🇬🇧 193.176.29.30

🇫🇷 136.244.117.239

🇨🇳 103.219.32.239

🇺🇸 99.95.61.197

🇩🇪 69.5.169.243

🇺🇸 64.62.156.21

🇳🇱 45.148.10.240

🇯🇵 165.154.231.236