JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.65.239.92

202.65.239.92 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 55%: ?

55%

ISP	PT Global Telecom Utama
Usage Type	Fixed Line ISP
ASN	AS45700
Hostname(s)	customer.jtnaidn2.pop.starlinkisp.net
Domain Name	apjii.or.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.65.239.92

Whois 202.65.239.92

IP Abuse Reports for 202.65.239.92:

This IP address has been reported a total of 16 times from 14 distinct sources. 202.65.239.92 was first reported on September 26th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 YF	2026-06-16 17:00:41 (1 day ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇫🇮 KnightIndustries	2026-06-16 16:02:26 (1 day ago)	2026-06-16T18:02:05.403769+02:00 milkyway wordpress(oldscarborough.com)[3998833]: XML-RPC authentica ... show more 2026-06-16T18:02:05.403769+02:00 milkyway wordpress(oldscarborough.com)[3998833]: XML-RPC authentication failure for joshua from 202.65.239.92 2026-06-16T18:02:15.472165+02:00 milkyway wordpress(oldscarborough.com)[4015100]: XML-RPC authentication failure for joshua from 202.65.239.92 2026-06-16T18:02:25.958873+02:00 milkyway wordpress(oldscarborough.com)[3983281]: XML-RPC authentication failure for joshua from 202.65.239.92 ... show less	Brute-Force Web App Attack
Anonymous	2026-06-16 15:02:03 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
Anonymous	2026-06-16 15:01:40 (1 day ago)	[redacted] 202.65.239.92 - - [16/Jun/2026:17:00:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "J ... show more [redacted] 202.65.239.92 - - [16/Jun/2026:17:00:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/13.0; WordPress/6.3; http://site46169056.com" [redacted] 202.65.239.92 - - [16/Jun/2026:17:01:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 202.65.239.92 - - [16/Jun/2026:17:01:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 202.65.239.92 - - [16/Jun/2026:17:01:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 202.65.239.92 - - [16/Jun/2026:17:01:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 10:37:35 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 202.65.239.92 (customer.jtnaidn2.pop.starlinkis ... show more (mod_security) mod_security (id:240335) triggered by 202.65.239.92 (customer.jtnaidn2.pop.starlinkisp.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 06:37:28.811391 2026] [security2:error] [pid 2045:tid 2045] [client 202.65.239.92:46545] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.65.239.92 (+1 hits since last alert)\|midway-island.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "midway-island.com"] [uri "/xmlrpc.php"] [unique_id "ajEnaGGH8qtgoD_Ae7DWtgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-16 10:37:26 (1 day ago)	[ssd1.kdns.gr] httpd-xmlrpc-post: sites=filoixenofontos.gr; logs=/var/log/httpd/domains/filoixenofon ... show more [ssd1.kdns.gr] httpd-xmlrpc-post: sites=filoixenofontos.gr; logs=/var/log/httpd/domains/filoixenofontos.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
Anonymous	2026-06-16 10:24:45 (1 day ago)	[redacted] 202.65.239.92 - - [16/Jun/2026:12:24:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "W ... show more [redacted] 202.65.239.92 - - [16/Jun/2026:12:24:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 202.65.239.92 - - [16/Jun/2026:12:24:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 202.65.239.92 - - [16/Jun/2026:12:24:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 202.65.239.92 - - [16/Jun/2026:12:24:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 202.65.239.92 - - [16/Jun/2026:12:24:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇮🇪 RoboSOC	2026-06-14 00:50:15 (3 days ago)	TCP SYN with data , PTR: customer.jtnaidn2.pop.starlinkisp.net.	Hacking
🇯🇵 VXG-NET	2026-06-13 18:47:46 (4 days ago)	port=80, indicator_type=N/A	Port Scan Hacking
🇫🇷 security.rdmc.fr	2025-11-28 00:45:41 (6 months ago)	Port Scan Attack proto:TCP src:51999 dst:23	Port Scan
🇺🇸 MPL	2025-11-27 11:10:42 (6 months ago)	tcp/23 (6 or more attempts)	Port Scan
🇬🇧 starhelix	2025-11-27 00:59:46 (6 months ago)	SSH login on honeypot.	Brute-Force SSH
Anonymous	2025-11-26 22:04:19 (6 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
🇺🇸 cybsecaoccol	2025-11-26 08:56:09 (6 months ago)	unauthorized connection or malicious port scan attempted on tcp port 23 - dr	Port Scan Hacking
Anonymous	2025-11-25 19:25:08 (6 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:538:1000:b0f9:1f03:8f33:a18a

🇨🇳 117.132.5.139

🇫🇷 104.23.225.42

🇺🇸 18.220.119.98

🇫🇷 2400:cb00:1038:1000:c2a0:47c9:2eaf:17d0

🇫🇷 2400:cb00:987:1000:efc0:5998:1875:3833

🇫🇷 2400:cb00:727:1000:802f:1cbf:1d89:3b98

🇫🇷 2400:cb00:727:1000:6b09:8eb5:a7fe:8478

🇫🇷 2400:cb00:532:1000:7d6c:d524:5f24:bfc8

🇫🇷 2400:cb00:19:1000:8baa:4acf:678e:a493

🇹🇼 198.235.24.81

🇨🇴 181.49.8.57

🇺🇸 167.172.201.247

🇧🇪 128.90.145.9

🇺🇸 104.22.1.208

🇺🇸 66.132.224.15

🇳🇱 45.148.10.147

🇺🇸 43.162.103.6

🇺🇸 18.221.203.219

🇺🇸 3.145.216.37