JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 160.20.204.136

160.20.204.136 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 12%: ?

12%

ISP	PLANETCLICK TELECOMUNICACOES LTDA
Usage Type	Fixed Line ISP
ASN	AS266213
Hostname(s)	ip-204-136.mga.inovafibra.com
Domain Name	i9tech.top
Country	🇧🇷 Brazil
City	Maringa, Parana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 160.20.204.136

Whois 160.20.204.136

IP Abuse Reports for 160.20.204.136:

This IP address has been reported a total of 13 times from 9 distinct sources. 160.20.204.136 was first reported on July 27th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-26 19:43:12 (5 hours ago)	(mod_security) mod_security (id:210350) triggered by 160.20.204.136 (IP-204-136.mga.inovafibra.com): ... show more (mod_security) mod_security (id:210350) triggered by 160.20.204.136 (IP-204-136.mga.inovafibra.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 15:43:07.716791 2026] [security2:error] [pid 12583:tid 12583] [client 160.20.204.136:46246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cbcfargo.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "at-tS4AiNIc_peJAgTruYwAAABA"], referer: https://cbcfargo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-23 15:42:19 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 160.20.204.136 (IP-204-136.mga.inovafibra.com): ... show more (mod_security) mod_security (id:210350) triggered by 160.20.204.136 (IP-204-136.mga.inovafibra.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 11:42:12.079158 2026] [security2:error] [pid 22372:tid 22372] [client 160.20.204.136:46138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|wardellbrown.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wardellbrown.com"] [uri "/"] [unique_id "atuAVFDHT4NQlhyLU5Po7QAAABM"], referer: https://theanimationacademy.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-23 06:14:25 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 160.20.204.136 (IP-204-136.mga.inovafibra.com): ... show more (mod_security) mod_security (id:210350) triggered by 160.20.204.136 (IP-204-136.mga.inovafibra.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 02:14:16.668349 2026] [security2:error] [pid 2437:tid 2437] [client 160.20.204.136:45894] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.barbaraehill.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.barbaraehill.com"] [uri "/"] [unique_id "atr7OCb50ziYLq8urv6VmAAAABQ"], referer: https://kacsffs.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-14 10:36:23 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-08 13:49:37 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-14 14:51:54 (4 months ago)	[Sun Jun 14 21:51:47.340173 2026] [security2:error] [pid 170092:tid 139673002288832] [client 160.20. ... show more [Sun Jun 14 21:51:47.340173 2026] [security2:error] [pid 170092:tid 139673002288832] [client 160.20.204.136:42420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story"] [unique_id "ai7AA5-iLVS0C8fHjs3jjAACwAU"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[170098] [hAxU2bfPp0Q] [ai7AA5-iLVS0C8fHjs3jjAACwAU] keep_alive=[1] [2026-06-14 21:51:47.340179] [R:ai7AA5-iLVS0C8fHjs3jjAACwAU] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 l ... show less	Email Spam Hacking
Anonymous	2025-11-25 12:38:21 (11 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-22 21:04:45 (11 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-20 02:37:34 (11 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.20 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.20 is noted in report timestamp show less	Hacking Brute-Force
🇳🇱 exxos	2025-08-22 12:03:01 (1 year ago)	Attacks with Bad user agents	Hacking
🇨🇭 backslash	2025-08-02 07:05:40 (1 year ago)		Bad Web Bot
🇪🇸 Global Cyber Police	2025-07-28 09:58:22 (1 year ago)	Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.	DDoS Attack Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Web App Attack
🇪🇸 Global Cyber Police	2025-07-27 18:11:51 (1 year ago)	Malicious bot activity detected: Hitting honeypot page (200 OK with 258/259 bytes sent).	Port Scan Brute-Force Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.235.197.198

🇨🇳 120.24.249.224

🇲🇳 66.181.161.221

🇺🇸 50.28.76.108

🇹🇭 27.130.11.46

🇰🇷 218.156.93.202

🇺🇸 195.184.76.223

🇳🇱 195.178.110.76

🇰🇼 194.176.108.4

🇪🇨 181.78.242.165

🇺🇸 172.191.239.155

🇧🇷 138.255.3.48

🇨🇳 121.10.252.86

🇨🇳 116.230.222.67

🇻🇳 103.69.96.120

🇫🇷 85.217.140.32

🇫🇷 84.235.233.122

🇳🇱 77.239.124.75

🇳🇱 77.67.26.110

🇺🇸 66.132.224.21