JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

168.90.214.133

Recent Activity

Abuse confidence score ?

3% Caution

20 reports

13 reporters · latest 4 days ago

ISP	Handrigo jose Antunes
Usage Type	Fixed Line ISP
ASN	AS265295
Domain Name	speedyinfo.com.br
Country	🇧🇷 Brazil
City	Sao Joaquim, Santa Catarina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 168.90.214.133

Export CSV

This IP address has been reported a total of 20 times from 13 distinct sources. 168.90.214.133 was first reported on August 8th 2024, and the most recent report was 4 days ago. In the last 60 days, the only reporter location was: Germany with 1 report. The most common categories in these recent reports were: Bad Web Bot 1 time; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 AetherFox	2026-10-05 14:00:52 (4 days ago)	AetherFox VoidGuard detected: [Mon Oct 05 16:00:52.449621 2026] [security2:error] [pid 136099:tid 13 ... show more AetherFox VoidGuard detected: [Mon Oct 05 16:00:52.449621 2026] [security2:error] [pid 136099:tid 136115] [client 168.90.214.133:4775] [client 168.90.214.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/view_all_bug_page\\\\.php\\\\?.*filter=" at REQUEST_URI. [file "/etc/modsecurity/AetherFox.conf"] [line "169"] [id "100075"] [msg "AetherFox VoidGuard: automated MantisBT filter enumeration"] [hostname "tracker.draconigen.net"] [uri "/view_all_bug_page.php"] [unique_id "asOtlFI75C3mjZKJ-Yk3JgAAAE4"] ... show less	Hacking Bad Web Bot
🇺🇸 kosada.com	2026-08-02 10:42:22 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-05-31 13:47:58 (4 months ago)	[Sun May 31 20:47:55.446556 2026] [authz_core:error] [pid 1165356:tid 140573582280384] [client 168.9 ... show more [Sun May 31 20:47:55.446556 2026] [authz_core:error] [pid 1165356:tid 140573582280384] [client 168.90.214.133:1187] AH01630: client denied by server configuration: /var/www/index.php, referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1165365] [+70mUx16ReY] [ahw8C4kgBSjfwf1ft_cUogABzgI] keep_alive=[1] [2026-05-31 20:47:55.446560] [R:ahw8C4kgBSjfwf1ft_cUogABzgI] UA:'Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'/' Referer:'https://staklim-jatim.bmkg.go.id/ Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8 ... show less	Email Spam Hacking
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: f33ea243-b344-42fe-b994-8adedb9f85ca	DDoS Attack
Anonymous	2026-01-15 16:28:40 (8 months ago)	scanning http requests from known botnet	Web App Attack
🇺🇸 RAP	2026-01-07 19:42:22 (9 months ago)	2026-01-07 19:42:22 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2025-11-25 08:29:31 (10 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-12 22:03:31 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.12 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.12 is noted in report timestamp show less	Hacking Brute-Force
🇮🇩 hermawan	2025-10-15 00:30:30 (11 months ago)	[Wed Oct 15 07:29:36.053263 2025] [security2:error] [pid 3626736:tid 140019348006592] [client 168.90 ... show more [Wed Oct 15 07:29:36.053263 2025] [security2:error] [pid 3626736:tid 140019348006592] [client 168.90.214.133:21409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36 request_line = GET /index.php/profil/meteorologi/geofisika HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/geofisika"] [unique_id "aO7q8JLX3ONvDnAmrULS2wAAAow"] [staklim-malang.info] [staklim-malang.info] top=[3626775] [uvpDmOdlCh0] [aO7q8JLX3ONvDnAmrULS2wAAAow] keep_alive=[0] [2025-10-15 07:29:36.053268] [R:aO7q8JLX3ONvDnAmrULS2wAAAow] UA:'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/5 ... show less	Hacking Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-10-10 07:55:12 (1 year ago)	Port probe to tcp/443 (https) [srv125]	Port Scan Brute-Force Bad Web Bot Web App Attack
🇳🇱 exxos	2025-08-28 19:05:19 (1 year ago)	Attacks with Bad user agents	Hacking
🇳🇱 exxos	2025-08-20 20:03:01 (1 year ago)	Attacks with Bad user agents	Hacking
Anonymous	2025-04-24 01:30:30 (1 year ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2025-01-28 00:03:13 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-12-31 02:46:48 (1 year ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇳🇱 176.65.148.253

🇳🇱 172.71.183.68

🇳🇱 172.71.183.30

🇺🇸 143.42.1.34

🇩🇪 69.5.169.57

🇱🇹 62.60.130.201

🇨🇦 50.6.241.208

🇲🇽 38.58.169.207

🇨🇳 36.133.44.233

🇨🇳 223.95.210.241

🇹🇷 212.253.223.133

🇻🇪 201.210.47.227

🇸🇬 194.5.82.169

🇳🇱 172.71.183.181

🇫🇷 163.172.66.206

🇺🇸 149.40.50.110

🇧🇷 144.22.238.238

🇩🇪 138.201.175.198

🇬🇷 79.103.95.195