JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.84.179.11

170.84.179.11 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 4%: ?

ISP	GNA TELECOM LTDA - ME
Usage Type	Fixed Line ISP
ASN	AS265014
Domain Name	gnatelecom.com.br
Country	🇧🇷 Brazil
City	Belo Horizonte, Minas Gerais

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.84.179.11

Whois 170.84.179.11

IP Abuse Reports for 170.84.179.11:

This IP address has been reported a total of 26 times from 22 distinct sources. 170.84.179.11 was first reported on September 6th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-21 08:29:22 (1 day ago)	[Sun Jun 21 15:29:15.373888 2026] [security2:error] [pid 1245430:tid 140110338107072] [client 170.84 ... show more [Sun Jun 21 15:29:15.373888 2026] [security2:error] [pid 1245430:tid 140110338107072] [client 170.84.179.11:21904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "ajeg26W2UnQvbEy68fRoWQAAAhQ"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1245451] [mFQsUr9gIEY] [ajeg26W2UnQvbEy68fRoWQAAAhQ] keep_alive=[1] [2026-06-21 15:29:15.373892] [R:ajeg26W2UnQvbEy68fRoWQAAAhQ] ... show less	Email Spam Hacking
🇨🇦 polycoda	2026-03-30 12:47:32 (2 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 TPI-Abuse	2026-03-17 11:02:37 (3 months ago)	(mod_security) mod_security (id:225080) triggered by 170.84.179.11 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225080) triggered by 170.84.179.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 07:02:32.470003 2026] [security2:error] [pid 6934:tid 6934] [client 170.84.179.11:3534] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|www.cffragrances.iee-usa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cffragrances.iee-usa.com"] [uri "/wp-includes/js/tinymce/plugins/wpgallery/img/"] [unique_id "abk0yHBLnyu8pO_cIuxdiAAAAAs"], referer: http://www.cffragrances.iee-usa.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-10 18:48:59 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 vtchost.com	2026-02-28 01:47:21 (3 months ago)	bad user agent - known bad bot or invalid agent - possible botnet ...	Bad Web Bot
🇮🇹 VHosting	2025-12-23 11:32:03 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇨🇭 backslash	2025-12-21 22:25:10 (6 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
🇩🇪 HandyTreff.de	2025-12-09 21:12:19 (6 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -45.699 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -45.699 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.3 show less	Bad Web Bot Web App Attack
🇩🇪 SMARTNET	2025-11-26 02:37:10 (6 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-25 13:45:35 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 FeG Deutschland	2025-11-20 02:44:47 (7 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
Anonymous	2025-11-18 12:24:59 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-15 23:13:56 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇺🇸 SiliSoftware	2025-10-31 21:21:59 (7 months ago)	/phpBB3/viewtopic.php?f=21&t=1431&p=4745&sid=2701fcec86fdfddad30461c7c8bf668c	Web App Attack
🇩🇪 pressler.pro	2025-09-24 02:24:12 (8 months ago)	Fail2ban - DDoS attack on woocommerce shop ...	DDoS Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 151.234.172.41

🇱🇹 141.98.11.59

🇺🇸 138.59.6.186

🇫🇷 91.231.89.67

🇫🇷 85.217.140.20

🇱🇻 81.30.98.49

🇳🇱 45.198.224.5

🇳🇱 45.148.10.152

🇬🇧 35.203.210.120

🇺🇸 20.9.26.126

🇨🇳 223.74.89.212

🇫🇷 164.68.96.230

🇺🇸 147.185.132.54

🇳🇱 89.190.159.181

🇱🇻 81.30.98.43

🇰🇷 59.11.0.20

🇨🇳 27.223.194.41

🇹🇼 140.115.152.12

🇦🇪 91.73.83.144

🇨🇦 85.217.149.19