JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.50.133.2

189.50.133.2 was found in our database!

This IP was reported 235 times. Confidence of Abuse is 0%: ?

ISP	SAMM TECNOLOGIA E TELECOMUNICACOES S.A
Usage Type	Fixed Line ISP
ASN	AS28330
Domain Name	samm.com.br
Country	🇧🇷 Brazil
City	Presidente Prudente, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.50.133.2

Whois 189.50.133.2

IP Abuse Reports for 189.50.133.2:

This IP address has been reported a total of 235 times from 44 distinct sources. 189.50.133.2 was first reported on November 16th 2021, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-04-20 07:12:22 (6 months ago)	[Mon Apr 20 14:12:21.639129 2026] [security2:error] [pid 76721:tid 139789008312000] [client 189.50.1 ... show more [Mon Apr 20 14:12:21.639129 2026] [security2:error] [pid 76721:tid 139789008312000] [client 189.50.133.2:38430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "623"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-tahunan"] [unique_id "aeXR1QTDAPNNSuEZtMPm6AAAERE"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[76740] [M5f6BB8L+0g] [aeXR1QTDAPNNSuEZtMPm6AAAERE] keep_alive=[1] [2026-04-20 14:12:21.639133] [R:aeXR1QTDAPNNSuEZtMPm6AAAERE] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537. ... show less	Email Spam Hacking
🇺🇸 quilla	2026-04-03 03:20:35 (6 months ago)	Botnet infected device observed in honeypot (Vector: TCP)	DDoS Attack
🇦🇺 MAGIC	2026-01-20 00:18:58 (9 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-01-10 01:10:35 (9 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.11 ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 show less	Bad Web Bot
🇨🇦 polycoda	2026-01-08 16:46:32 (9 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
Anonymous	2025-12-13 14:04:39 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.13 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.13 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 SMARTNET	2025-11-26 02:37:10 (10 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
🇩🇪 HandyTreff.de	2025-11-21 09:21:54 (11 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -26.872 (Bad < -10 / Very Bad < -20) ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -26.872 (Bad < -10 / Very Bad < -20) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa show less	Bad Web Bot Web App Attack
🇩🇪 Pingger Shikkoken	2023-11-17 15:16:33 (2 years ago)	Participating in DDoS Amplification Attack! Sending 14 requests over 22s asking for ?0? of apple.com ... show more Participating in DDoS Amplification Attack! Sending 14 requests over 22s asking for ?0? of apple.com, cisco.com, atlassian.com show less	DNS Poisoning DDoS Attack Hacking Brute-Force Exploited Host
🇩🇪 IP Analyzer	2023-10-06 16:01:02 (3 years ago)	Unauthorized connection attempt from IP address 189.50.133.2 on Port 445(SMB)	Port Scan
🇩🇪 ⓔⓜⓙⓔⓔ	2023-10-06 15:09:33 (3 years ago)	SMB 🖴 Honeypot: connected to port 445 by 189.50.133.2: port 27934	Port Scan
🇫🇷 ipfyx	2023-09-28 00:10:01 (3 years ago)	Port scanning	Port Scan
🇫🇷 ipfyx	2023-09-27 16:10:02 (3 years ago)	Port scanning	Port Scan
🇫🇷 ipfyx	2023-09-27 08:10:02 (3 years ago)	Port scanning	Port Scan
🇫🇷 ipfyx	2023-09-27 00:10:02 (3 years ago)	Port scanning	Port Scan

Showing 1 to 15 of 235 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.154

🇺🇸 193.202.81.162

🇳🇱 185.136.15.81

🇨🇦 69.158.139.100

🇧🇪 34.62.150.156

🇰🇷 211.228.97.186

🇧🇷 205.210.31.129

🇧🇷 190.89.55.250

🇮🇩 163.7.1.218

🇺🇸 159.223.172.58

🇳🇵 157.10.100.12

🇬🇧 149.13.198.138

🇺🇸 136.0.251.108

🇸🇬 101.47.152.216

🇸🇬 94.231.206.36

🇧🇪 91.183.213.37

🇳🇱 77.91.71.25

🇧🇪 34.52.207.86

🇷🇴 2.57.121.25

🇭🇰 161.81.121.145