JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.84.104.3

189.84.104.3 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 15%: ?

15%

ISP	L Pinheiro de Souza EIRELI
Usage Type	Fixed Line ISP
ASN	AS270904
Domain Name	portalnetworki.com.br
Country	🇧🇷 Brazil
City	Feira de Santana, Bahia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.84.104.3

Whois 189.84.104.3

IP Abuse Reports for 189.84.104.3:

This IP address has been reported a total of 21 times from 8 distinct sources. 189.84.104.3 was first reported on December 14th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Konaa	2026-07-01 09:00:18 (3 days ago)	Jul 01 15:43:41 rapi wings[1730548]: 2026/07/01 15:43:41 http: TLS handshake error from 189.84.104.3 ... show more Jul 01 15:43:41 rapi wings[1730548]: 2026/07/01 15:43:41 http: TLS handshake error from 189.84.104.3:56443: tls: first record does not look like a TLS handshake Jul 01 15:43:41 rapi wings[1730548]: 2026/07/01 15:43:41 http: TLS handshake error from 189.84.104.3:56234: tls: first record does not look like a TLS handshake Jul 01 15:43:46 rapi wings[1730548]: 2026/07/01 15:43:46 http: TLS handshake error from 189.84.104.3:56791: tls: first record does not look like a TLS handshake Jul 01 15:43:52 rapi wings[1730548]: 2026/07/01 15:43:52 http: TLS handshake error from 189.84.104.3:57609: tls: first record does not look like a TLS handshake Jul 01 15:44:04 rapi wings[1730548]: 2026/07/01 15:44:04 http: TLS handshake error from 189.84.104.3:58378: tls: first record does not look like a TLS handshake show less	Email Spam Port Scan Brute-Force
🇮🇩 hermawan	2026-05-29 09:20:10 (1 month ago)	[Fri May 29 16:20:06.767022 2026] [security2:error] [pid 1486929:tid 139851954321088] [client 189.84 ... show more [Fri May 29 16:20:06.767022 2026] [security2:error] [pid 1486929:tid 139851954321088] [client 189.84.104.3:40870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ahlaRtmQHEOBfeXfa3MIzQABQA8"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1486945] [+eSyWTFUrRQ] [ahlaRtmQHEOBfeXfa3MIzQABQA8] keep_alive=[1] [2026-05-29 16:20:06.767027] [R:ahlaRtmQHEOBfeXfa3MIzQABQA8] UA:'Mozilla/5.0 (Linux; Android 10; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'text/ht ... show less	Email Spam Hacking
🇺🇸 RAP	2026-05-22 23:48:54 (1 month ago)	2026-05-22 23:48:54 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇮🇩 hermawan	2026-04-05 11:54:43 (2 months ago)	04/05/2026-18:54:42.018737 [Drop] [] [1:2100000270:0] Suricata match TLS JA4 scan Uniq Zeek no 27 ... show more 04/05/2026-18:54:42.018737 [Drop] [] [1:2100000270:0] Suricata match TLS JA4 scan Uniq Zeek no 270 with hash_t12d1715h2_5b57614c22b0_b2593a6d3ae1 [**] [Classification: (null)] [Priority: 3] {TCP} 189.84.104.3:52450 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇳🇱 exxos	2025-08-01 02:24:03 (11 months ago)	http-no-verb	Hacking
🇳🇱 exxos	2025-07-31 02:46:10 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-07-31 01:23:43 (11 months ago)	http-no-verb	Hacking
🇳🇱 exxos	2025-07-30 01:05:08 (11 months ago)	http-no-verb	Hacking
🇳🇱 exxos	2025-07-29 01:00:52 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-07-28 04:25:23 (11 months ago)	http-no-verb	Hacking
🇳🇱 exxos	2025-07-28 02:38:01 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-07-28 02:24:42 (11 months ago)	http-no-verb	Hacking
🇳🇱 exxos	2025-07-27 23:18:59 (11 months ago)	http-no-verb	Hacking
🇳🇱 exxos	2025-07-27 23:12:04 (11 months ago)	HTTP1.x with new user agents	DDoS Attack
🇳🇱 exxos	2025-07-27 22:55:53 (11 months ago)	http-no-verb	Hacking

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.126.4.45

🇬🇧 198.244.240.76

🇳🇱 185.93.89.147

🇸🇬 172.104.48.115

🇭🇰 168.76.131.178

🇳🇱 91.92.40.10

🇬🇧 85.203.36.205

🇬🇧 85.203.36.200

🇬🇧 85.203.36.186

🇺🇸 47.251.174.68

🇺🇸 44.10.125.133

🇩🇪 43.228.157.121

🇬🇧 35.203.210.101

🇺🇸 20.15.200.45

🇦🇷 186.56.11.2

🇧🇷 179.190.105.175

🇺🇸 165.22.146.146

🇪🇬 156.192.240.248

🇯🇴 94.249.81.83

🇺🇸 44.94.39.104