AbuseIPDB » 189.84.81.77
189.84.81.77
This IP was reported 6 times. Confidence of
Abuse
is 22% : ?
ISP
Marinter Telecom Ltda.
Usage Type
Fixed Line ISP
ASN
AS28366
Hostname(s)
189-84-81-77.marinter.com.br
Domain Name
marinter.com.br
Country
🇧🇷
Brazil
City
Marica, Rio de Janeiro
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 189.84.81.77 :
This IP address has been reported a total of
6
times from
5 distinct
sources.
189.84.81.77 was first reported on
February 16th 2026 , and the most recent report was
15 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
stechusa
2026-07-18 17:08:28
(15 hours ago)
[Askari] | Behavior: HTTP/1.1 over TLS, Outdated browser, Concurrent page load during attack, Slow-r ...
show more
[Askari] | Behavior: HTTP/1.1 over TLS, Outdated browser, Concurrent page load during attack, Slow-read attack, Targeting specific pages
show less
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-07-18 17:08:28
(15 hours ago)
ELEVATED_THREAT | 518 IPs targeting /brand.html | URL template shared by 6 IPs: /brand.html?bulb_bas ...
show more
ELEVATED_THREAT | 518 IPs targeting /brand.html | URL template shared by 6 IPs: /brand.html?bulb_base=*&bulb_shape_type=*&bulb_type=*&mode=list&p=* | Facet request during elevated threat (facet_ratio=0.98, unique_ips=664)
show less
Bad Web Bot
DDoS Attack
🇺🇸
kosada.com
2026-07-07 23:08:08
(1 week ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-06-16 13:26:53
(1 month ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
🇮🇩
hermawan
2026-06-07 03:34:23
(1 month ago)
[Sun Jun 07 10:34:17.896799 2026] [security2:error] [pid 593197:tid 140593985480384] [client 189.84. ...
show more
[Sun Jun 07 10:34:17.896799 2026] [security2:error] [pid 593197:tid 140593985480384] [client 189.84.81.77:37140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /plant-t.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/plant-t.webp"] [unique_id "aiTmuYWF1xVl6YAAR8O5SgACAQA"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[593198] [bdKJkWGPwbc] [aiTmuYWF1xVl6YAAR8O5SgACAQA] keep_alive=[1] [2026-06-07 10:34:17.896805] [R:aiTmuYWF1xVl6YAAR8O5SgACAQA] UA:'Mozilla/5.0 (Android 13; Mobile; rv:129.0) Gecko/129.0 Firefox/129.0' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'text/html,application/xhtml+xml,appli
...
show less
Email Spam
Hacking
🇩🇪
filstal.org
2026-02-16 16:42:18
(5 months ago)
Mail Brute-Force: User-Enum & Legacy Targeting
Brute-Force
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: