AbuseIPDB » 191.6.60.236
191.6.60.236
This IP was reported 7 times. Confidence of
Abuse
is 4% : ?
ISP
Entornet Fibra
Usage Type
Fixed Line ISP
ASN
AS263549
Hostname(s)
dynamic-60-236.entornet.com.br
Domain Name
entornet.com.br
Country
🇧🇷
Brazil
City
Casimiro de Abreu, Rio de Janeiro
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 191.6.60.236 :
This IP address has been reported a total of
7
times from
5 distinct
sources.
191.6.60.236 was first reported on
November 14th 2023 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-05 11:35:46
(2 days ago)
[Fri Jun 05 18:35:42.144647 2026] [security2:error] [pid 978358:tid 140021885564608] [client 191.6.6 ...
show more
[Fri Jun 05 18:35:42.144647 2026] [security2:error] [pid 978358:tid 140021885564608] [client 191.6.60.236:49696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /images/Klimatologi/Buletin/Bulanan/2026/04_April_2026/Buletin_Bulanan_Analisis_Hujan_Bulan_APRIL_Tahun_2026_dan_Prediksi_Hujan_Bulan_JUNI-JULI-AGUSTUS_Tahun_2026_Provinsi_Jawa_Timur.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Buletin/Bulanan/2026/04_April_2026/Buletin_Bulanan_Analisis_Hujan_Bulan_APRIL_Tahun_2026_dan_Prediksi_Hujan_Bulan_JUNI-JULI-AGUSTUS_Tahun_2026_Provinsi_Jawa_Timur.webp"] [unique_id "aiK0jrsz16zFiZnl7fWaYwAACgA"], referer https://www.bmkg.g
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-04 10:42:01
(3 days ago)
[Thu Jun 04 17:41:57.404095 2026] [authz_core:error] [pid 165082:tid 140506634806976] [client 191.6. ...
show more
[Thu Jun 04 17:41:57.404095 2026] [authz_core:error] [pid 165082:tid 140506634806976] [client 191.6.60.236:51218] AH01630: client denied by server configuration: /var/matomo/gemini-jscompress-dev_13-05-2026_matomo_5_10_0.js [matomo.staklim-malang.info] [matomo.staklim-malang.info] top=[165107] [U21yMet9JWI] [aiFWdRsHRuhmvJHQVL9h-QABjBg] keep_alive=[1] [2026-06-04 17:41:57.404098] [R:aiFWdRsHRuhmvJHQVL9h-QABjBg] UA:'Mozilla/5.0 (Linux; Android 11; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36' Host:'matomo.staklim-malang.info:443' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7' Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8 Upgrade-Insecure-Requests:'1
...
show less
Email Spam
Hacking
🇷🇴
INTEQ
2025-10-15 07:55:15
(7 months ago)
Web attack from 191.6.60.236
Web App Attack
🇮🇹
Markus S.
2025-07-30 01:00:00
(10 months ago)
ddos on webshop
DDoS Attack
🇮🇹
Markus S.
2025-07-30 01:00:00
(10 months ago)
ddos on webshop
DDoS Attack
🇪🇸
Global Cyber Police
2025-07-28 03:55:23
(10 months ago)
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Pingger Shikkoken
2023-11-14 01:57:55
(2 years ago)
Participating in DDoS Amplification Attack! Sending 13 requests over 41s asking for ?0? of cisco.com ...
show more
Participating in DDoS Amplification Attack! Sending 13 requests over 41s asking for ?0? of cisco.com, atlassian.com, apple.com
show less
DNS Poisoning
DDoS Attack
Hacking
Brute-Force
Exploited Host
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: