JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.150.143.75

89.150.143.75 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 20%: ?

20%

ISP	TDC Brands A/S
Usage Type	Fixed Line ISP
ASN	AS203953
Hostname(s)	x59968f4b.customers.hiper-net.dk
Domain Name	hiper.dk
Country	🇩🇰 Denmark
City	Copenhagen, Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.150.143.75

Whois 89.150.143.75

IP Abuse Reports for 89.150.143.75:

This IP address has been reported a total of 7 times from 5 distinct sources. 89.150.143.75 was first reported on June 1st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-10-21 01:33:39 (1 day ago)	Captured JA4H: ge11n_133fd66ef233 \| Log: 89.150.143.75 - - [21/Oct/2026:08:33:24 +0700] "GET /index. ... show more Captured JA4H: ge11n_133fd66ef233 \| Log: 89.150.143.75 - - [21/Oct/2026:08:33:24 +0700] "GET /index.php/profil/arsip-artikel?catid=477&id=1159%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-27-september-03-oktober-2016&start=40 HTTP/1.1" 403 3738 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Linux; Android 8.0; SM-A605GN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.126 Mobile Safari/537.36 EdgA/133.0.3065.82" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,save-data,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry... ... show less	Email Spam Hacking
🇺🇸 SX Communications	2026-10-19 13:31:36 (3 days ago)	HTTP application-layer DoS / botnet traffic from 89.150.143.75: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 89.150.143.75: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇮🇩 hermawan	2026-09-25 00:09:54 (3 weeks ago)	Captured JA4H: ge11n_133fd66ef233 \| Log: 89.150.143.75 - - [25/Sep/2026:07:07:55 +0700] "GET / HTTP/ ... show more Captured JA4H: ge11n_133fd66ef233 \| Log: 89.150.143.75 - - [25/Sep/2026:07:07:55 +0700] "GET / HTTP/1.1" 403 3738 "https://www.bmkg.go.id/" "Mozilla/5.0 (Linux; Android 15; SM-S928U Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/140.0.7339.119 Mobile Safari/537.36 MetaIAB" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,save-data,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-20 01:57:59 (1 month ago)	[Sun Sep 20 08:57:40.266113 2026] [security2:error] [pid 246639:tid 140495661545152] [client 89.150. ... show more [Sun Sep 20 08:57:40.266113 2026] [security2:error] [pid 246639:tid 140495661545152] [client 89.150.143.75:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur"] [unique_id "aq89lCc8HjiOWOaljuFDMAAAAtM"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[246692] [XZVfdWByzAk] [aq89lCc8HjiOWOaljuFDMAAAAtM] keep_alive=[0] [2026-09-20 08: ... show less	Email Spam Hacking
🇺🇸 kosada.com	2026-09-10 19:47:21 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A309&f%5B1%5D=digest_key_terms%3A312&f%5B2%5D=digest_key_terms%3A318&f%5B3%5D=digest_publication_type%3A927 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/124.0 Mobile/15E148 Safari/605.1.15") show less	DDoS Attack Bad Web Bot
Anonymous	2026-08-19 02:16:31 (2 months ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 MPL	2026-06-01 00:31:31 (4 months ago)	tcp/443 (5 or more attempts)	Port Scan

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.139.186.238

🇷🇺 195.2.84.198

🇵🇱 185.93.93.108

🇰🇷 168.126.36.209

🇺🇸 152.163.101.179

🇩🇪 141.76.94.28

🇨🇳 113.57.9.147

🇺🇸 107.150.99.91

🇧🇩 103.159.2.113

🇩🇪 69.5.169.242

🇵🇱 54.38.52.18

🇳🇵 43.225.131.46

🇧🇪 34.62.18.205

🇺🇸 20.65.170.4

🇺🇸 16.216.88.165

🇨🇭 209.99.190.186

🇺🇸 192.169.213.186

🇮🇳 103.68.52.210

🇳🇱 77.239.124.64

🇱🇹 77.90.185.94