JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.51.192.170

189.51.192.170 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 20%: ?

20%

ISP	NETSPEED LTDA
Usage Type	Fixed Line ISP
ASN	AS28352
Hostname(s)	170.192.51.189.ns.net.br
Domain Name	netspeedbr.com.br
Country	🇧🇷 Brazil
City	Sao Sebastiao do Paraiso, Minas Gerais

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.51.192.170

Whois 189.51.192.170

IP Abuse Reports for 189.51.192.170:

This IP address has been reported a total of 47 times from 33 distinct sources. 189.51.192.170 was first reported on April 19th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-06 17:40:40 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 14:17:55 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-23 15:51:04 (4 weeks ago)	[Tue Jun 23 22:51:04.209932 2026] [security2:error] [pid 685974:tid 140190254261952] [client 189.51. ... show more [Tue Jun 23 22:51:04.209932 2026] [security2:error] [pid 685974:tid 140190254261952] [client 189.51.192.170:36040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "ajqraEAsrXxVzW7P0ef8rQACgxg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[685999] [OC3mua3AULQ] [ajqraEAsrXxVzW7P0ef8rQACgxg] keep_alive=[1] ... show less	Email Spam Hacking
Anonymous	2026-06-19 03:45:41 (1 month ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Exploited Host Bad Web Bot
🇮🇩 hermawan	2026-05-30 17:35:28 (1 month ago)	[Sun May 31 00:35:23.865955 2026] [authz_core:error] [pid 520796:tid 140573573826240] [client 189.51 ... show more [Sun May 31 00:35:23.865955 2026] [authz_core:error] [pid 520796:tid 140573573826240] [client 189.51.192.170:54051] AH01630: client denied by server configuration: /var/www/index.php, referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[520815] [UQTQYowtcfE] [ahsf28LCDwehz_ZMbXwjLAAABRI] keep_alive=[1] [2026-05-31 00:35:23.865958] [R:ahsf28LCDwehz_ZMbXwjLAAABRI] UA:'Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'/' Referer:'https://staklim-jatim.bmkg.go.id/ Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8 ... show less	Email Spam Hacking
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 05d1ccb8-9fe2-4914-b2a4-f363f4cb0b0e	DDoS Attack
🇬🇧 PeravixGroup	2026-05-25 16:26:50 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇦🇹 urnilxfgbez	2026-05-22 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇷🇺 genokrad	2026-05-21 21:34:04 (2 months ago)	Unauthorized connection try on TCP/23 (Telnet)	Port Scan
🇨🇭 ALPHANET	2026-05-13 05:10:09 (2 months ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇨🇳 ThreatBook.io	2026-05-05 00:03:24 (2 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/189.51.192.170	SSH
🇺🇸 MPL	2026-05-04 01:07:40 (2 months ago)	tcp/23	Port Scan
🇺🇸 RAP	2026-05-01 05:24:57 (2 months ago)	2026-05-01 05:24:57 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 LSPCCU	2026-05-01 04:36:33 (2 months ago)	TSEC Honeypot Network report. Threat score: 60/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 60/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH, IoT Targeted. Honeypot: ssh-telnet, cowrie. Context: 189. show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH IoT Targeted
🇫🇷 security.rdmc.fr	2026-04-29 08:53:31 (2 months ago)	Port Scan Attack proto:TCP src:54072 dst:23	Port Scan

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.16.238.49

🇬🇧 185.247.137.131

🇮🇩 180.244.187.150

🇺🇸 173.255.221.22

🇳🇱 172.253.7.208

🇩🇪 172.70.243.38

🇺🇸 147.185.132.92

🇷🇺 109.173.39.103

🇺🇸 47.196.124.18

🇺🇸 44.220.233.148

🇬🇧 35.203.210.113

🇮🇳 2401:4900:1ca2:822e:a428:3a81:cd93:c675

🇨🇴 190.108.77.117

🇺🇸 172.249.169.74

🇷🇺 104.28.161.41

🇱🇹 81.30.98.144

🇮🇳 49.47.128.138

🇺🇸 46.202.227.171

🇨🇳 36.149.73.41

🇮🇳 27.107.102.154