ABUSE.MOM
THREAT REPORT

IP Threat Report
190.83.114.104

ABUSE.MOM — BEHAVE OR GET EXPOSED

Generated: 2026-07-29 17:31:01
First seen: 2026-06-13 13:07:13
Last seen: 2026-06-26 20:05:44
60

⛔ Verdict: BLOCK

This IP address has been classified as a source of malicious automated activity. Threat score: 60/100. Total malicious requests observed: 72.

01

Geolocation & Classification

IP Address
190.83.114.104
Type
Unknown
Country
🇵🇾 PY
City
Presidente Franco
ISP
Campos Farias Guilherme
Organization
Campos Farias Guilherme
Autonomous System
Unknown
Hit Count
72
02

Detection Signatures

SignatureDescriptionPointsSeverity
Directory ScanBehavioral anomaly detected by automated analysis+0
Σ = 0
03

Observed Activity

Reconstructed HTTP requests from server access logs. Target domains redacted for security.

[redacted]
GET
/
200
Requests shown: 1 · HTTP 404: 0 · Dangerous patterns: 0

* Typical request patterns for detected signatures. Actual target domains are redacted.

04

Timeline

2026-06-13 13:07:13
First malicious request detected
IP entered monitoring from server access logs
During observation
Multiple detection signatures triggered
Directory Scan
2026-06-26 20:05:44
Last malicious request observed
Total score reached: 60/100
Next cycle
IP blocked — all subsequent requests denied (HTTP 403)
Added to blocklist automatically
06

Recommendations

Actions taken & recommended

  • IP 190.83.114.104 is blocked at application level (HTTP 403)
  • Consider blocking at firewall level (iptables/CSF) to reduce server load
  • Other malicious IPs detected in the same /24 subnet — consider blocking 190.83.114.0/24
  • Ensure sensitive files (.env, .git, backups) are not accessible from the web

⚙️ General Security

Add 190.83.114.104 to your firewall blocklist. Review logs for successful connections. Enable comprehensive logging on all public-facing services.

07

Neighbors in 190.83.114.0/24

Other blocked IPs from the same /24 subnet — indicates systematic abuse from this network range.

09

Blacklist Status (DNSBL)

This IP was checked against major DNS-based blacklists used by mail servers and firewalls worldwide.

✓ Clean
zen.spamhaus.org
✓ Clean
b.barracudacentral.org
✓ Clean
cbl.abuseat.org
✓ Clean
spam.dnsbl.sorbs.net
✓ Clean
bl.spamcop.net
✓ Clean
bl.blocklist.de
✓ Clean
psbl.surriel.com
✓ Clean
dnsbl.dronebl.org

Checked: Spamhaus, SpamCop, Barracuda, SORBS, CBL, UCEProtect. Results may change over time.

10

Threat Analysis

190.83.114.104 has been assigned a threat score of 60/100 (High). At this threat level, the IP is considered high risk. Firewall rules should be updated to deny traffic from this source.

📊 Threat Analysis

190.83.114.104 is registered in Presidente Franco, PY, operating on the network of Campos Farias Guilherme. This IP first appeared in our threat feeds after triggering multiple behavioral detection signatures. Our sensors captured 72 malicious requests from this address across a 13-day span, reflecting a sustained attack cadence of ~5.5 requests per day. PY currently accounts for 29 blocked IPs in our database, making it a notable source of malicious traffic. At 60/100, this IP presents a meaningful threat. Implement rate limiting with escalation to blocking.

11

Related Threats

🇵🇾 Top threats from PY

138.186.61.62 (103)181.94.250.73 (103)181.126.153.167 (103)190.83.114.133 (103)181.124.59.171 (70)View all →
12

Security Intelligence

💡 Multi-Factor Authentication Importance

MFA dramatically reduces the effectiveness of credential-based attacks. Even when passwords are compromised through phishing or data breaches, the additional authentication factor prevents unauthorized access in the vast majority of cases.

💡 Mobile Malware Distribution

Mobile malware reaches devices through unofficial app stores, malicious links, and even occasionally through official stores using obfuscation techniques. Banking trojans, spyware, and ransomware variants specifically designed for mobile platforms continue to proliferate.

🔍 Check Any IP Address

Share this report: