JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.90.74.195

168.90.74.195 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 21%: ?

21%

ISP	VELONET
Usage Type	Fixed Line ISP
ASN	AS52493
Hostname(s)	168-90-74-195.velonet.com.ar
Domain Name	velonet.com.ar
Country	🇦🇷 Argentina
City	General Pico, La Pampa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.90.74.195

Whois 168.90.74.195

IP Abuse Reports for 168.90.74.195:

This IP address has been reported a total of 9 times from 8 distinct sources. 168.90.74.195 was first reported on July 3rd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-10-15 02:34:11 (2 days ago)	[15/Oct/2026:05:34:11 +0300] -- 168.90.74.195 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git ... show more [15/Oct/2026:05:34:11 +0300] -- 168.90.74.195 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/HEAD HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-01 00:00:21 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 168.90.74.195 (168-90-74-195.velonet.com.ar): 1 ... show more (mod_security) mod_security (id:210350) triggered by 168.90.74.195 (168-90-74-195.velonet.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 20:00:12.498332 2026] [security2:error] [pid 29072:tid 29099] [client 168.90.74.195:35986] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ehealthpass.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ehealthpass.com"] [uri "/"] [unique_id "ar2ijNng09sPxhu9pLCsDwAAANc"], referer: https://createwebsitebacklinks.website/dir/trusted-link-building-62619 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-24 07:32:53 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 168.90.74.195 (168-90-74-195.velonet.com.ar): 1 ... show more (mod_security) mod_security (id:210350) triggered by 168.90.74.195 (168-90-74-195.velonet.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 03:32:47.890834 2026] [security2:error] [pid 30918:tid 30918] [client 168.90.74.195:33495] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|personalizednapkins.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "personalizednapkins.com"] [uri "/"] [unique_id "arTSHyxAwUBbfTvqlm7T5AAAAAc"], referer: https://dapaseochecker.online/dir/relevant-seo-backlinks-160835 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-03 02:24:15 (1 month ago)	L7 DDoS: hammering a site's endpoints (login page, AJAX, dynamic pages) with automated requests far ... show more L7 DDoS: hammering a site's endpoints (login page, AJAX, dynamic pages) with automated requests far beyond any human use \| path: /calendrier-2/action~agenda/time_limit~1763506800/tag_ids~610,674,425,614/request_format~json/ \| 2026-09-03 02:24 UTC show less	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-08-31 19:00:48 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-08-07 00:00:07 (2 months ago)	Scraping webshop URLs (www.dewijs-3d.com), likely botnet drone	Bad Web Bot Exploited Host
Anonymous	2026-08-06 23:50:24 (2 months ago)	Blocked by ModSec and CSF	Port Scan
Anonymous	2026-08-06 19:56:00 (2 months ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇨🇭 backslash	2026-07-03 15:36:03 (3 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.186.13.130

🇬🇧 217.146.80.117

🇧🇷 205.210.31.246

🇳🇱 195.178.110.26

🇧🇷 187.103.219.79

🇹🇼 110.25.101.75

🇯🇵 107.155.15.218

🇺🇸 66.249.84.38

🇲🇻 43.231.28.132

🇩🇿 41.101.241.212

🇨🇳 36.159.157.203

🇬🇧 35.203.210.18

🇧🇪 23.251.128.237

🇭🇰 219.79.4.2

🇺🇸 216.25.89.70

🇧🇪 198.235.24.170

🇨🇦 195.63.16.234

🇵🇾 181.91.85.125

🇦🇹 152.53.46.2

🇮🇳 103.212.121.163