JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

190.103.29.124

Recent Activity

Abuse confidence score ?

25% Elevated

48 reports

25 reporters · latest 1 day ago

ISP	CORPORACION FIBEX TELECOM, C.A.
Usage Type	Fixed Line ISP
ASN	AS264628
Domain Name	fibextelecom.net
Country	🇻🇪 Venezuela (Bolivarian Republic of)
City	Valle de La Pascua, Guarico

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 190.103.29.124

Export CSV

This IP address has been reported a total of 48 times from 25 distinct sources. 190.103.29.124 was first reported on August 11th 2023, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: United States of America with 3 reports; Indonesia with 1 report; Russian Federation with 1 report. The most common categories in these recent reports were: Bad Web Bot 5 times; Web App Attack 4 times; Brute-Force 3 times; Hacking 2 times; DDoS Attack 2 times; Other 8 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-26 13:32:42 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 190.103.29.124 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 190.103.29.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 09:32:35.712921 2026] [security2:error] [pid 7311:tid 7311] [client 190.103.29.124:59686] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cbcfargo.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "at9Wc9mEgkqj4YSHfCxnVQAAAAQ"], referer: https://cbcfargo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 David Koswari	2026-10-26 05:22:00 (1 day ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
Anonymous	2026-10-15 10:15:26 (1 week ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /wishlist/index/add/product/12927/form_key/XZqhVzHioRRjsmX5/ \| UA: Opera/9.37.(Windows NT 5.2; an-ES) Presto/2.9.179 Version/11.00 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 12:13:41 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 190.103.29.124 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 190.103.29.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 08:13:33.056580 2026] [security2:error] [pid 627707:tid 627707] [client 190.103.29.124:60996] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|garon.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/chappy karon.html"] [unique_id "arZlbYWzKAtJiqJbXTEyMAAAAAU"], referer: https://www.garon.us/zindex.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-07 04:03:38 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A315&f%5B1%5D=digest_key_terms%3A758&f%5B2%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B495%5D=495 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-27 05:15:13 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-02 22:55:18 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-07-08 03:32:20 (3 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 kosada.com	2026-06-29 08:30:54 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (5 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 3f99e09e-d450-49c0-a2ce-b3198b9521cc	DDoS Attack
🇩🇪 filstal.org	2026-05-01 14:36:52 (5 months ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_11_6 rv:2.0; ak-GH) A ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_11_6 rv:2.0; ak-GH) AppleWebKit/534.19.4 (KHTML; like Gecko) Version/5.0 Safari/534.19.4). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇺🇸 sumnone	2026-03-03 01:00:09 (7 months ago)	Port probing on unauthorized port 445	Port Scan Hacking Exploited Host
🇨🇦 smick	2025-12-03 02:38:23 (10 months ago)	Brute-force attack.	Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-11-08 18:20:21 (11 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇳🇱 exxos	2025-08-29 22:03:01 (1 year ago)	Attacks with Bad user agents	Hacking

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.87.169.38

🇦🇷 181.47.126.140

🇺🇸 173.249.206.162

🇺🇸 161.232.11.38

🇩🇪 134.209.253.32

🇩🇪 107.189.12.33

🇸🇬 104.28.254.47

🇺🇦 91.196.178.114

🇩🇪 89.34.219.139

🇫🇷 51.255.47.232

🇫🇷 13.140.155.222

🇨🇳 8.163.24.10

🇩🇪 213.209.159.230

🇺🇸 184.105.247.252

🇺🇸 161.232.10.38

🇵🇰 160.250.114.149

🇨🇳 117.50.70.125

🇩🇪 109.160.32.47

🇸🇬 104.28.156.139

🇮🇩 103.154.77.48