JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

190.142.66.28

Recent Activity

Abuse Confidence Score

65% Elevated

15 reports

12 reporters · latest 10 hours ago

ISP: Corporación Telemic C.A.
Usage Type: Fixed Line ISP
ASN: AS21826
Domain Name: inter.com.ve
Country: 🇻🇪 Venezuela (Bolivarian Republic of)
City: Ciudad Guayana, Bolivar

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 12 distinct reporters

First reported

October 20th 2026

Most recent report

10 hours ago

Last 60 days

Top reporter locations 🇨🇿 Czechia 4 🇺🇸 United States of America 3 🇩🇪 Germany 2

Most common categories Web App Attack 12 Brute-Force 9 Bad Web Bot 3 Hacking 2 VPN IP 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-06 17:53:26 UTC · (10 hours ago)	(mod_security) mod_security (id:225170) triggered by 190.142.66.28 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:53:21.637246 2026] [security2:error] [pid 25513:tid 25513] [client 190.142.66.28:54398] M ... show more (mod_security) mod_security (id:225170) triggered by 190.142.66.28 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:53:21.637246 2026] [security2:error] [pid 25513:tid 25513] [client 190.142.66.28:54398] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ferrarapanfitness.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ferrarapanfitness.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au4UEQTvCvKNPDYyl98Z8QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 georgengelmann	2026-11-05 12:56:17 UTC · (1 day ago)	Failed login attempt for superuser	Brute-Force Web App Attack
🇨🇿 Countryman	2026-11-05 01:10:01 UTC · (2 days ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇿 lp	2026-11-03 17:48:30 UTC · (3 days ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 190.142.66.28 2026-11-03T18:40:20+0100 vpn Access-Reject station: 190.142.66.28	Brute-Force Web App Attack
🇮🇹 Inartis	2026-11-02 19:34:22 UTC · (4 days ago)	190.142.66.28 - - [02/Nov/2026:20:34:21 +0100] "POST /xmlrpc.php HTTP/2.0" 403 282 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E148 Safari/604.1" ...	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-02 00:01:09 UTC · (5 days ago)	Web application attack detected.	Web App Attack
🇨🇿 Countryman	2026-11-01 01:10:02 UTC · (6 days ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇫🇮 YF	2026-10-31 20:00:51 UTC · (6 days ago)	WordPress author enumeration	Web App Attack
🇨🇿 lp	2026-10-31 19:32:45 UTC · (6 days ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 190.142.66.28 2026-10-31T20:17:02+0100 vpn Access-Reject station: 190.142.66.28	Brute-Force Web App Attack
🇪🇸 10dencehispahard SL	2026-10-29 20:00:57 UTC · (1 week ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇺🇸 netlinkpro	2026-10-27 23:50:00 UTC · (1 week ago)	Web scanning: probed for /xmlrpc.php. 1 request, all refused (HTTP 4xx), 2026-10-27 23:50–23:50 UTC.	Web App Attack
🇲🇽 octageeks.com	2026-10-27 04:49:23 UTC · (1 week ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇩🇪 FeG Deutschland	2026-10-26 09:14:05 UTC · (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 00:01:12 UTC · (1 week ago)	(mod_security) mod_security (id:225170) triggered by 190.142.66.28 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 20:01:05.320479 2026] [security2:error] [pid 20816:tid 20816] [client 190.142.66.28:35486] M ... show more (mod_security) mod_security (id:225170) triggered by 190.142.66.28 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 20:01:05.320479 2026] [security2:error] [pid 20816:tid 20816] [client 190.142.66.28:35486] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jesussotoca.bigchus.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jesussotoca.bigchus.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "at6YQVnc85BghGN-Z9eCQwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-10-20 22:14:01 UTC · (2 weeks ago)	cloudlinux2 fail2ban: 2026-10-21 00:09:35,616 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 197.7.115.136 - 2026-10-21 00:09:35cloudlinux2 fail2ban: 2026-10-21 00:10:05,638 fail2ban.filter [1957]: INFO [plesk-modsecurity] ... show more cloudlinux2 fail2ban: 2026-10-21 00:09:35,616 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 197.7.115.136 - 2026-10-21 00:09:35cloudlinux2 fail2ban: 2026-10-21 00:10:05,638 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 197.0.3.148 - 2026-10-21 00:10:05cloudlinux2 fail2ban: 2026-10-21 00:10:11,706 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 124.120.172.165 - 2026-10-21 00:10:11cloudlinux2 fail2ban: 2026-10-21 00:11:09,252 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 197.0.3.148 - 2026-10-21 00:11:09cloudlinux2 fail2ban: 2026-10-21 00:12:13,097 fail2ban.actions [1957]: NOTICE [plesk-modsecurity] Ban 197.0.3.148cloudlinux2 fail2ban: 2026-10-21 00:12:13,017 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 197.0.3.148 - 2026-10-21 00:12:13cloudlinux2 fail2ban: 2026-10-21 00:12:13,103 fail2ban.filter [1957]: INFO [recidive] Found 197.0.3.148 - 2026-10-21 00:12:13cloudlinux2 fail2ban: 2026-10-21 00:12 show less	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 187.190.185.251

🇺🇸 185.61.208.202

🇫🇮 147.185.133.74

🇮🇷 91.92.207.15

🇺🇸 66.234.152.91

🇳🇱 45.148.10.152

🇨🇳 39.101.92.123

🇨🇳 39.101.88.196

🇪🇸 193.19.207.101

🇽🇰 178.175.124.27

🇸🇬 82.197.70.96

🇩🇪 69.5.169.233

🇳🇱 64.205.72.45

🇮🇳 59.96.139.92

🇫🇷 45.88.191.118

🇸🇬 43.134.54.246

🇳🇬 41.216.167.226

🇬🇧 35.203.211.26

🇬🇧 35.203.210.48

🇺🇸 18.218.118.203