JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.143.252.105

190.143.252.105 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 17%: ?

17%

ISP	Telefonia Celular de Nicaragua SA.
Usage Type	Fixed Line ISP
ASN	AS28036
Hostname(s)	host105-252-143-190tigobusiness.com.ni
Domain Name	movistar.com.ni
Country	🇳🇮 Nicaragua
City	Managua, Managua Department

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.143.252.105

Whois 190.143.252.105

IP Abuse Reports for 190.143.252.105:

This IP address has been reported a total of 12 times from 8 distinct sources. 190.143.252.105 was first reported on November 19th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ALPHANET	2026-10-25 12:57:36 (1 day ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 SX Communications	2026-10-06 13:57:45 (2 weeks ago)	HTTP application-layer DoS / botnet traffic from 190.143.252.105: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 190.143.252.105: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 鬼影233	2026-09-09 22:18:32 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-26 02:43:22 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇩🇪 HandyTreff.de	2026-08-07 00:53:59 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -67.542 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -67.542 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇩🇪 filstal.org	2026-06-20 04:46:44 (4 months ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Windows 95) AppleWebKit/533.1 (KHTML, like Gecko) Chrome/60.0.850.0 Safari/533.1 show less	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-04-09 01:06:10 (6 months ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇨🇭 backslash	2026-03-06 01:03:05 (7 months ago)	block ruleset SQL-Injections with typical fingerprints FD77349DE692F8D05B4EE282DE6A5198C42AB90F	SQL Injection
🇺🇸 鬼影233	2026-02-19 00:28:47 (8 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-01 04:20:57 (9 months ago)	(mod_security) mod_security (id:217210) triggered by 190.143.252.105 (host105-252-143-190tigobusines ... show more (mod_security) mod_security (id:217210) triggered by 190.143.252.105 (host105-252-143-190tigobusiness.com.ni): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 31 23:20:50.866930 2025] [security2:error] [pid 1521765:tid 1521765] [client 190.143.252.105:20431] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|usa7faces.top\|F\|4"] [data "GET http://usa7faces.top HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "usa7faces.top"] [uri "/"] [unique_id "aVX2IhsqO7-La9cxpZIJGQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-25 04:50:47 (11 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-19 23:23:35 (11 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 201.184.50.251

🇨🇳 183.233.149.100

🇧🇷 177.10.160.46

🇫🇷 164.68.127.225

🇭🇰 156.225.1.10

🇺🇸 147.185.132.40

🇯🇵 111.238.174.6

🇧🇩 103.133.201.241

🇮🇷 62.60.134.212

🇩🇪 51.195.40.26

🇮🇩 43.173.15.199

🇮🇳 42.110.139.74

🇰🇪 41.60.247.121

🇻🇳 27.79.122.127

🇨🇳 14.116.189.74

🇳🇱 213.152.161.73

🇺🇸 209.87.169.45

🇺🇸 199.165.159.192

🇫🇮 196.244.192.202

🇨🇳 182.111.68.44