JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.89.31.140

190.89.31.140 was found in our database!

This IP was reported 209 times. Confidence of Abuse is 0%: ?

ISP	CORPORACION FIBEX TELECOM, C.A.
Usage Type	Fixed Line ISP
ASN	AS264628
Domain Name	fibextelecom.net
Country	🇻🇪 Venezuela (Bolivarian Republic of)
City	Maracay, Aragua

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.89.31.140

Whois 190.89.31.140

IP Abuse Reports for 190.89.31.140:

This IP address has been reported a total of 209 times from 70 distinct sources. 190.89.31.140 was first reported on August 26th 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇻🇪 fibextelecom	2026-04-12 12:59:05 (2 months ago)	2026-04-12T08:59:04.494458-04:00 proxmox kernel: [1430655.538020] [UFW BLOCK] IN=vmbr0 OUT= MAC=90:b ... show more 2026-04-12T08:59:04.494458-04:00 proxmox kernel: [1430655.538020] [UFW BLOCK] IN=vmbr0 OUT= MAC=90:b1:1c:1c:e8:5c:a0:70:b7:48:0b:70:08:00 SRC=190.89.31.140 DST=172.16.9.8 LEN=140 TOS=0x00 PREC=0x00 TTL=59 ID=5693 DF PROTO=UDP SPT=54453 DPT=52389 LEN=120 2026-04-12T08:59:04.495211-04:00 proxmox kernel: [1430655.538799] [UFW BLOCK] IN=vmbr0 OUT= MAC=90:b1:1c:1c:e8:5c:a0:70:b7:48:0b:70:08:00 SRC=190.89.31.140 DST=172.16.9.8 LEN=140 TOS=0x00 PREC=0x00 TTL=59 ID=5694 DF PROTO=UDP SPT=12680 DPT=52389 LEN=120 2026-04-12T08:59:04.496784-04:00 proxmox kernel: [1430655.540368] [UFW BLOCK] IN=vmbr0 OUT= MAC=90:b1:1c:1c:e8:5c:a0:70:b7:48:0b:70:08:00 SRC=190.89.31.140 DST=172.16.9.8 LEN=140 TOS=0x00 PREC=0x00 TTL=59 ID=5695 DF PROTO=UDP SPT=20403 DPT=52389 LEN=120 ... show less	Port Scan
🇺🇸 gui-ying233	2026-03-28 00:11:31 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 show less	Bad Web Bot
🇹🇷 rtbh.com.tr	2026-03-27 20:12:18 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇦 polycoda	2026-03-11 11:55:22 (3 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 matt	2026-03-04 02:58:45 (3 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇸🇪 Lemmy	2026-02-17 22:01:54 (3 months ago)	apache-noscript	Web App Attack
Anonymous	2026-02-10 18:38:32 (4 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
Anonymous	2026-02-03 02:42:19 (4 months ago)	scanning http requests from known botnet	Web App Attack
🇦🇺 MAGIC	2026-01-31 01:10:00 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 vtchost.com	2026-01-24 00:12:32 (4 months ago)	invalid user agent, possible botnet ...	Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-01-18 07:37:22 (4 months ago)	(mod_security) mod_security (id:217210) triggered by 190.89.31.140 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217210) triggered by 190.89.31.140 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 18 02:37:14.790134 2026] [security2:error] [pid 37351:tid 37351] [client 190.89.31.140:46721] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|usa7avoidss.shop\|F\|4"] [data "GET http://usa7avoidss.shop HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "usa7avoidss.shop"] [uri "/"] [unique_id "aWyNqtZkzkOEVAXvhzsEwwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-19 21:22:15 (5 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-12-18 02:54:33 (5 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.18 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.18 is noted in report timestamp show less	Hacking Brute-Force
🇮🇹 VHosting	2025-12-16 22:17:39 (5 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇨🇭 backslash	2025-12-11 08:40:09 (6 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot

Showing 1 to 15 of 209 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.136

🇦🇿 91.242.28.35

🇮🇳 223.228.233.16

🇯🇵 203.25.124.28

🇮🇳 182.78.86.62

🇩🇪 150.241.77.144

🇨🇳 124.88.113.189

🇸🇬 104.43.56.65

🇭🇰 103.226.124.223

🇫🇷 85.217.140.50

🇺🇸 45.45.237.171

🇨🇳 42.5.127.68

🇦🇺 27.124.111.122

🇺🇸 20.253.176.76

🇨🇳 223.88.58.172

🇰🇷 210.222.46.15

🇺🇦 188.163.44.82

🇯🇵 139.162.117.40

🇮🇩 119.235.221.127

🇰🇷 112.216.129.27