JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.9.52.130

190.9.52.130 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 38%: ?

38%

ISP	Konecta de Mexico, S. de R.L. de C.V.
Usage Type	Fixed Line ISP
ASN	AS262913
Hostname(s)	52.130.konectate.co
Domain Name	konecta.mx
Country	🇲🇽 Mexico
City	Tijuana, Baja California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.9.52.130

Whois 190.9.52.130

IP Abuse Reports for 190.9.52.130:

This IP address has been reported a total of 73 times from 47 distinct sources. 190.9.52.130 was first reported on May 21st 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-09-18 14:47:56 (2 days ago)	190.9.52.130 - - [18/Sep/2026:16:38:02 +0200] "GET /0yylge5 HTTP/2.0" 404 15828 "https://www.google. ... show more 190.9.52.130 - - [18/Sep/2026:16:38:02 +0200] "GET /0yylge5 HTTP/2.0" 404 15828 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 190.9.52.130 - - [18/Sep/2026:16:38:03 +0200] "GET /fzx65zg HTTP/2.0" 404 15828 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 190.9.52.130 - - [18/Sep/2026:16:38:02 +0200] "GET /k2dkrxfszopwo HTTP/2.0" 404 15828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 190.9.52.130 - - [18/Sep/2026:16:38:03 +0200] "GET /kcedky7n6rl HTTP/2.0" 404 15828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking
🇪🇸 el-brujo	2026-09-18 14:38:00 (2 days ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 TPI-Abuse	2026-09-18 03:02:58 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 190.9.52.130 (52.130.konectate.co): 1 in the la ... show more (mod_security) mod_security (id:210350) triggered by 190.9.52.130 (52.130.konectate.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 23:02:52.204447 2026] [security2:error] [pid 18306:tid 18306] [client 190.9.52.130:55542] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|wholesaleglassjars.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wholesaleglassjars.com"] [uri "/"] [unique_id "aqyp3CrVrjWZkntnA0xNSgAAAAY"], referer: https://dapacheckerseo.online/dir/trusted-seo-backlinks-232004 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NXTwoThou	2026-09-08 11:39:57 (1 week ago)	Spam	Email Spam
Anonymous	2026-09-06 23:33:49 (2 weeks ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in email-link.asp show less	Exploited Host Bad Web Bot
🇪🇸 el-brujo	2026-08-29 00:13:07 (3 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇫🇷 Sklurk	2026-08-23 07:12:40 (4 weeks ago)	Web App Attack	Web App Attack
🇺🇸 pixelmemory.us	2026-08-20 00:40:26 (1 month ago)	2026-08-20T00:39:05 190.9.52.130 GET /Photos/Vacation/2022-07-15%20Paso%20Robles/raw/DSC05306.ARW.xm ... show more 2026-08-20T00:39:05 190.9.52.130 GET /Photos/Vacation/2022-07-15%20Paso%20Robles/raw/DSC05306.ARW.xmp Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 ... show less	Bad Web Bot
Anonymous	2026-08-09 23:45:37 (1 month ago)	Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/9873/form_key/QIiiZhbFfbukssjF/ \| UA: Mozilla/5.0 (compatible; MSIE 5.0; Windows 98; Trident/4.0) \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-07-24 22:43:07 (1 month ago)	Blocked by UFW (TCP on 8000) Source port: 54368 TTL: 116 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8000) Source port: 54368 TTL: 116 Packet length: 40 TOS: 0x00 This report (for 190.9.52.130) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 stechusa	2026-07-02 17:33:47 (2 months ago)	ELEVATED_THREAT \| country=MX \| ASN=Konecta de Mexico, S. de R.L. de C.V.	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-06-29 14:23:15 (2 months ago)	[Askari] \| country=MX \| ASN=Konecta de Mexico, S. de R.L. de C.V. \| Behavior: HTTP/1.1 over TLS, Con ... show more [Askari] \| country=MX \| ASN=Konecta de Mexico, S. de R.L. de C.V. \| Behavior: HTTP/1.1 over TLS, Concurrent page load during attack, Targeting specific pages show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-06-29 14:23:15 (2 months ago)	country=MX \| ASN=Konecta de Mexico, S. de R.L. de C.V. \| 411 IPs targeting /category/light-bulbs.htm ... show more country=MX \| ASN=Konecta de Mexico, S. de R.L. de C.V. \| 411 IPs targeting /category/light-bulbs.html \| HTTP/1.1 over TLS (elevated=True) \| Facet request during elevated threat (facet_ratio=0.52, unique_ips=1270) show less	Bad Web Bot DDoS Attack
🇩🇪 Vegascosmetics	2026-06-23 15:43:57 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇨🇦 polycoda	2026-06-10 10:53:47 (3 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.60

🇺🇸 172.252.241.147

🇸🇪 171.25.158.24

🇩🇪 147.90.209.9

🇨🇳 120.48.106.235

🇲🇾 113.23.225.9

🇵🇷 67.206.199.37

🇲🇦 41.143.243.86

🇺🇦 37.221.143.111

🇩🇪 5.83.129.53

🇨🇭 209.99.185.195

🇨🇴 181.129.31.42

🇺🇦 178.159.37.78

🇩🇪 167.94.146.51

🇨🇭 162.158.217.68

🇸🇪 155.4.218.159

🇹🇭 106.0.166.123

🇷🇺 95.105.52.153

🇹🇷 94.154.43.196

🇳🇱 85.11.167.138