JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.97.228.154

190.97.228.154 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 64%: ?

64%

ISP	VIGINET C.A
Usage Type	Fixed Line ISP
ASN	AS263703
Domain Name	vnet.com.ve
Country	🇻🇪 Venezuela (Bolivarian Republic of)
City	El Vigia, Merida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.97.228.154

Whois 190.97.228.154

IP Abuse Reports for 190.97.228.154:

This IP address has been reported a total of 89 times from 54 distinct sources. 190.97.228.154 was first reported on July 1st 2022, and the most recent report was 42 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-17 13:29:35 (42 minutes ago)	(mod_security) mod_security (id:210350) triggered by 190.97.228.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 190.97.228.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:29:30.977119 2026] [security2:error] [pid 4530:tid 4530] [client 190.97.228.154:51064] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|coyotebytes.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "coyotebytes.com"] [uri "/"] [unique_id "aqvrOjDOCdaVaMBmzD0CSQAAABQ"], referer: https://daandpachecker.online/dir/trusted-link-building-46219 show less	Brute-Force Bad Web Bot Web App Attack
🇬🇪 ORDUNET	2026-09-15 10:17:30 (2 days ago)	Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:4444/udp in AS203136 (LLC Ordu ... show more Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:4444/udp in AS203136 (LLC Ordunet), Georgia, on 2026-09-15 from 14:17 local time (+04:00). This source sustained more than 800 packets/sec toward a single UDP port, against about 200 packets/sec for a legitimate player of that server. It was one of 8847 sources in 2396 networks and 160 countries recorded inside a single 25-minute window - the server's entire real audience is about a hundred players. Detected on a MikroTik RouterOS router in the raw/prerouting chain (dst-limit 800,200,src-address/10s); the timestamp is when this source crossed the threshold. Not a scan and not brute force - a packet flood, so the host is most likely compromised. Evidence: [email protected]. show less	DDoS Attack Exploited Host
🇺🇸 gui-ying233	2026-09-11 00:10:23 (6 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇬 mypatricks	2026-09-08 18:25:43 (1 week ago)	190.97.228.154 \| Port: 10934 \| DNS: 190.97.228.154 2026-09-09T02:25:42+08:00 America/Caracas \| IPs S ... show more 190.97.228.154 \| Port: 10934 \| DNS: 190.97.228.154 2026-09-09T02:25:42+08:00 America/Caracas \| IPs Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /hashtag/%E9%A3%9E%E6%9C%BA?1f9aea4ed9dec10b30b17ca=KRW&code=KRW \| Ref: - \| Country: VE/Venezuela/−04:00 IP City: El Vigía Windows a37fff377b6274c4-MIA/Miami, FL, United States 1 hits/0 secs Browser 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 ipblock.com	2026-09-08 17:06:00 (1 week ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-09-03 10:29:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-08-28 13:21:26 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-28 03:04:46 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-26 12:52:32 (3 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 73>=65, Abuse 76, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇺🇸 stechusa	2026-08-26 05:48:07 (3 weeks ago)	ELEVATED_THREAT \| country=VE \| ASN=VIGINET C.A \| Facet request during elevated threat (facet_ratio=0 ... show more ELEVATED_THREAT \| country=VE \| ASN=VIGINET C.A \| Facet request during elevated threat (facet_ratio=0.92, unique_ips=364) \| 31 IPs targeting /category.html \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇺🇸 pixelmemory.us	2026-08-26 00:10:36 (3 weeks ago)	2026-08-26T00:05:31 190.97.228.154 GET /Photos/Outdoors/2024-04-28%20Filoli/raw/DSC06780.ARW Mozilla ... show more 2026-08-26T00:05:31 190.97.228.154 GET /Photos/Outdoors/2024-04-28%20Filoli/raw/DSC06780.ARW Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 15:23:11 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Sklurk	2026-08-23 13:25:39 (3 weeks ago)	Web App Attack	Web App Attack
🇺🇸 gui-ying233	2026-08-23 02:05:22 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-20 19:30:26 (3 weeks ago)	Large-scale coordinated botnet (1.2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a ... show more Large-scale coordinated botnet (1.2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Attack Signature Blocked: /catalog/product_compare/add/product/10937/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvY2F0YWxvZ3NlYXJjaC9yZXN1bHQvP2NhdD00MiZhbXA7cD0xMyZhbXA7cT1uZWMrbnA0MDM,/form_key/l2DgscKE61cjKhy7/ \| UA: Mozilla/5.0 (compatible; MSIE 5.0; Windows NT 5.01; Trident/5.0) \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 204.199.57.196

🇨🇭 34.65.222.81

🇺🇸 216.180.246.128

🇵🇦 200.46.151.238

🇮🇳 182.48.211.33

🇦🇷 181.228.92.160

🇰🇷 165.154.52.159

🇺🇸 137.184.176.73

🇧🇬 109.160.32.106

🇰🇿 95.58.221.186

🇺🇦 94.179.1.38

🇺🇸 74.82.47.51

🇺🇸 65.49.20.108

🇨🇿 46.36.44.201

🇷🇴 2.57.121.25

🇺🇿 198.163.195.13

🇰🇷 168.107.28.249

🇳🇱 149.3.170.137

🇧🇩 103.74.230.95

🇫🇷 88.178.42.165