JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.97.240.8

190.97.240.8 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 36%: ?

36%

ISP	VIGINET C.A
Usage Type	Fixed Line ISP
ASN	AS263703
Domain Name	viginet.com.ve
Country	🇻🇪 Venezuela (Bolivarian Republic of)
City	El Vigia, Merida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.97.240.8

Whois 190.97.240.8

IP Abuse Reports for 190.97.240.8:

This IP address has been reported a total of 13 times from 12 distinct sources. 190.97.240.8 was first reported on January 14th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-06-15 22:07:25 (3 days ago)	(wordpress) Failed wordpress login from 190.97.240.8 (VE/Venezuela/Mérida/Mérida/-/[redacted]): (CF ... show more (wordpress) Failed wordpress login from 190.97.240.8 (VE/Venezuela/Mérida/Mérida/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇺🇸 Charlesiv	2026-06-15 18:15:44 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from VE. Action taken: BLOCK ASN: 263703 (VIGINET C.A) Pro ... show more Triggered Cloudflare WAF (firewallCustom) from VE. Action taken: BLOCK ASN: 263703 (VIGINET C.A) Protocol: HTTP/1.1 (POST method) Endpoint: /xmlrpc.php Timestamp: 2026-06-15T17:39:11Z Ray ID: a0c35a4d4ab73d8b UA: Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/83.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-15 17:13:44 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 190.97.240.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 190.97.240.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 13:13:40.279400 2026] [security2:error] [pid 30609:tid 30609] [client 190.97.240.8:58081] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|budgetbyron.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "budgetbyron.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajAyxFxBct8oGmkjqC6hZAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 David Koswari	2026-05-29 05:14:00 (3 weeks ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 xmission.com	2026-05-26 17:39:19 (3 weeks ago)	Blocked by UFW (TCP on 9101) Source port: 9298 TTL: 108 Packet length: 48 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 9298 TTL: 108 Packet length: 48 TOS: 0x08 This report (for 190.97.240.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-05-19 05:15:39 (1 month ago)	Connection atttempts against closed TCP ports May 19 07:15:37 BLOCK SRC=190.97.240.8 LEN=52 TOS=0x00 ... show more Connection atttempts against closed TCP ports May 19 07:15:37 BLOCK SRC=190.97.240.8 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=16687 DF PROTO=TCP SPT=44534 DPT=443 WINDOW=65535 RES=0x00 ACK PSH FIN May 19 07:15:38 BLOCK SRC=190.97.240.8 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=16688 DF PROTO=TCP SPT=44534 DPT=443 WINDOW=65535 RES=0x00 ACK PSH FIN May 19 07:15:38 BLOCK SRC=190.97.240.8 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=16689 DF PROTO=TCP SPT=44534 DPT=443 WINDOW=65535 RES=0x00 ACK PSH FIN show less	Port Scan
🇫🇷 security.rdmc.fr	2026-05-09 20:37:42 (1 month ago)	Port Scan Attack proto:TCP src:54521 dst:23	Port Scan
🇳🇱 EGP Abuse Dept	2026-03-18 02:28:54 (3 months ago)	Scanning for port/service exploits on tpc-036.mach3builders.nl	Port Scan Hacking
🇮🇩 hermawan	2026-03-10 03:23:48 (3 months ago)	03/10/2026-10:23:02.738007 [Drop] [] [1:9200018:0] match JA4 hash Microsoft oai-searchbot openai. ... show more 03/10/2026-10:23:02.738007 [Drop] [] [1:9200018:0] match JA4 hash Microsoft oai-searchbot openai.com 74-7-241-181 [**] [Classification: (null)] [Priority: 3] {TCP} 190.97.240.8:27398 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇸🇬 mypatricks	2026-03-04 07:52:05 (3 months ago)	190.97.240.8 \| Port: 13287 \| DNS: 190.97.240.8 2026-03-04T15:52:04+08:00 America/Caracas \| IPs Spam ... show more 190.97.240.8 \| Port: 13287 \| DNS: 190.97.240.8 2026-03-04T15:52:04+08:00 America/Caracas \| IPs Spam list \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /shop/compare/?bdd7bb910073ea60=SGD&code=SGD \| Ref: https://xxxxxx/shop/compare/?code=zh-cn&dbba04db604aaeb797f86a31d=zh-cn \| Country: VE/Venezuela/−04:00 IP City: El Vigía macOS 9d6f4ca1db8b721f-MIA/Miami, FL, United States 1 hits/0 secs Robots 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 gui-ying233	2026-02-14 00:05:47 (4 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-02-10 00:06:45 (4 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-01-14 16:51:04 (5 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.30.64.65

🇧🇷 172.71.234.121

🇹🇼 110.25.105.161

🇪🇬 102.185.217.167

🇺🇸 20.65.195.37

🇧🇷 179.221.200.183

🇭🇰 118.193.32.119

🇻🇳 103.154.176.224

🇸🇬 103.13.206.100

🇷🇴 80.94.92.177

🇸🇬 47.84.188.205

🇺🇸 216.25.89.121

🇹🇼 198.235.24.80

🇺🇸 162.216.150.118

🇸🇬 94.231.206.249

🇺🇸 44.211.125.43

🇪🇸 158.158.104.28

🇮🇳 115.241.228.34

🇳🇱 89.32.243.133

🇺🇸 44.193.135.101