JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.97.245.63

190.97.245.63 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 43%: ?

43%

ISP	VIGINET C.A
Usage Type	Fixed Line ISP
ASN	AS263703
Hostname(s)	ip-190-97-245-63.viginet.com.ve
Domain Name	viginet.com.ve
Country	🇻🇪 Venezuela (Bolivarian Republic of)
City	El Vigia, Merida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.97.245.63

Whois 190.97.245.63

IP Abuse Reports for 190.97.245.63:

This IP address has been reported a total of 32 times from 25 distinct sources. 190.97.245.63 was first reported on February 28th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HandyTreff.de	2026-07-13 05:53:17 (1 day ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -75.54 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -75.54 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 05:30:09 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-19 07:30:25 (3 weeks ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/576/form_key/nVqwbdiatfczywsu/ \| UA: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_8_6 rv:2.0; th-TH) AppleWebKit/533.35.5 (KHTML, like Gecko) Version/5.0.1 Safari/533.35.5 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 20:05:45 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 190.97.245.63 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 190.97.245.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 16:05:37.392537 2026] [security2:error] [pid 31989:tid 31989] [client 190.97.245.63:55559] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 190.97.245.63 (+1 hits since last alert)\|thebrotherhoodlounge.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thebrotherhoodlounge.com"] [uri "/xmlrpc.php"] [unique_id "ajRPkZzbA0D2Tw2qhf0ALAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marc	2026-06-18 19:30:03 (3 weeks ago)	190.97.245.63 - - [18/Jun/2026:21:28:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3294 "-" "Jetpack by ... show more 190.97.245.63 - - [18/Jun/2026:21:28:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3294 "-" "Jetpack by WordPress.com" 190.97.245.63 - - [18/Jun/2026:21:29:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3296 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" 190.97.245.63 - - [18/Jun/2026:21:30:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3295 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 19:02:39 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 190.97.245.63 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 190.97.245.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 15:02:34.602460 2026] [security2:error] [pid 2957:tid 2957] [client 190.97.245.63:61611] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 190.97.245.63 (+1 hits since last alert)\|cajunpicasso.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cajunpicasso.com"] [uri "/xmlrpc.php"] [unique_id "ajRAypwLEbXfl0cA_B2kFwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-06-18 17:56:20 (3 weeks ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇩🇪 BlueWire Hosting	2026-06-18 17:46:17 (3 weeks ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇪 Vegascosmetics	2026-06-12 09:39:23 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇦🇺 MAGIC	2026-06-07 02:02:54 (1 month ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 1175168a-7e6d-467e-bb9a-dd1cdfa3fb9e	DDoS Attack
🇳🇱 BIV	2026-05-26 03:16:46 (1 month ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:Suricata. Ports: 26524. Automated tiered (T-Pot+ ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:Suricata. Ports: 26524. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-05-23 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 aki	2026-05-23 04:34:21 (1 month ago)	Drop: ...	Port Scan
🇺🇸 MPL	2026-05-15 10:34:47 (1 month ago)	tcp/23	Port Scan

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.239.251.12

🇫🇷 91.196.152.10

🇩🇪 8.211.45.239

🇵🇭 223.25.29.55

🇨🇳 180.76.195.169

🇺🇸 129.153.117.122

🇨🇳 115.190.181.18

🇦🇪 92.99.75.23

🇳🇱 89.248.173.162

🇺🇸 71.6.232.30

🇳🇱 45.148.10.157

🇬🇧 45.82.76.108

🇺🇸 44.153.250.171

🇫🇷 2.16.245.30

🇨🇦 167.114.156.169

🇮🇳 113.30.177.170

🇮🇳 103.66.78.63

🇱🇹 77.90.185.20

🇩🇪 69.5.169.156

🇺🇸 66.132.172.102