JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.97.252.187

190.97.252.187 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 40%: ?

40%

ISP	VIGINET C.A
Usage Type	Fixed Line ISP
ASN	AS263703
Domain Name	viginet.com.ve
Country	🇻🇪 Venezuela (Bolivarian Republic of)
City	El Vigia, Merida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.97.252.187

Whois 190.97.252.187

IP Abuse Reports for 190.97.252.187:

This IP address has been reported a total of 53 times from 33 distinct sources. 190.97.252.187 was first reported on December 19th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-06-21 00:03:12 (1 day ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 pltcldvlpr	2026-06-18 14:15:11 (3 days ago)	Bogus Useragent: 190.97.252.187 - - [18/Jun/2026:16:15:10 +0200] "GET /protocol?id=st_3_73&paragraph ... show more Bogus Useragent: 190.97.252.187 - - [18/Jun/2026:16:15:10 +0200] "GET /protocol?id=st_3_73&paragraph=14241141&seq=980 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 11.0; Trident/3.0)" asn=263703 org="VIGINET C.A" country=VE ... show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-09 11:57:40 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security	DDoS Attack Hacking Bad Web Bot
Anonymous	2026-06-09 01:48:03 (1 week ago)	Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Aggressive search filter manipul ... show more Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=33+&product_vc_mcu=106&projector_class=68&q=AC+USB+212+EU&stock=1 \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_6 like Mac OS X) AppleWebKit/534.2 (KHTML, like Gecko) CriOS/28.0.820.0 Mobile/74C604 Safari/534.2 \| (Magento Site) show less	Hacking Bad Web Bot
🇦🇺 MAGIC	2026-06-08 00:33:48 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-06-03 14:40:04 (2 weeks ago)	Web App Attack, Hacking	Hacking Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: fd8a75e9-7ad9-4605-bec7-39ad26683952	DDoS Attack
🇺🇸 TPI-Abuse	2026-04-26 04:22:26 (1 month ago)	(mod_security) mod_security (id:225080) triggered by 190.97.252.187 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225080) triggered by 190.97.252.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 00:22:19.735176 2026] [security2:error] [pid 27578:tid 27578] [client 190.97.252.187:59136] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|www.cffragrances.iee-usa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cffragrances.iee-usa.com"] [uri "/wp-includes/js/tinymce/plugins/directionality/"] [unique_id "ae2S-_QkX9ZeZjCmubo5XQAAAAo"], referer: http://www.cffragrances.iee-usa.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 centurion	2026-04-21 02:47:47 (2 months ago)	Unauthorized attempt on coresecret [6037/tcp] Source port: 42566 TTL: 46 Packet length: 60 TOS: 0x00 ... show more Unauthorized attempt on coresecret [6037/tcp] Source port: 42566 TTL: 46 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 kosada.com	2026-04-17 02:25:49 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇮🇹 A000Z	2026-04-15 02:04:44 (2 months ago)	Fail2Ban: 190.97.252.187 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 190.97.252.187 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-04-09 03:26:29 (2 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇦🇺 MAGIC	2026-04-06 00:27:05 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-04-05 03:37:21 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-03-28 01:01:53 (2 months ago)	Scraping webshop URLs (www.badgehouder.nl), likely botnet drone	Bad Web Bot Exploited Host

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.242

🇩🇪 165.227.134.83

🇨🇳 118.81.204.64

🇺🇸 104.37.86.14

🇸🇬 101.32.242.137

🇺🇸 66.132.172.239

🇺🇸 44.220.188.35

🇨🇳 39.162.168.190

🇺🇸 35.237.177.114

🇺🇸 2604:a880:400:d1:0:4:9e88:7001

🇨🇭 209.99.189.70

🇪🇬 197.161.189.249

🇰🇷 121.185.89.74

🇵🇰 72.255.18.197

🇺🇸 63.135.161.39

🇺🇸 52.146.90.217

🇪🇸 46.6.124.216

🇸🇬 43.173.181.119

🇺🇸 18.189.170.10

🇺🇸 16.58.56.214