191.103.120.42
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- IBW Communications
- Usage Type
- Fixed Line ISP
- ASN
- AS25607
- Hostname(s)
- 42.120.103.191.biz.sta.ibw.com.ni
- Domain Name
- ibw.com.ni
- Country
- 🇳🇮 Nicaragua
- City
- Managua, Managua Department
Abuse Reports
Total reports
24 from
15 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 justbible |
|
Bad Web Bot | |
| 🇩🇪 LRob |
Proxynvader botnet, shop flood (L7 DDoS): https://shieldlist.eu/en/threats/proxynvader | path: /31-meilleur-velo-entre-3000-et-4000-euros | query: q=Marque-Scott | src_port: 35277
|
DDoS Attack Web App Attack | |
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T22:31:59Z.
|
Bad Web Bot | |
| 🇨🇭 ALPHANET |
Botnet or web spider not respecting robots.txt
|
DDoS Attack Exploited Host | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 Zandro |
distributed harvester
|
DDoS Attack Bad Web Bot Exploited Host | |
| Anonymous |
Unauthorized connection attempt on Port 23
|
Port Scan Hacking Exploited Host | |
| 🇨🇦 polycoda |
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
|
DDoS Attack | |
| 🇺🇸 stechusa |
[Askari] | Behavior: HTTP/1.1 over TLS, Holding server worker, Concurrent page load during attack, Targeting specific pages
|
Bad Web Bot DDoS Attack | |
| 🇺🇸 stechusa |
ELEVATED_THREAT | 17 IPs targeting /category.html | Facet request during elevated threat (facet_ratio=0.70, unique_ips=104) | HTTP/1.1 over TLS (elevated=True)
|
Bad Web Bot DDoS Attack | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇫🇷 vtchost.com |
requested honeypot page - ignored robots.txt - possible botnet
...
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown