JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.141.255.192

192.141.255.192 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 33%: ?

33%

ISP	RCM BRASIL MULTIMIDIA LTDA
Usage Type	Fixed Line ISP
ASN	AS267503
Domain Name	maxxnetlv.com.br
Country	🇧🇷 Brazil
City	Livramento do Brumado, Bahia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.141.255.192

Whois 192.141.255.192

IP Abuse Reports for 192.141.255.192:

This IP address has been reported a total of 30 times from 21 distinct sources. 192.141.255.192 was first reported on May 10th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-15 05:16:28 (2 days ago)	(mod_security) mod_security (id:210740) triggered by 192.141.255.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210740) triggered by 192.141.255.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 01:16:21.886089 2026] [security2:error] [pid 6331:tid 6331] [client 192.141.255.192:36494] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.seizetheseason.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.seizetheseason.com"] [uri "/movinon/movingon_0001.wmv"] [unique_id "atBhpV3o8lcg-2Nv502rCAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-04 05:51:02 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 192.141.255.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 192.141.255.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 01:50:56.328853 2026] [security2:error] [pid 11848:tid 11848] [client 192.141.255.192:36334] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cvtheory.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cvtheory.com"] [uri "/"] [unique_id "asHpQB19fGJflhXday1-dQAAACg"], referer: https://localcitationbuilding.site/dir/results-focused-backlinks-48982 show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-25 05:27:01 (3 weeks ago)	denied traffic to a honeypot user target.	Port Scan Hacking
Anonymous	2026-09-25 04:58:13 (3 weeks ago)	Unauthorized VPN login attempts	Hacking Brute-Force
🇩🇪 milcraft.nl	2026-09-24 20:21:39 (3 weeks ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇺🇸 ipblock.com	2026-09-21 03:19:00 (3 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-20 13:58:58 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 ipblock.com	2026-09-15 21:26:00 (1 month ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-07 20:14:27 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 pixelmemory.us	2026-08-24 12:54:33 (1 month ago)	2026-08-24T12:52:06 192.141.255.192 GET /Photos/Outdoors/2020-07-18%20NEOWISE%202020/raw/DSC03563.AR ... show more 2026-08-24T12:52:06 192.141.255.192 GET /Photos/Outdoors/2020-07-18%20NEOWISE%202020/raw/DSC03563.ARW.xmp Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 ... show less	Bad Web Bot
Anonymous	2026-08-18 09:54:20 (1 month ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
Anonymous	2026-08-17 19:36:13 (1 month ago)	Distributed scraper residential proxy pool — www.liquoroutletwinecellars.com /store/filtered/ (WineC ... show more Distributed scraper residential proxy pool — www.liquoroutletwinecellars.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-08-17 07:15:14 (2 months ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇺🇸 kosada.com	2026-08-17 04:41:01 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-21 19:32:05 (3 months ago)	Captured JA4H: ge20n_fd2543106793 \| Log: 192.141.255.192 - - [22/Jun/2026:02:24:38 +0700] "GET /imag ... show more Captured JA4H: ge20n_fd2543106793 \| Log: 192.141.255.192 - - [22/Jun/2026:02:24:38 +0700] "GET /images/Profil_Pegawai/ACHMAD_MAULANA_RAFI-JAS.webp HTTP/2.0" 200 37663 "https://staklim-jatim.bmkg.go.id/index.php/profil/profil-pegawai" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.6536.1544 Mobile Safari/537.36" ge20n_accept,user-agent,referer,sec-fetch-dest,accept-encoding,accept-language,host... ... show less	Email Spam Hacking

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 119.192.128.163

🇳🇱 193.47.62.187

🇲🇴 182.93.50.90

🇦🇷 181.46.39.99

🇳🇱 176.65.139.201

🇳🇱 172.70.47.12

🇳🇱 172.70.47.11

🇺🇸 162.216.150.184

🇺🇸 147.185.132.216

🇺🇸 144.225.6.182

🇨🇳 101.237.128.147

🇫🇷 91.231.89.77

🇺🇸 71.30.133.246

🇺🇸 66.132.224.23

🇺🇸 66.132.195.104

🇩🇴 45.172.152.74

🇺🇸 216.73.217.43

🇺🇸 205.210.31.103

🇪🇹 196.189.88.100

🇺🇸 185.228.72.128