AbuseIPDB » 201.250.0.129
201.250.0.129
This IP was reported 10 times. Confidence of
Abuse
is 5% : ?
ISP
Telefonica de Argentina
Usage Type
Fixed Line ISP
ASN
AS22927
Hostname(s)
201-250-0-129.mrse.com.ar
Domain Name
telefonica.com.ar
Country
๐ฆ๐ท
Argentina
City
Chimbas, San Juan
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 201.250.0.129 :
This IP address has been reported a total of
10
times from
7 distinct
sources.
201.250.0.129 was first reported on
December 7th 2023 , and the most recent report was
1 hour ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
TPI-Abuse
2026-10-27 00:38:35
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 201.250.0.129 (201-250-0-129.mrse.com.ar): 1 in ...
show more
(mod_security) mod_security (id:210350) triggered by 201.250.0.129 (201-250-0-129.mrse.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 20:38:30.862808 2026] [security2:error] [pid 23558:tid 23558] [client 201.250.0.129:33122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||scoretopicturenetwork.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "scoretopicturenetwork.com"] [uri "/"] [unique_id "at_yhiTz15ggv77S3aLaLQAAAAU"], referer: https://five.co.in/redirect.php?ref_host=roboyell.com.br
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-08-24 19:03:44
(2 months ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ฆ๐บ
PetePK
2026-08-24 00:59:05
(2 months ago)
Probed 2 time(s): TCP/22, TCP/23
Port Scan
๐บ๐ธ
kosada.com
2026-07-26 23:19:47
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2025-11-22 16:09:30
(11 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-17 04:59:33
(11 months ago)
scanning http requests from known botnet
Web App Attack
๐ณ๐ฑ
exxos
2025-07-31 03:21:24
(1 year ago)
HTTP1.x attacks
DDoS Attack
๐ณ๐ฑ
exxos
2025-07-30 02:28:28
(1 year ago)
HTTP1.x attacks
DDoS Attack
๐บ๐ธ
TPI-Abuse
2025-06-27 19:35:20
(1 year ago)
(mod_security) mod_security (id:217210) triggered by 201.250.0.129 (201-250-0-129.speedy.com.ar): 1 ...
show more
(mod_security) mod_security (id:217210) triggered by 201.250.0.129 (201-250-0-129.speedy.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 27 15:35:15.194415 2025] [security2:error] [pid 3084945:tid 3084945] [client 201.250.0.129:49910] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||accordionfactory.com|F|4"] [data "GET http://accordionfactory.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "accordionfactory.com"] [uri "/"] [unique_id "aF7yc7ndRdo-Jexzcgl47QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
H. Hampel
2023-12-07 08:47:58
(2 years ago)
Spam.
Email Spam
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: