JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.112.139.254

190.112.139.254 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 71%: ?

71%

ISP	comunet srl
Usage Type	Fixed Line ISP
ASN	AS269897
Domain Name	comunet.com.ar
Country	🇦🇷 Argentina
City	Zarate, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.112.139.254

Whois 190.112.139.254

IP Abuse Reports for 190.112.139.254:

This IP address has been reported a total of 37 times from 24 distinct sources. 190.112.139.254 was first reported on June 1st 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-09-19 15:40:51 (5 hours ago)	2026-09-19 15:40:51 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 TPI-Abuse	2026-09-18 21:06:36 (23 hours ago)	(mod_security) mod_security (id:210350) triggered by 190.112.139.254 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 190.112.139.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 17:06:28.744290 2026] [security2:error] [pid 23621:tid 23621] [client 190.112.139.254:48768] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|knoxvillelimos.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "knoxvillelimos.com"] [uri "/"] [unique_id "aq2n1JLskPVrirGeihLLJQAAACY"], referer: https://chocolatefestknoxville.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 noconex	2026-09-18 15:43:10 (1 day ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 190.112.13 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 190.112.139.254 show less	Port Scan Brute-Force SSH
🇩🇪 KPS	2026-09-18 05:15:47 (1 day ago)	PortscanT	Port Scan
🇺🇸 TPI-Abuse	2026-09-17 08:40:36 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 190.112.139.254 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 190.112.139.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:40:31.347811 2026] [security2:error] [pid 14741:tid 14741] [client 190.112.139.254:39729] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|davisllp.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "davisllp.com"] [uri "/"] [unique_id "aqunf7luraQY_PIzPfL3dQAAAB8"], referer: https://aiseochecker.space/dir/professional-backlink-building-51254 show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 noconex	2026-09-13 16:29:04 (6 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 190.112.13 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 190.112.139.254 show less	Port Scan Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-09-13 13:53:24 (6 days ago)	Port Scan Attack proto:TCP src:52390 dst:23	Port Scan
🇺🇸 sumnone	2026-09-12 22:57:26 (6 days ago)	Port probing on unauthorized port 23	Port Scan Hacking Exploited Host
🇧🇷 noconex	2026-09-08 14:51:10 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 190.112.13 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 190.112.139.254 show less	Port Scan Brute-Force SSH
🇺🇸 MPL	2026-08-25 01:21:09 (3 weeks ago)	tcp/22 (6 or more attempts)	Port Scan
Anonymous	2026-08-24 08:32:57 (3 weeks ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
🇰🇷 winter	2026-08-21 15:17:50 (4 weeks ago)	Connection attemp from 190.112.139.254 to port 22	Brute-Force SSH
🇹🇭 Sawasdee	2026-08-20 02:03:11 (4 weeks ago)	SSH break in attempt ...	SSH
🇫🇷 Zkillu	2026-08-19 20:05:11 (1 month ago)	UDP flood (DDoS) vs AS215599: 2 pkts / 0 MB to UDP 80 across 2 dst IP(s), 2026-08-19 21:46 to 2026-0 ... show more UDP flood (DDoS) vs AS215599: 2 pkts / 0 MB to UDP 80 across 2 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 20:05:11 (1 month ago)	UDP flood (DDoS) vs AS215599: 2 pkts / 0 MB to UDP 80 across 2 dst IP(s), 2026-08-19 21:46 to 2026-0 ... show more UDP flood (DDoS) vs AS215599: 2 pkts / 0 MB to UDP 80 across 2 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 211.149.143.207

🇹🇷 201.4.69.176

🇻🇳 171.234.9.32

🇺🇸 132.148.73.100

🇵🇭 115.85.61.229

🇺🇦 31.42.167.3

🇨🇳 220.202.112.158

🇺🇸 216.230.71.138

🇹🇷 212.133.193.83

🇧🇼 168.167.228.123

🇺🇸 136.119.254.79

🇨🇿 78.44.192.210

🇮🇳 64.227.191.20

🇫🇷 212.129.7.56

🇧🇷 201.11.39.82

🇲🇽 187.189.142.23

🇰🇷 175.45.204.121

🇮🇳 152.58.154.216

🇮🇳 122.168.123.73

🇱🇹 84.15.181.16