JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.112.185.2

190.112.185.2 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 67%: ?

67%

ISP	Jumpnet Soluciones de Internet S.R.L.
Usage Type	Fixed Line ISP
ASN	AS52363
Domain Name	jumpnetcorp.com.ar
Country	🇦🇷 Argentina
City	Buenos Aires, Buenos Aires F.D.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.112.185.2

Whois 190.112.185.2

IP Abuse Reports for 190.112.185.2:

This IP address has been reported a total of 61 times from 39 distinct sources. 190.112.185.2 was first reported on August 26th 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-10-22 12:28:21 (15 hours ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)	Hacking
🇫🇷 security.rdmc.fr	2026-10-22 09:25:28 (18 hours ago)	Port Scan Attack proto:TCP src:57238 dst:23	Port Scan
🇺🇸 xmission.com	2026-10-21 15:21:46 (1 day ago)	Blocked by UFW (TCP on 22) Source port: 42140 TTL: 50 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 42140 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 190.112.185.2) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇬🇧 KTSTechnology	2026-10-18 09:45:10 (4 days ago)	Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL	Port Scan
Anonymous	2026-10-17 06:18:47 (5 days ago)	MikroTik Enterprise Honeypot	Port Scan
🇬🇧 wiredalter	2026-10-11 00:47:12 (1 week ago)	Blocked by fail2ban on gVPS [23/tcp] Source Port: 56142 TTL: 49 Packet Length: 60 TOS: 0x00 Analyze ... show more Blocked by fail2ban on gVPS [23/tcp] Source Port: 56142 TTL: 49 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-10-10 05:48:17 (1 week ago)	Port Scan Attack proto:TCP src:38406 dst:23	Port Scan
🇺🇸 lostswordfish.com	2026-10-09 04:44:04 (1 week ago)	Wordfence waf block on registrymatters	Web App Attack
🇺🇸 TPI-Abuse	2026-10-06 00:47:07 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 190.112.185.2 (190-112-185-2.jumpnetcorp.com.ar ... show more (mod_security) mod_security (id:210350) triggered by 190.112.185.2 (190-112-185-2.jumpnetcorp.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 20:46:58.887755 2026] [security2:error] [pid 28854:tid 28854] [client 190.112.185.2:55300] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mikeberro.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mikeberro.com"] [uri "/"] [unique_id "asRFApewiiI3Vn9404PDgwAAAAk"], referer: https://createdofollowbacklinks.site/dir/seo-optimized-backlinks-136440 show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Maurice	2026-10-04 01:53:22 (2 weeks ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/ ... show more Honeypot hit: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Port Scan
🇺🇸 TPI-Abuse	2026-09-28 20:13:05 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 190.112.185.2 (190-112-185-2.jumpnetcorp.com.ar ... show more (mod_security) mod_security (id:210350) triggered by 190.112.185.2 (190-112-185-2.jumpnetcorp.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:12:59.618855 2026] [security2:error] [pid 8386:tid 8386] [client 190.112.185.2:54152] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ampstudio.eu\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ampstudio.eu"] [uri "/"] [unique_id "arrKS_zWpVdYR7eN6g8argAAAB8"], referer: https://sopaderock.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 Countryman	2026-09-28 00:10:01 (3 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇺🇸 鬼影233	2026-09-27 06:40:18 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-26 05:16:06 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 190.112.185.2 (190-112-185-2.jumpnetcorp.com.ar ... show more (mod_security) mod_security (id:210350) triggered by 190.112.185.2 (190-112-185-2.jumpnetcorp.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 01:16:00.705116 2026] [security2:error] [pid 28447:tid 28447] [client 190.112.185.2:35681] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|eutoc.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "eutoc.com"] [uri "/"] [unique_id "ardVEEJW27b3Cx2BGMaJXAAAACQ"], referer: https://bulkbacklinkanalysis.online/dir/organic-seo-links-67713 show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Tilellit.PRO	2026-09-16 00:58:47 (1 month ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 194.5.53.2

🇬🇧 193.163.125.45

🇺🇸 165.245.174.113

🇸🇾 129.224.207.164

🇨🇳 120.48.52.177

🇺🇸 64.24.16.141

🇹🇼 60.199.224.2

🇮🇱 40.223.162.95

🇧🇪 34.53.172.208

🇨🇳 219.154.222.215

🇺🇸 199.19.225.232

🇺🇸 173.239.214.106

🇳🇱 161.35.146.204

🇫🇮 147.185.133.181

🇹🇼 114.46.14.66

🇫🇷 91.196.152.150

🇫🇷 91.196.152.16

🇧🇪 35.233.45.17

🇨🇴 2800:484:a378:d1f0:f44c:f70a:934c:e8ce

🇳🇱 193.176.31.254