JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.12.109.204

190.12.109.204 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 69%: ?

69%

ISP	CPS
Usage Type	Fixed Line ISP
ASN	AS11014
Domain Name	cps.com.ar
Country	🇦🇷 Argentina
City	Buenos Aires, Buenos Aires F.D.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.12.109.204

Whois 190.12.109.204

IP Abuse Reports for 190.12.109.204:

This IP address has been reported a total of 47 times from 35 distinct sources. 190.12.109.204 was first reported on December 10th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 mikkopal88	2026-10-27 05:25:20 (2 hours ago)	TCP SYN port scan to Telnet 23-2323	Port Scan IoT Targeted
🇺🇸 RAP	2026-10-26 21:20:46 (10 hours ago)	2026-10-26 21:20:46 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇭🇰 mutebot.net	2026-10-26 16:23:19 (15 hours ago)	SRC=190.12.109.204, PROTO=TCP, SPT=38348, DPT=23	Port Scan
🇲🇹 Malta	2026-10-25 13:06:56 (1 day ago)	190.12.109.204 - - [25/Oct/2026:14:06:56 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Lin ... show more 190.12.109.204 - - [25/Oct/2026:14:06:56 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-10-22 14:13:34 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 190.12.109.204 (host204.109.12.190.cps.com.ar): ... show more (mod_security) mod_security (id:225170) triggered by 190.12.109.204 (host204.109.12.190.cps.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 10:13:28.826320 2026] [security2:error] [pid 30763:tid 30763] [client 190.12.109.204:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mail.local639.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.local639.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atoaCFJhdN8YTEZifgK5xAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-10-22 04:27:18 (5 days ago)	Port Scan Attack proto:TCP src:37402 dst:23	Port Scan
🇺🇸 TPI-Abuse	2026-10-21 13:10:35 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 190.12.109.204 (host204.109.12.190.cps.com.ar): ... show more (mod_security) mod_security (id:225170) triggered by 190.12.109.204 (host204.109.12.190.cps.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 09:10:31.875221 2026] [security2:error] [pid 9457:tid 9457] [client 190.12.109.204:45414] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|exhaustthelimits.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "exhaustthelimits.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ati5x8lhr3fsG25WsGDf5wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-10-20 17:11:04 (6 days ago)	Port Scan Attack proto:TCP src:44688 dst:23	Port Scan
🇺🇸 thefuzz4	2026-10-13 02:17:51 (2 weeks ago)	SSH tarpit (endlessh): 2 unsolicited connection(s) to port 22. Automated report.	Brute-Force SSH
🇩🇪 FeG Deutschland	2026-10-11 02:26:15 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇫🇷 Kejult	2026-10-09 03:20:51 (2 weeks ago)	Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 2 application-level events across ... show more Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 2 application-level events across 2 source port(s). Sensor(s): Cowrie. show less	Port Scan
🇷🇸 Scan	2026-10-04 01:23:26 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 zupan	2026-10-03 01:13:10 (3 weeks ago)	Blocked by UFW on vps [23/tcp] \| SPT: 41448 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on vps [23/tcp] \| SPT: 41448 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇨🇿 lp	2026-09-30 12:23:37 (3 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 190.12.109.204 2026-09-30T13:53:23+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 190.12.109.204 2026-09-30T13:53:23+02:00 vpn Access-Reject 'xsekj03' station: 190.12.109.204 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-09-29 20:55:50 (3 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 190.12.109.204 2026-09-29T22:14:38+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 190.12.109.204 2026-09-29T22:14:38+02:00 vpn Access-Reject 'wetzlerm' station: 190.12.109.204 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 206.189.127.146

🇺🇸 193.3.53.4

🇨🇳 180.115.163.99

🇿🇦 165.165.123.78

🇧🇷 138.118.162.185

🇰🇷 115.90.65.132

🇺🇸 108.27.157.58

🇧🇬 78.128.112.6

🇺🇸 40.124.82.201

🇦🇺 20.53.239.152

🇺🇸 8.8.8.8

🇺🇸 2001:470:1:fb5::180

🇨🇳 218.206.136.24

🇺🇸 216.180.246.216

🇰🇷 211.200.11.218

🇷🇺 185.57.30.154

🇳🇱 159.223.3.60

🇨🇳 120.207.129.125

🇹🇼 110.25.90.235

🇧🇪 74.125.47.144