JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.206.2.225

190.206.2.225 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 59%: ?

59%

ISP	CANTV Servicios, Venezuela
Usage Type	Fixed Line ISP
ASN	AS8048
Hostname(s)	190-206-2-225.pod-00-p64.cantv.net
Domain Name	cantv.net
Country	🇻🇪 Venezuela (Bolivarian Republic of)
City	Ciudad Guayana, Bolivar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.206.2.225

Whois 190.206.2.225

IP Abuse Reports for 190.206.2.225:

This IP address has been reported a total of 20 times from 10 distinct sources. 190.206.2.225 was first reported on June 2nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-05 20:05:01 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 190.206.2.225 (190-206-2-225.pod-00-p64.cantv.n ... show more (mod_security) mod_security (id:225170) triggered by 190.206.2.225 (190-206-2-225.pod-00-p64.cantv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 16:04:57.494359 2026] [security2:error] [pid 29091:tid 29091] [client 190.206.2.225:49783] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|artevoix.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artevoix.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiMr6ab4dgecA9UhpicrpwAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 19:04:46 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 190.206.2.225 (190-206-2-225.pod-00-p64.cantv.n ... show more (mod_security) mod_security (id:240335) triggered by 190.206.2.225 (190-206-2-225.pod-00-p64.cantv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 15:04:40.104933 2026] [security2:error] [pid 1157:tid 1157] [client 190.206.2.225:59775] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 190.206.2.225 (+1 hits since last alert)\|proyectando.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "proyectando.com"] [uri "/xmlrpc.php"] [unique_id "aiMdyKffPDuQCQ1BOMj10wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-05 01:08:51 (2 days ago)	190.206.2.225 - - [05/Jun/2026:03:08:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/13.0 ... show more 190.206.2.225 - - [05/Jun/2026:03:08:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/13.0; WordPress/6.1; http://site57281764.com" 190.206.2.225 - - [05/Jun/2026:03:08:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/13.0; WordPress/6.1; http://site57281764.com" 190.206.2.225 - - [05/Jun/2026:03:08:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" 190.206.2.225 - - [05/Jun/2026:03:08:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" 190.206.2.225 - - [05/Jun/2026:03:08:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" ... show less	Brute-Force Web App Attack
🇩🇪 konseptit	2026-06-05 00:40:15 (2 days ago)	(wordpress) Failed wordpress login from 190.206.2.225 (VE/Venezuela/190-206-2-225.pod-00-p64.cantv.n ... show more (wordpress) Failed wordpress login from 190.206.2.225 (VE/Venezuela/190-206-2-225.pod-00-p64.cantv.net) show less	Brute-Force
🇩🇪 abdubhai	2026-06-05 00:39:01 (2 days ago)	190.206.2.225 - - [05/Jun/2026:0 ...	Brute-Force
🇩🇪 grassau.com	2026-06-05 00:08:41 (2 days ago)	(wordpress) Failed wordpress login from 190.206.2.225 (VE/Venezuela/Distrito Federal/Caracas/190-206 ... show more (wordpress) Failed wordpress login from 190.206.2.225 (VE/Venezuela/Distrito Federal/Caracas/190-206-2-225.pod-00-p64.cantv.net) show less	Brute-Force
Anonymous	2026-06-04 21:55:22 (2 days ago)	[ns31.kdns.gr] httpd-xmlrpc-post: sites=dimitrisanousis.com; logs=/var/log/httpd/domains/dimitrisano ... show more [ns31.kdns.gr] httpd-xmlrpc-post: sites=dimitrisanousis.com; logs=/var/log/httpd/domains/dimitrisanousis.com.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 20:54:26 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 190.206.2.225 (190-206-2-225.pod-00-p64.cantv.n ... show more (mod_security) mod_security (id:240335) triggered by 190.206.2.225 (190-206-2-225.pod-00-p64.cantv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 16:54:22.190134 2026] [security2:error] [pid 5054:tid 5054] [client 190.206.2.225:65515] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 190.206.2.225 (+1 hits since last alert)\|lowkeytiki.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lowkeytiki.com"] [uri "/xmlrpc.php"] [unique_id "aiHl_mynklw0QZ_7Vd7EGAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-04 20:24:10 (2 days ago)	Attac	Brute-Force
🇺🇸 WeekendWeb	2026-06-04 14:54:14 (3 days ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 20:30:18 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 190.206.2.225 (190-206-2-225.pod-00-p64.cantv.n ... show more (mod_security) mod_security (id:240335) triggered by 190.206.2.225 (190-206-2-225.pod-00-p64.cantv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 16:30:13.387944 2026] [security2:error] [pid 11488:tid 11488] [client 190.206.2.225:53672] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 190.206.2.225 (+1 hits since last alert)\|climasyequipos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "climasyequipos.com"] [uri "/xmlrpc.php"] [unique_id "aiCO1f-l4EgCGpagRsZbrgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 20:02:12 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 190.206.2.225 (190-206-2-225.pod-00-p64.cantv.n ... show more (mod_security) mod_security (id:240335) triggered by 190.206.2.225 (190-206-2-225.pod-00-p64.cantv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 16:02:08.106537 2026] [security2:error] [pid 16275:tid 16275] [client 190.206.2.225:62795] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 190.206.2.225 (+1 hits since last alert)\|westernmassaa.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "westernmassaa.net"] [uri "/xmlrpc.php"] [unique_id "aiCIQFfQS9NYXjm09hcpvwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-03 15:31:40 (4 days ago)	[redacted] 190.206.2.225 - - [03/Jun/2026:17:30:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "W ... show more [redacted] 190.206.2.225 - - [03/Jun/2026:17:30:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 190.206.2.225 - - [03/Jun/2026:17:31:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.5; WordPress/6.4; http://site38163179.com" [redacted] 190.206.2.225 - - [03/Jun/2026:17:31:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 190.206.2.225 - - [03/Jun/2026:17:31:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 190.206.2.225 - - [03/Jun/2026:17:31:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.0; WordPress/6.2; http://site20484895.com" ... show less	Hacking Web App Attack
🇩🇪 grassau.com	2026-06-03 15:01:50 (4 days ago)	(wordpress) Failed wordpress login from 190.206.2.225 (VE/Venezuela/Distrito Federal/Caracas/190-206 ... show more (wordpress) Failed wordpress login from 190.206.2.225 (VE/Venezuela/Distrito Federal/Caracas/190-206-2-225.pod-00-p64.cantv.net) show less	Brute-Force
🇲🇹 Malta	2026-06-03 10:22:25 (4 days ago)	190.206.2.225 - - [03/Jun/2026:12:22:25 +0200] "POST /xmlrpc.php HTTP/1.1" "WordPress.com; https://w ... show more 190.206.2.225 - - [03/Jun/2026:12:22:25 +0200] "POST /xmlrpc.php HTTP/1.1" "WordPress.com; https://wordpress.com" show less	Hacking Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2404:6800:4003:c03::12b

🇺🇦 185.190.149.225

🇻🇳 103.186.101.237

🇺🇸 74.125.80.23

🇺🇸 52.188.189.6

🇺🇸 44.204.64.190

🇪🇸 5.61.202.77

🇺🇸 3.82.52.177

🇺🇸 216.172.190.116

🇺🇸 216.25.89.101

🇬🇧 198.244.242.252

🇬🇧 198.244.242.203

🇬🇧 185.247.137.203

🇩🇪 139.162.146.13

🇧🇩 103.171.68.74

🇸🇬 103.13.207.26

🇷🇺 95.165.27.83

🇺🇸 74.7.227.50

🇨🇳 59.175.155.252

🇨🇳 58.47.137.190