JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.212.205.133

190.212.205.133 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 30%: ?

30%

ISP	TELEMATIX/ ENITEL
Usage Type	Fixed Line ISP
ASN	AS14754
Hostname(s)	133-205-212-190.enitel.net.ni
Domain Name	enitel.net.ni
Country	🇳🇮 Nicaragua
City	Managua, Managua Department

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.212.205.133

Whois 190.212.205.133

IP Abuse Reports for 190.212.205.133:

This IP address has been reported a total of 15 times from 13 distinct sources. 190.212.205.133 was first reported on November 17th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-17 03:04:55 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 190.212.205.133 (133-205-212-190.enitel.net.ni) ... show more (mod_security) mod_security (id:210350) triggered by 190.212.205.133 (133-205-212-190.enitel.net.ni): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:04:48.646309 2026] [security2:error] [pid 15746:tid 15746] [client 190.212.205.133:15118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cameronwv.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cameronwv.com"] [uri "/"] [unique_id "aqtY0Eoa_kd3GjcWe-WRtQAAABk"], referer: https://printingatlas.com/self-service/west-virginia show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-07 00:44:57 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇩🇪 LRob	2026-09-03 02:20:31 (2 weeks ago)	L7 DDoS: hammering a site's endpoints (login page, AJAX, dynamic pages) with automated requests far ... show more L7 DDoS: hammering a site's endpoints (login page, AJAX, dynamic pages) with automated requests far beyond any human use \| path: /calendrier-2/action~agenda/cat_ids~172,193,561/tag_ids~611,680,639,791,501,655/request_format~json/ \| 2026-09-03 02:20 UTC show less	DDoS Attack Web App Attack
🇩🇪 pltcldvlpr	2026-08-31 02:14:16 (2 weeks ago)	Bogus Useragent: 190.212.205.133 - - [31/Aug/2026:04:14:15 +0200] "GET /protocol?id=bb_4_82&offset=2 ... show more Bogus Useragent: 190.212.205.133 - - [31/Aug/2026:04:14:15 +0200] "GET /protocol?id=bb_4_82&offset=250&seq=333 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0) AppleWebKit/535.37.2 (KHTML, like Gecko) Version/4.0.3 Safari/535.37.2" asn=14754 org="TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA" country=NI ... show less	Bad Web Bot
🇩🇪 Oakley	2026-08-18 17:39:51 (4 weeks ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇺🇸 stechusa	2026-07-12 04:09:14 (2 months ago)	ELEVATED_THREAT \| 472 IPs targeting /brand.html \| URL template shared by 201 IPs: /brand.html?bulb_s ... show more ELEVATED_THREAT \| 472 IPs targeting /brand.html \| URL template shared by 201 IPs: /brand.html?bulb_shape=&bulb_shape_type=&bulb_type=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.99, unique_ips=657) show less	Bad Web Bot DDoS Attack
🇩🇪 Vegascosmetics	2026-07-04 11:29:24 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇰🇷 zlhIcd	2026-06-17 00:54:12 (3 months ago)	190.212.205.133 - - [15/Jun/2026:23:14:34 +0900] "GET /pcwiki/index.php?days=30&from=20251214080245& ... show more 190.212.205.133 - - [15/Jun/2026:23:14:34 +0900] "GET /pcwiki/index.php?days=30&from=20251214080245&hideanons=1&hidemyself=1&limit=50&target=%EC%82%B4%EA%B1%B0&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.3; rv:128.0) Gecko/20100101 Firefox/128.0" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: fd8a75e9-7ad9-4605-bec7-39ad26683952	DDoS Attack
🇦🇺 MAGIC	2026-05-08 01:13:47 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 HandyTreff.de	2026-05-03 21:43:48 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -59.096 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -59.096 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇬🇧 Oakley	2026-04-29 00:07:33 (4 months ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇳🇱 maxxsense	2026-03-28 00:26:30 (5 months ago)	190.212.205.133 (NI/Nicaragua/133-205-212-190.enitel.net.ni), 12 distributed imapd attacks on accoun ... show more 190.212.205.133 (NI/Nicaragua/133-205-212-190.enitel.net.ni), 12 distributed imapd attacks on account [redacted] show less	Brute-Force
Anonymous	2025-11-21 01:15:16 (9 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-17 00:47:10 (10 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 194.163.185.4

🇬🇧 193.163.125.213

🇺🇸 185.191.171.8

🇧🇬 82.147.142.205

🇱🇹 62.60.130.242

🇮🇳 59.180.163.131

🇳🇱 45.148.10.152

🇺🇸 44.211.76.132

🇮🇳 38.137.11.14

🇺🇸 3.82.153.206

🇲🇦 196.65.22.237

🇳🇱 193.47.62.69

🇲🇦 160.176.2.141

🇫🇮 147.185.133.207

🇩🇪 66.234.148.106

🇺🇸 66.132.224.89

🇳🇱 45.198.224.184

🇺🇸 3.238.180.185

🇺🇸 195.184.76.115

🇨🇴 190.29.27.34