167.58.99.45
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Administracion Nacional de Telecomunicaciones
- Usage Type
- Fixed Line ISP
- ASN
- AS6057
- Hostname(s)
- r167-58-99-45.dialup.adsl.anteldata.net.uy
- Domain Name
- antel.com.uy
- Country
- 🇺🇾 Uruguay
- City
- Montevideo, Montevideo Department
No reports in the last 60 days
167.58.99.45 has been reported 13 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
13 from
13 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇱 nfsec.pl |
Detected: TCP scan on port: 5900 with flags: SYN
|
Port Scan | |
| Anonymous |
Trying ports that it shouldn't be.
|
Port Scan Hacking Exploited Host | |
| 🇩🇪 crnpekgoz |
[PortScan] Risk=100 ASN=6057 (portscan) Port=5900 HoneypotTrap=true | Reported by WardenIPS: https://github.com/msncakma/WardenIPS
|
Port Scan | |
| 🇺🇸 drewf.ink |
[10:06] Attempted VNC authentication (DES challenge-response)
|
Hacking Brute-Force | |
| 🇦🇹 begou.dev |
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/5900
|
Port Scan | |
| 🇨🇦 Slackin' Jack |
Triggered honeypot on port 5900. (167.58.99.45)
|
Port Scan | |
| 🇩🇪 anycast_ac |
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc).
Family fingerprint: vnc-scanner
Commands captured:
$ client RFB version: RFB 003.003
$ server challenge: 618edcf0860e388dc40e6b6e6ddbcd27
|
DDoS Attack | |
| 🇩🇪 _ArminS_ |
SP-Scan 49921:5900 detected 2026.09.01 10:10:41
blocked until 2026.10.21 03:13:28
|
Port Scan | |
| 🇩🇪 XYCoderXY |
SSH/web brute-force & exploit scanning against lumerux.com (automated report).
|
Brute-Force SSH | |
| Anonymous |
Tried our host z.
|
Port Scan Hacking Exploited Host | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 5900 (VNC) on a host running no such service. Automated port-scan detection at 2026-09-01T07:49:49Z.
|
Port Scan | |
| 🇺🇸 wristhulk |
Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist).
|
Brute-Force | |
| 🇲🇾 syokadmin |
(mod_security) mod_security (id:949110) triggered by 167.58.99.45 (UY/Uruguay/r167-58-99-45.dialup.adsl.anteldata.net.uy): 1 in the last 3600 secs
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown