JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.181.122.197

168.181.122.197 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 32%: ?

32%

ISP	ENRED S.DE.R.L
Usage Type	Fixed Line ISP
ASN	AS264847
Domain Name	enredhn.com
Country	🇭🇳 Honduras
City	Tocoa, Colon Department

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.181.122.197

Whois 168.181.122.197

IP Abuse Reports for 168.181.122.197:

This IP address has been reported a total of 26 times from 19 distinct sources. 168.181.122.197 was first reported on August 3rd 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-04 14:00:51 (3 days ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /brands/rcf/shopby/manufacturer-panasonic-hp-rcf-lsi-ask_proxima-ruckus-projectiondesign-xyz.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 nodepile	2026-06-30 22:35:31 (6 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='M ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇩🇪 EGP Abuse Dept	2026-06-22 01:19:04 (2 weeks ago)	Scanning for port/service exploits on tpc-016.mach3builders.nl	Port Scan Hacking
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇺🇸 xmission.com	2026-05-24 02:39:05 (1 month ago)	Blocked by UFW (TCP on 23) Source port: 42460 TTL: 45 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 42460 TTL: 45 Packet length: 40 TOS: 0x08 This report (for 168.181.122.197) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-05-24 00:31:12 (1 month ago)	Blocked by UFW (TCP on 23) Source port: 51409 TTL: 45 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 51409 TTL: 45 Packet length: 40 TOS: 0x08 This report (for 168.181.122.197) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 RAP	2026-05-24 00:30:24 (1 month ago)	2026-05-24 00:30:24 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 MPL	2026-05-23 22:54:42 (1 month ago)	tcp/23	Port Scan
Anonymous	2026-05-22 23:16:25 (1 month ago)	Unauthorized connection to Telnet port 23	Port Scan
🇨🇦 polycoda	2026-04-30 10:14:30 (2 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 TPI-Abuse	2026-04-28 16:36:38 (2 months ago)	(mod_security) mod_security (id:217210) triggered by 168.181.122.197 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:217210) triggered by 168.181.122.197 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 12:36:34.030941 2026] [security2:error] [pid 4832:tid 4832] [client 168.181.122.197:33574] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|top44full.online\|F\|4"] [data "GET http://top44full.online HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "top44full.online"] [uri "/"] [unique_id "afDiEiT1Yturorxf9aLg1wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 _ArminS_	2026-04-24 00:44:40 (2 months ago)	SP-Scan 45546:993 detected 2026.04.24 02:44:40 blocked until 2026.06.12 19:47:27	Port Scan
🇮🇹 A000Z	2026-04-11 02:40:01 (2 months ago)	Fail2Ban: 168.181.122.197 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 168.181.122.197 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0 show less	Bad Web Bot
🇸🇬 mypatricks	2026-01-28 15:19:35 (5 months ago)	168.181.122.197 \| Port: 9227 \| DNS: 168.181.122.197 2026-01-28T23:19:34+08:00 America/Tegucigalpa \| ... show more 168.181.122.197 \| Port: 9227 \| DNS: 168.181.122.197 2026-01-28T23:19:34+08:00 America/Tegucigalpa \| Fake HTTP Protocol detected! \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /hashtag/fruit-cake/?sort=rating&order=DESC&limit=10&page=2&2a30181fbcfe41eb0d5e0f8a02e67a26=d27b8a51f4 \| Ref: - \| Country: HN/Honduras/−06:00 IP City: Trujillo Windows 9c5177fdbf09a510-SAP/SAP 1 hits/0 secs Robots 7 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
🇺🇸 kosada.com	2026-01-28 03:23:21 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.38

🇺🇸 66.132.186.205

🇺🇸 66.132.172.181

🇱🇹 62.60.130.219

🇧🇷 20.206.105.139

🇺🇸 18.216.150.102

🇦🇹 152.53.3.237

🇫🇮 147.185.133.137

🇨🇳 111.113.89.124

🇺🇸 107.207.85.199

🇺🇸 72.225.195.12

🇩🇪 69.5.169.195

🇺🇸 66.132.172.137

🇺🇸 195.184.76.132

🇺🇸 195.184.76.95

🇵🇱 176.53.159.197

🇨🇳 120.208.58.114

🇮🇩 103.190.214.241

🇸🇬 4.194.19.2

🇳🇱 2001:67c:e60:c0c:192:42:116:18