JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.116.200.145

181.116.200.145 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 25%: ?

25%

ISP	AMX Argentina S.A.
Usage Type	Fixed Line ISP
ASN	AS11664
Domain Name	claro.com.ar
Country	🇦🇷 Argentina
City	Salta, Salta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.116.200.145

Whois 181.116.200.145

IP Abuse Reports for 181.116.200.145:

This IP address has been reported a total of 12 times from 11 distinct sources. 181.116.200.145 was first reported on November 24th 2023, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 garrymenata	2026-08-24 01:05:58 (12 hours ago)	181.116.200.145 - - [24/Aug/2026:02:00:52 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; ... show more 181.116.200.145 - - [24/Aug/2026:02:00:52 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 181.116.200.145 - - [24/Aug/2026:02:00:54 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 181.116.200.145 - - [24/Aug/2026:02:00:56 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇫🇷 Zkillu	2026-08-19 22:11:53 (4 days ago)	UDP flood (DDoS) vs AS215599: 464062 pkts / 663.62 MB to UDP 80/8443 across 415 dst IP(s), 2026-08-1 ... show more UDP flood (DDoS) vs AS215599: 464062 pkts / 663.62 MB to UDP 80/8443 across 415 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:11:53 (4 days ago)	UDP flood (DDoS) vs AS215599: 464062 pkts / 663.62 MB to UDP 80/8443 across 415 dst IP(s), 2026-08-1 ... show more UDP flood (DDoS) vs AS215599: 464062 pkts / 663.62 MB to UDP 80/8443 across 415 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇹🇷 SeczarSecureOps	2026-08-17 01:19:04 (1 week ago)	Seczar SecureOps — SSH Brute Force (6 events) — quarantined 43200m on ABB-GATE	SSH Brute-Force
🇺🇸 ne1for23	2026-08-17 00:58:06 (1 week ago)	Unauthorized access to SSH at 17/Aug/2026:00:58:06 +0000.	Port Scan SSH
🇩🇪 SCHAPPY	2026-02-18 18:00:21 (6 months ago)	Unauthorized IMAP/POP3 connection attempts.	Email Spam
Anonymous	2025-12-04 08:12:50 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.04 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-22 21:17:09 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-11-15 03:32:17 (9 months ago)	[Sat Nov 15 10:30:10.357663 2025] [security2:error] [pid 437795:tid 140212898363072] [client 181.116 ... show more [Sat Nov 15 10:30:10.357663 2025] [security2:error] [pid 437795:tid 140212898363072] [client 181.116.200.145:23952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36 request_line = GET /index.php/buku/503-buku-edisi-setiap-6-bulan-sekali/buku-prakiraan-musim/buku-prakiraan-musim-hujan/buku-prakiraan-musim-hujan-tahun-2015 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/buku/503-buku-edisi-setiap-6-bulan-sekali/buku-prakiraan-musim/buku-prakiraan-musim-hujan/buku-prakiraan-musim-hujan-tahun-2015"] [unique_id "aRfzwthRZrcViCCzpvDzdAAAAkI"] [staklim-jatim.bmkg.go.id] [ ... show less	Hacking Web App Attack
Anonymous	2025-11-14 11:36:00 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇫🇷 bigorre.org	2025-09-27 16:35:37 (10 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇬🇧 Steve	2023-11-24 21:23:50 (2 years ago)	Attempts against non-existent wordpress site	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 216.226.77.30

🇺🇸 195.184.76.110

🇳🇱 176.65.149.220

🇳🇱 107.189.26.103

🇩🇪 104.239.56.57

🇻🇳 58.186.20.101

🇺🇸 20.65.193.121

🇭🇰 220.246.47.169

🇱🇹 213.176.26.123

🇨🇳 202.101.144.44

🇨🇳 175.170.144.19

🇺🇸 170.130.187.38

🇺🇸 135.237.126.245

🇰🇷 124.63.91.148

🇨🇳 116.177.172.108

🇦🇺 114.31.75.33

🇫🇷 91.231.89.224

🇺🇸 74.82.47.5

🇺🇸 64.225.123.115

🇺🇸 47.251.124.248