AbuseIPDB » 181.168.238.129
181.168.238.129
This IP was reported 5 times. Confidence of
Abuse
is 22% : ?
ISP
Telecom Argentina S.A.
Usage Type
Fixed Line ISP
ASN
AS7303
Hostname(s)
129-238-168-181.fibertel.com.ar
Domain Name
personal.com.ar
Country
🇦🇷
Argentina
City
Posadas, Misiones
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 181.168.238.129 :
This IP address has been reported a total of
5
times from
4 distinct
sources.
181.168.238.129 was first reported on
September 10th 2026 , and the most recent report was
1 week ago
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-07 11:44:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 181.168.238.129 (129-238-168-181.fibertel.com.a ...
show more
(mod_security) mod_security (id:210492) triggered by 181.168.238.129 (129-238-168-181.fibertel.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 07:43:59.220665 2026] [security2:error] [pid 21331:tid 21331] [client 181.168.238.129:32772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darkcodeproductions.com.darkcodedesign.net"] [uri "/backup/.env.bak~"] [unique_id "asYwf6cvQLHVEbnczgnVxAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-05 10:38:54
(1 week ago)
fail2ban: brute-force/credential spraying against mail (IMAP/POP/webmail) — rmnet.it
Brute-Force
2026-09-24 14:31:29
(3 weeks ago)
Unauthorized VPN login attempts
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-09-15 20:51:41
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 181.168.238.129 (129-238-168-181.fibertel.com.a ...
show more
(mod_security) mod_security (id:210350) triggered by 181.168.238.129 (129-238-168-181.fibertel.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:51:33.792163 2026] [security2:error] [pid 13571:tid 13571] [client 181.168.238.129:59928] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bestprostate.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bestprostate.com"] [uri "/"] [unique_id "aqmv1TreW_jWgzu1VbGd_QAAAA4"], referer: https://mejorprostata.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyuuzyou
2026-09-10 17:53:44
(1 month ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ...
show more
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-10T17:53:44Z.
show less
Bad Web Bot
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: