JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.199.148.170

181.199.148.170 was found in our database!

This IP was reported 2 times. Confidence of Abuse is 12%: ?

12%

ISP	Teledifusora S.A.
Usage Type	Fixed Line ISP
ASN	AS27813
Hostname(s)	170.148.199.181.ros.express.com.ar
Domain Name	express.com.ar
Country	🇦🇷 Argentina
City	San Lorenzo, Santa Fe

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.199.148.170

Whois 181.199.148.170

IP Abuse Reports for 181.199.148.170:

This IP address has been reported a total of 2 times from 2 distinct sources. 181.199.148.170 was first reported on June 2nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 mypatricks	2026-07-02 02:59:34 (1 day ago)	181.199.148.170 \| Port: 11032 \| DNS: 170.148.199.181.ros.express.com.ar 2026-07-02T10:59:33+08:00 Am ... show more 181.199.148.170 \| Port: 11032 \| DNS: 170.148.199.181.ros.express.com.ar 2026-07-02T10:59:33+08:00 America/Argentina/Cordoba \| Fake HTTP Protocol detected! \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /account/create/?b0808140f5abe562d5f09c3933ea1795=1782020925 \| Ref: - \| Country: AR/Argentina/−03:00 IP City: San Lorenzo Windows a14a65111a539b20-EZE/Buenos Aires, Argentina 1 hits/0 secs Robots 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇮🇩 hermawan	2026-06-02 03:26:17 (1 month ago)	[Tue Jun 02 10:26:16.542400 2026] [security2:error] [pid 97305:tid 139858220652224] [client 181.199. ... show more [Tue Jun 02 10:26:16.542400 2026] [security2:error] [pid 97305:tid 139858220652224] [client 181.199.148.170:59142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya"] [unique_id "ah5NWETVRAZ-1Fieg_5C3gAAVgY"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[97336] [Fd2i33y8rmA] [ah5NWETVRAZ-1Fieg_5C3gAAVgY] keep_alive=[1] [2026-06- ... show less	Email Spam Hacking

Showing 1 to 2 of 2 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 103.52.153.215

🇷🇺 92.255.190.69

🇺🇸 2604:a880:2:d1:0:1:6abe:c001

🇧🇪 198.235.24.156

🇮🇳 122.187.230.184

🇮🇩 103.164.57.37

🇺🇸 66.132.172.232

🇧🇪 34.77.240.224

🇨🇦 20.104.50.116

🇬🇧 193.176.29.28

🇷🇺 185.94.111.1

🇮🇳 182.95.123.202

🇺🇸 154.28.198.170

🇺🇸 152.32.205.153

🇧🇬 87.246.54.153

🇳🇱 81.19.216.88

🇷🇺 77.66.192.139

🇳🇱 34.34.103.195

🇰🇷 222.104.76.94

🇬🇧 195.96.139.178