JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.46.185.99

181.46.185.99 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 34%: ?

34%

ISP	Telecentro S.A. - Clientes Residenciales
Usage Type	Fixed Line ISP
ASN	AS27747
Hostname(s)	cpe-181-46-185-99.telecentro-reversos.com.ar
Domain Name	telecentro.com.ar
Country	🇦🇷 Argentina
City	Lomas de Zamora, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.46.185.99

Whois 181.46.185.99

IP Abuse Reports for 181.46.185.99:

This IP address has been reported a total of 46 times from 26 distinct sources. 181.46.185.99 was first reported on September 10th 2024, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-19 20:13:56 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 181.46.185.99 (cpe-181-46-185-99.telecentro-rev ... show more (mod_security) mod_security (id:210492) triggered by 181.46.185.99 (cpe-181-46-185-99.telecentro-reversos.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 16:13:43.594508 2026] [security2:error] [pid 19362:tid 19362] [client 181.46.185.99:47367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ctjcisenate.org"] [uri "/config/.env.qa"] [unique_id "aq7s93SzVUBEZ2rUfplh9QAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 noconex	2026-08-25 20:54:05 (3 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 181.46.185 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 181.46.185.99 show less	Port Scan Brute-Force SSH
Anonymous	2026-08-23 06:15:15 (4 weeks ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
🇫🇷 security.rdmc.fr	2026-08-23 03:33:30 (4 weeks ago)	Port Scan Attack proto:TCP src:59177 dst:23	Port Scan
🇺🇸 MPL	2026-08-23 02:07:32 (4 weeks ago)	tcp/23	Port Scan
🇺🇸 xmission.com	2026-08-16 11:25:56 (1 month ago)	Blocked by UFW (TCP on 23) Source port: 62866 TTL: 41 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 62866 TTL: 41 Packet length: 60 TOS: 0x08 This report (for 181.46.185.99) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-08-16 07:37:24 (1 month ago)	tcp ports: 22,23 (12 or more attempts)	Port Scan
Anonymous	2026-08-16 04:41:21 (1 month ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
🇺🇸 RAP	2026-08-15 23:52:15 (1 month ago)	2026-08-15 23:52:15 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 kosada.com	2026-08-13 12:16:38 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-11 13:28:19 (2 months ago)	(mod_security) mod_security (id:217210) triggered by 181.46.185.99 (cpe-181-46-185-99.telecentro-rev ... show more (mod_security) mod_security (id:217210) triggered by 181.46.185.99 (cpe-181-46-185-99.telecentro-reversos.com.ar): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 09:28:15.431065 2026] [security2:error] [pid 12095:tid 12095] [client 181.46.185.99:4255] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.autism.mv\|F\|4"] [data "GET http://www.autism.mv HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.autism.mv"] [uri "/"] [unique_id "alJE76AckuP-Vd_OFLziFAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 15:10:29 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: f33ea243-b344-42fe-b994-8adedb9f85ca	DDoS Attack
🇬🇧 PeravixGroup	2026-05-19 03:30:46 (4 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇩🇪 zupan	2026-05-18 14:55:48 (4 months ago)	Blocked by UFW on vps [23/tcp] \| SPT: 64434 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on vps [23/tcp] \| SPT: 64434 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 206.0.29.250

🇧🇷 177.39.125.159

🇬🇧 161.35.165.170

🇧🇷 129.121.36.186

🇭🇰 104.208.108.166

🇧🇩 103.234.200.252

🇺🇸 80.76.54.93

🇬🇧 35.203.211.235

🇨🇭 34.65.18.76

🇺🇸 18.221.179.104

🇺🇸 205.210.31.43

🇯🇵 194.127.166.241

🇨🇳 180.111.0.21

🇨🇳 118.145.237.236

🇨🇿 109.172.8.109

🇨🇳 94.231.206.2

🇹🇭 43.229.77.162

🇺🇸 34.139.74.158

🇨🇭 34.65.74.250

🇳🇱 193.47.62.69