JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.47.126.240

181.47.126.240 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 58%: ?

58%

ISP	Telecentro S.A. - Clientes Residenciales
Usage Type	Fixed Line ISP
ASN	AS27747
Hostname(s)	cpe-181-47-126-240.telecentro-reversos.com.ar
Domain Name	telecentro.com.ar
Country	🇦🇷 Argentina
City	Hurlingham, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.47.126.240

Whois 181.47.126.240

IP Abuse Reports for 181.47.126.240:

This IP address has been reported a total of 53 times from 35 distinct sources. 181.47.126.240 was first reported on August 7th 2026, and the most recent report was 50 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-27 09:38:18 (50 minutes ago)	(mod_security) mod_security (id:210350) triggered by 181.47.126.240 (cpe-181-47-126-240.telecentro-r ... show more (mod_security) mod_security (id:210350) triggered by 181.47.126.240 (cpe-181-47-126-240.telecentro-reversos.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 05:38:13.206060 2026] [security2:error] [pid 23986:tid 23986] [client 181.47.126.240:27272] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|donutlocations.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "donutlocations.com"] [uri "/swillerbees-flagler-beach.html"] [unique_id "auBxBV8EsUWKUwH0CV_4hAAAAAU"], referer: https://donutlocations.com/florida-donuts.html show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-27 08:33:04 (1 hour ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /agence \| ua: Mozilla/5.0 (Macin ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /agence \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15 show less	Bad Web Bot
🇷🇺 AbuseIPDB informer	2026-10-15 16:19:05 (1 week ago)	nfdump top talker: 181.47.126.240 \| first seen 2026-10-15 19:19:05 \| duration 57.344s \| flows=25 \| p ... show more nfdump top talker: 181.47.126.240 \| first seen 2026-10-15 19:19:05 \| duration 57.344s \| flows=25 \| packets=109461 \| bytes=145364208 \| pps=1908 \| bps=20279604 \| bpp=1328 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
Anonymous	2026-10-06 11:38:53 (2 weeks ago)	MikroTik Enterprise Honeypot	Port Scan
🇸🇪 venix	2026-10-03 00:26:05 (3 weeks ago)	Unauthorized connection attempt detected from IP address 181.47.126.240 to port 23 (compute01.malmo)	Brute-Force Exploited Host
🇫🇷 EDSL	2026-10-01 23:59:09 (3 weeks ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Telnet IoT Attack)	Brute-Force IoT Targeted Port Scan
🇧🇷 noconex	2026-09-28 12:40:08 (4 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 181.47.126 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 181.47.126.240 show less	Port Scan Brute-Force SSH
🇩🇪 bescared	2026-09-28 03:25:01 (4 weeks ago)	F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -c23856ef-	Port Scan
🇺🇸 鬼影233	2026-09-26 19:26:31 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇹🇷 pashait	2026-09-25 15:32:59 (1 month ago)	Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-09-25 15:32	SSH Brute-Force
🇺🇸 鬼影233	2026-09-24 23:52:33 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇭🇰 mutebot.net	2026-09-24 22:52:01 (1 month ago)	SRC=181.47.126.240, PROTO=TCP, SPT=59629, DPT=23	Port Scan
🇹🇷 ugurcoskun	2026-09-24 16:07:00 (1 month ago)	Seczar SecureOps — SSH Brute Force (6 events) — quarantined 43200m	SSH Brute-Force
🇧🇷 noconex	2026-09-22 12:22:02 (1 month ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 181.47.126 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 181.47.126.240 show less	Port Scan Brute-Force SSH
🇵🇱 mkey	2026-09-20 20:00:02 (1 month ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS= ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS=22,23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-09-20 21:58:00 \| LAST=2026-09-20 21:58:00. Last seen 2026-09-20 21:58:00. show less	Port Scan

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.133

🇸🇮 102.220.160.144

🇺🇸 50.6.205.37

🇩🇪 45.139.104.172

🇺🇸 35.231.158.19

🇬🇧 35.203.210.24

🇨🇦 34.118.158.233

🇧🇷 16.5.0.241

🇮🇳 4.240.126.25

🇰🇷 218.149.216.120

🇦🇷 167.250.118.12

🇰🇷 112.216.120.67

🇳🇱 94.154.43.223

🇷🇴 92.118.39.71

🇺🇸 64.83.11.130

🇮🇷 46.38.146.46

🇸🇬 43.160.192.215

🇮🇷 5.232.167.91

🇨🇳 220.181.108.178

🇲🇦 196.117.69.77